Vulnerability

PoC exploit for execute arbitrary code in Apple products (CVE-2023-23504) released

Do Son January 24, 2023 2 minutes read

Written by

@DdoS · Security Researcher

Do Son

Do Son is the Founder and Editor of SecurityOnline.info. Working in cybersecurity since 2013, he reports on vulnerabilities, malware, and emerging threats, providing timely analysis to help organizations and individuals stay ahead of evolving risks.

Tags: Apple CVE-2023-23504

📈

EPSS Spike Alerts
Catch risk spikes before they make headlines.

🎯

Custom EPSS/CVSS
Set score thresholds to effectively filter noise.

🛡️

Exploit Intel
Real-world exploit signals beyond the KEV catalog.

🐙

GitHub Issues
Auto-create alert tickets without duplication.

📬

Weekly Digest
Clean summaries, eliminating email spam.

🏷️

Watchlist Groups
Tag vulnerabilities by team (Infra/AppSec/SOC).

🔀

Smart Routing
Route chat channels based on severity levels.

🚨

RBP Tracker
Early warning detection and tracking system.

or try free for 14 days →

CVE-2019-25779CVSS 8.7
WooThemes Diarise through 1.5.9 contains a file read vulnerability that allows unauthenticated attackers to read arbitrary files through...
Watchtower Verified📅 Updated: Nov 4, 2026
CVE-2023-54413CVSS 5.1
WPML Multilingual CMS plugin for WordPress before 4.6.1 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers...
Watchtower Verified📅 Updated: Nov 4, 2026
CVE-2026-81648CVSS 10.0
The CryptoPayment Gateway WordPress plugin from 1.2.1 to 1.2.2 does not apply an authorization check on one of...
Admin intel📅 Updated: Nov 3, 2026
CVE-2026-119977CVSS 8.1
WordPress Core is vulnerable to Remote Code Execution in versions 4.7 through 7.1.3. This is due to predictable,...
CISA KEV📅 Added to KEV: Nov 3, 2026
CVE-2026-58115CVSS 10.0
A vulnerability has been identified in SIMATIC IoT2050 Advanced (6ES7647-0BA00-1YA2) (All versions < V4.3.4.1 running Industrial OS with...
Admin intel📅 Updated: Nov 2, 2026
CVE-2026-20051CVSS 7.4
A vulnerability with the Ethernet VPN (EVPN) Layer 2 ingress packet processing of Cisco Nexus 3600 Platform Switches...
Watchtower Verified📅 Updated: Nov 1, 2026
CVE-2026-20118CVSS 6.8
A vulnerability in the handling of an Egress Packet Network Interface (EPNI) Aligner interrupt in Cisco IOS XR...
Watchtower Verified📅 Updated: Nov 1, 2026
CVE-2010-20125CVSS 8.7
DedeCMS before 5.7 contains a file inclusion vulnerability in plus/carbuyaction.php that allows remote unauthenticated attackers to control the...
Watchtower Verified📅 Updated: Oct 30, 2026

CVE-2026-121606CVSS 10.0
A vulnerability has been found in Qihoo 360 D621-2, D603-2, D600-2, D619, D606-6 and D706 up to 6.4.9....
📅 Updated: Nov 4, 2026
CVE-2026-121600CVSS 9.4
A flaw has been found in TOTOLINK A950RG 4.1.2cu.5268_B20221104. Affected by this vulnerability is the function setMacFilterRules of...
📅 Updated: Nov 4, 2026
CVE-2026-121599CVSS 9.4
A vulnerability was detected in TOTOLINK A950RG 4.1.2cu.5268_B20221104. Affected is the function setWiFiMultipleConfig/delWiFiMultipleConfig of the file /cgi-bin/cstecgi.cgi of...
📅 Updated: Nov 4, 2026
CVE-2026-92189CVSS 9.8
Quest Foglight for Databases writeTopologySectionToFile External Control of File Path Remote Code Execution Vulnerability. This vulnerability allows remote...
📅 Updated: Nov 4, 2026
CVE-2026-92188CVSS 9.8
Quest Foglight for Databases ForgeMBeanServerSupport Missing Authentication Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute...
📅 Updated: Nov 4, 2026
CVE-2026-92190CVSS 9.8
Quest Foglight for Databases baseRmiServiceExporter Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers...
📅 Updated: Nov 4, 2026
CVE-2024-50330CVSS 9.8
SQL injection in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6 November Security Update allows a...
📅 Updated: Nov 4, 2026
CVE-2026-101967CVSS 9.3
An OS Command Injection vulnerability in the bootzd zero-touch provisioning daemon of Juniper Networks Junos OS Evolved allows...
📅 Updated: Nov 4, 2026

🔐 Access to This Vulnerability Report Requires Support

Get Zero-Hour Vulnerability Alerts

Do Son