OS X <=10.14.5 0day Gatekeeper bypass
TLDR: you can create a ZIP archive with "CoolPicture.JPG.аpp" inside, it will look like JPG and launch without warnings; PoC available too (90day disclosure timeline expired)
https://www.fcvl.net/vulnerabilities/macosx-gatekeeper-bypass
Post #606
261