4801 matches found
PT-2021-5774
Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 14.6 Apple iPadOS versions prior to 14.6 Apple tvOS versions prior to 14.6 Apple Safari versions prior to 14.1.1 Apple macOS Big Sur versions prior to 11.4 Apple watchOS versions prior to 7.5 Description A logic iss...
A week in security (May 3 – 9)
Last week on Malwarebytes Labs, we discussed how Spectre attacks have come back from the dead; why Facebook banned Instragram ads by Signal; we highlighted the differences between the most popular VPN protocols; pointed out that Google is about to start automatically enrolling users in two-step...
PT-2021-6000
Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 14.6 Apple iPadOS versions prior to 14.6 Apple tvOS versions prior to 14.6 Apple watchOS versions prior to 7.5 Apple macOS versions prior to 11.4 Apple macOS versions prior to Security Update 2021-003 Catalina...
Apple iOS < 14.5.1 Multiple Vulnerabilities (HT212336)
Binary data appleios1451check.nbin...
Apple iOS 缓冲区错误漏洞
Apple iOS is an operating system developed by Apple Inc. for mobile devices. Apple iOS suffers from a buffer error vulnerability that stems from a boundary error in WebKit. The following products and versions are affected: Apple iOS: 12.0 16A366, 12.0 16A367, 12.0.1 16A404, 12.0.1 16A405, 12.1...
Apple iOS < 14.5 Multiple Vulnerabilities (HT212317)
Binary data appleios145check.nbin...
Apple iOS 安全漏洞
Apple iOS is an operating system developed by Apple Inc. for mobile devices. A security vulnerability exists in Apple iOS, which is caused by an obscure password in a screenshot. The following products and versions are affected: iPhone 6s and later, iPad Pro all models, iPad Air 2 and later, iPad...
Apple iOS 信任管理问题漏洞
Apple iOS is an operating system developed by Apple Inc. for mobile devices. A security vulnerability exists in Apple iOS where an attacker in a privileged network location may be able to alter network traffic. The following products and versions are affected: iPhone 6s and later, iPad Pro all...
CVE-2021-20693
Improper access control vulnerability in Gurunavi App for Android ver.10.0.10 and earlier and for iOS ver.11.1.2 and earlier allows a remote attacker to lead a user to access an arbitrary website via the vulnerable App...
TimelyBills 安全漏洞
TimelyBills is a mobile application app from TimelyBills, Inc. a financial management software. A security vulnerability exists in TimelyBills for iOS version 1.7.0 and earlier and version 1.21.115 and earlier, which originates from plaintext storage in a file or on disk, and can be exploited by ...
Apple iOS WebKit Cross-Site Scripting Vulnerability
Apple iOS is an operating system developed by Apple for mobile devices, of which WebKit is a component of the Web browser engine. A cross-site scripting vulnerability exists in Apple iOS WebKit, which can be exploited by attackers to cause cross-site scripting attacks...
[Security Nation] Beau Woods and Fotios Chantzis Discuss Their New Book, "Practical IoT Hacking"
!\Security Nation\ Beau Woods and Fotios Chantzis Discuss Their New Book, https://blog.rapid7.com/content/images/2021/04/securitynationlogo-63.jpg In our latest episode of Security Nation, we speak with Beau Woods and Fotios Chantzis about their newly released book, "Practical IoT Hacking." Stick...
Apple iOS < 14.4.2 Vulnerability (HT212256)
Binary data appleios1442check.nbin...
Apple iOS < 12.5.2 Vulnerability (HT212257)
Binary data appleios1252check.nbin...
Vulnerability fixed in Apple iOS and iPadOS
A vulnerability has been fixed in Apple iOS and Apple iPadOS. The vulnerability is located in the WebKit component and is referred to as Universal Cross-site Scripting UXSS. The vulnerability allows an unauthorized remote malicious person to execute arbitrary code under browser privileges. The...
Apple iOS WebKit 跨站脚本漏洞
Apple iOS is an operating system developed by Apple for mobile devices, of which WebKit is a component of the Web browser engine. A cross-site scripting vulnerability exists in Apple iOS WebKit, which can be exploited by attackers to cause cross-site scripting attacks...
Apple iOS < 14.4.1 Vulnerability (HT212221)
Binary data appleios1441check.nbin...
Mobile Adware Booms, Online Banks Become Prime Target for Attacks
Hackers painted a bullseye on the backs of online financial institutions in 2020 as the pandemic shuttered local branch offices and forced customers online. Over the past 12 months, incidents of adware nearly tripled. And, overall in 2020 researchers saw a slight drop in the number of mobile...
Huawei EulerOS: Security Advisory for libxslt (EulerOS-SA-2021-1324)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...