514 matches found
APPLE-SA-2013-11-14-1 iOS 7.0.4
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 APPLE-SA-2013-11-14-1 iOS 7.0.4 iOS 7.0.4 is now available and addresses the following: App Store Available for: iPhone 4 and later, iPod touch 5th generation and later, iPad 2 and later Impact: App and In-App purchases may be completed with...
CVE-2013-5193
The App Store component in Apple iOS before 7.0.4 does not properly enforce an intended transaction-time password requirement, which allows local users to complete a 1 App purchase or 2 In-App purchase by leveraging previous entry of Apple ID credentials...
CVE-2013-5193
The CVE-2013-5193 issue affects Apple iOS up to version 7.0.3, where the App Store component does not properly enforce a required transaction password, allowing a local user to complete (1) App purchases or (2) In‑App purchases by using previously entered Apple ID credentials. The root cause is i...
Apple iOS 7.04 Fixes App Store Purchase Flaw
Apple has released a new fix for iOS 7–no, it doesn’t roll your phone back to iOS 6–that patches a vulnerability that enabled a user to make app or in-app purchases without needing to enter a password. The release of iOS 7.04 marks the third update of the iPhone operating system in the short time...
iOS apps vulnerable to HTTP Request Hijacking attacks over WiFi
Security researchers Adi Sharabani and Yair Amit have disclosed details about a widespread vulnerability in iOS apps, that could allow hackers to force the apps to send and receive data from the hackers' own servers rather than the legitimate ones they were coded to connect to. Speaking about the...
iOS apps vulnerable to HTTP Request Hijacking attacks over WiFi
Security researchers Adi Sharabani and Yair Amit have disclosed details about a widespread vulnerability in iOS apps, that could allow hackers to force the apps to send and receive data from the hackers' own servers rather than the legitimate ones they were coded to connect to. Speaking about the...
Several Malicious Android apps found on Google Play affects 25,000 devices
As time goes on, though, the Malware Risk on Mobile Platforms appears to be increasing. A flood of scammy apps that are difficult for Google to detect, and therefore stays available for download for several days before being removed. The Russia-based firm Dr Web today said it has discovered sever...
Viber's Apple App Store account hacked; Description changed by hackers
Last week, we exclusively reported that the popular messenger Viber was hacked by the Syrian Electronic Army, and Support page was defaced with the message, "The Israeli-based - Viber is spying and tracking you." Today we found that Viber's Apple App Store description has been defaced as well. Th...
Viber's Apple App Store account hacked; Description changed by hackers
Last week, we exclusively reported that the popular messenger Viber was hacked by the Syrian Electronic Army, and Support page was defaced with the message, “The Israeli-based - Viber is spying and tracking you.” Today we found that Viber’s Apple App Store description has been defaced as well. Th...
iPic Sharp v1.2.1 iOS - Persistent Foldername Vulnerability
Document Title: =============== iPic Sharp v1.2.1 iOS - Persistent Foldername Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1031 Release Date: ============= 2013-07-23 Vulnerability Laboratory ID VL-ID: ===================================...
Apple's Developer Center Offline for 32 Hours; Compromised ?
It's been over a day now since Apple's online Dev Center went offline, and latest message can be seen in the screenshot, which explains that the current maintenance has took a lot longer than they expected. "We apologize that maintenance is taking longer than expected. If your program membership...
eFile Wifi Transfer Manager 1.0 iOS - Multiple Vulnerabilities
Title: ====== eFile Wifi Transfer Manager 1.0 iOS - Multiple Vulnerabilities Date: ===== 2013-06-24 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=982 VL-ID: ===== 982 Common Vulnerability Scoring System: ==================================== 6.8 Introduction:...
Android vulnerability allows hackers to modify apps without breaking signatures
Almost all Android handsets are vulnerable to a flaw that could allow hackers to seize control of a device to make calls, send texts, or build a mobile botnet, has been uncovered by Bluebox Security .i.e almost 900 million Android devices globally. Or simply, The Flaw allow hackers to modify any...
Vulnerabilities Plague File Lite, File Pro iOS Apps
Multiple vulnerabilities have been discovered in both File Lite and File Pro, two file management applications created by Perception Systems for iOS, currently available on Apple’s App Store. Researchers at Vulnerability Laboratory found the bugs on the latest builds of File Lite and File Pro –...
Apple Adds Two-Factor Authentication to iTunes Accounts
Apple has introduced a new two-factor authentication system designed to help protect users’ iTunes and App Store accounts and prevent attackers or unauthorized users from taking over users’ accounts. The system is similar to the one that Google has implemented for Gmail, utilizing verification...
Apple App Store was vulnerable for more than Half year
A Google developer helps Apple to fixed a security flaw in its application store that for years has allowed attackers to steal passwords and install unwanted or extremely expensive applications. Security loophole allowed attacker to hijack the connection, because Apple neglected to use encryption...
Apple App Store was vulnerable for more than Half year
A Google developer helps Apple to fixed a security flaw in its application store that for years has allowed attackers to steal passwords and install unwanted or extremely expensive applications. Security loophole allowed attacker to hijack the connection, because Apple neglected to use encryption...
Apple Finally Fixes App Store Vulnerabilities
Apple has fixed several App Store security issues that first arose last summer, but it hasn’t explained why it took so long to start encrypting communications using public Wi-Fi networks. A Google researcher working on his own time discovered in July 2012 that Apple was serving up data over an...
