Shazam URL Parsing Vulnerability

Shazam is a music playing application. The program has features such as music recognition and playback. A security vulnerability exists in the parsing of URL schemes in Shazam versions prior to 9.25.0 Android and 12.11.0 iOS. The vulnerability can be exploited to redirect users to other websites...

DEBIAN-CVE-2019-8819

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 13.2 and iPadOS 13.2, tvOS 13.2, Safari 13.0.3, iTunes for Windows 12.10.2, iCloud for Windows 11.0, iCloud for Windows 7.15. Processing maliciously crafted web content may lead to arbitrary...

EulerOS 2.0 SP3 : libxslt (EulerOS-SA-2019-2627)

According to the versions of the libxslt packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - The xsltStylePreCompute function in preproc.c in libxslt 1.1.28 does not check if the parent node is an element, which allows attackers to caus...

PT-2019-19149

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 12.4 Apple macOS versions prior to 10.14.6 Apple tvOS versions prior to 12.4 Apple watchOS versions prior to 5.3 Apple Safari versions prior to 12.1.2 Apple iTunes for Windows versions prior to 12.9.6 Apple iCloud f...

PT-2019-19178

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 13 Apple iCloud for Windows versions prior to 7.14 and 10.7 Apple Safari versions prior to 13 Apple tvOS versions prior to 13 Apple watchOS versions prior to 6 Apple iTunes for Windows versions prior to 12.10.1...

Apple iOS < 12.4.4 Vulnerability

Binary data appleios1244check.nbin...

Apple iOS v13.x (AirDrop) - (AirDoS) Denial of Service PoC

Document Title: =============== Apple iOS v13.x AirDrop - AirDoS Denial of Service PoC References: =========== https://www.vulnerability-lab.com/getcontent.php?id=2192 Video: https://www.youtube.com/watch?v=pLpJIo-GcbQ Apple Acknowledgements: https://support.apple.com/en-us/HT210785...

Apple iOS < 13.3 Multiple Vulnerabilities

Binary data appleios133check.nbin...

PT-2019-19225

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 13.2 Apple iPadOS versions prior to 13.2 Apple macOS versions prior to 10.15.1 Apple tvOS versions prior to 13.2 Apple watchOS versions prior to 6.1 Description A memory corruption issue was addressed with improved...

Webkit CVE-2019-8835 Memory Corruption Vulnerability

Description Webkit prone to a memory corruption vulnerability. A remote attacker can leverage this issue to execute arbitrary code in the context of the user running the application. Technologies Affected Apple Ipad Mini- Apple Safari 1.1.0 Apple Safari 1.1.1 Apple Safari 1.2.0 Apple Safari 1.2.1...

Apple iOS v13.x Webkit - Denial of Service Vulnerability

Document Title: =============== Apple iOS v13.x Webkit - Denial of Service Vulnerability References: =========== https://www.vulnerability-lab.com/getcontent.php?id=2193 Video: https://www.youtube.com/watch?v=D1YNbpvXBk Release Date: ============= 2019-12-11 Vulnerability Laboratory ID VL-ID:...

Apple iOS v13.x Webkit VCF - Denial of Service Vulnerability

Document Title: =============== Apple iOS v13.x Webkit VCF - Denial of Service Vulnerability References: =========== https://www.vulnerability-lab.com/getcontent.php?id=2193 Video: https://www.youtube.com/watch?v=D1YNbpvXBk Release Date: ============= 2019-12-11 Vulnerability Laboratory ID VL-ID:...

Apple iOS and iPadOS CVE-2019-8857 Security Bypass Vulnerability

Description Apple iOS and iPadOS are prone to a security bypass vulnerability. Attackers can exploit this issue to bypass security restrictions and perform unauthorized actions. This issue is fixed in Apple iPadOS 13.3 and iOS 13.3. Technologies Affected Apple Ipad Mini- Apple iOS 10 Apple iOS...

Apple iOS and iPadOS CVE-2019-8841 Arbitrary Code Execution Vulnerability

Description Apple iOS and iPadOS are prone to an arbitrary code execution vulnerability. A remote attacker can leverage this issue to execute arbitrary code with kernel privileges on the affected system. Failed exploit attempts may result in a denial-of-service condition. Technologies Affected...

WebKit CVE-2019-8846 Arbitrary Code Execution Vulnerability

Description WebKit is prone to an arbitrary-code execution vulnerability. Attackers can exploit this issue to execute arbitrary code in the context of the affected application. Failed exploit attempts will likely cause a denial-of-service condition. Technologies Affected Apple Safari 1.0.0 Apple...

Multiple Linux Distributions CVE-2019-14899 Security Bypass Vulnerability

Description Multiple Linux Distributions are prone to a security-bypass vulnerability. Attackers can exploit this issue to bypass certain security restrictions and perform unauthorized actions. This may aid in further attacks. Technologies Affected Apple iOS Apple macOS Archlinux Linux 2019.05...

Memory Corruption Vulnerability in WebKit Component of Multiple Apple Products (CNVD-2019-41305)

Apple iOS is an operating system developed for mobile devices.Apple tvOS is a smart TV operating system.Apple watchOS is a smart watch operating system.WebKit is one of the Web browser engine components. A memory corruption vulnerability exists in the WebKit component of several Apple products,...

Apple iOS AppleFirmwareUpdateKext Arbitrary Code Execution Vulnerability

Apple iOS is an operating system on Apple smart devices. Apple iOS AppleFirmwareUpdateKext arbitrary code execution vulnerability can be exploited by a local attacker to execute arbitrary code...

Memory Corruption Vulnerability in Kernel Component of Multiple Apple Products

Apple iOS is an operating system developed for mobile devices.Apple tvOS is a smart TV operating system.Apple watchOS is a smart watch operating system.Kernel is one of the kernel components. A security vulnerability exists in the Kernel component of several Apple products. The vulnerability stem...

Code Injection Vulnerability in WebKit Component of Multiple Apple Products

Apple iOS is an operating system developed for mobile devices.Apple tvOS is a smart TV operating system.Apple watchOS is a smart watch operating system.WebKit is one of the Web browser engine components. A security vulnerability exists in the WebKit component of several Apple products. The...