moloch--/cve-2016-1764

PoC

Extraction of iMessage Data via XSS

view exploit source poc_in_githubauthor moloch--published 2016-04-08catalog poc_in_github

exploited CVEs (1)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2016-1764US	medium4.3	2.63% (85th)	Exploit	2016-03-24
The Content Security Policy (CSP) implementation in Messages in Apple OS X before 10.11.4 allows remote attackers to obtain sensitive information via a javascript: URL.

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.