| عنوان | alaneuler batteryKid v2.1 Missing Authentication for Critical Function |
|---|
| الوصف | batteryKid for macOS up to 2,1 registers a root-privileged XPC helper (me.alaneuler.batteryKid.PrivilegeHelper) that unconditionally accepts incoming connections without client validation. The helper exposes methods to read and write System Management Controller (SMC) keys, allowing any local process to invoke privileged hardware operations. |
|---|
| المصدر | ⚠️ https://github.com/SwayZGl1tZyyy/n-days/blob/main/batteryKid/README.md |
|---|
| المستخدم | SwayZGl1tZyyy (UID 88771) |
|---|
| ارسال | 25/08/2025 08:03 PM (8 أشهر منذ) |
|---|
| الاعتدال | 01/09/2025 11:06 PM (7 days later) |
|---|
| الحالة | تمت الموافقة |
|---|
| إدخال VulDB | 322142 [alaneuler batteryKid حتى 2.1 على macOS NSXPCListener PrivilegeHelper.swift توثيق ضعيف] |
|---|
| النقاط | 18 |
|---|