Kun Peeks (SwayZGl1tZyyy)

wannabe security researcher

my blog posts

Read about my research & personal notes.

I'm currently 18 years old and a cyber security student!

macOS 26.2: WebFilterDNSd (com.apple.webcontentfilter.dns)

Message interface generator (mig) is an interprocess-communication (IPC) on macOS. The Web Content Filter daemon (WebFilterDNSd) is part of Screen Time & parental controls that provide user-facing content management functionality.

CVE-2025-54595: Local Privilege Escalation via Unauthenticated XPC Service

This is a blog post about the first cve I found. This is a LPE via Unauthenticated Access through a Privileged Helper that allows root command injection.

CVE-2025-54991 & CVE-2025-55002: TCC Bypasses in Jupyterlab Desktop

Jupyterlab Desktop is an IDE from jupyter.org, it has over 5 millions downloads wordlwide! I'll explain in this post what Transparency, Consent & Control (TCC) Bypasses are and how they can be bypassed.

Year

2025

Location

The Netherlands