4801 matches found
Apple iOS < 12.1.1 Multiple Vulnerabilities
Binary data appleios1211check.nbin...
PT-2018-16556
Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 12.1.1 Apple macOS versions prior to 10.14.2 Apple tvOS versions prior to 12.1.1 Apple watchOS versions prior to 5.1.2 Description A memory corruption issue was addressed with improved state management. The issue is...
Apple iOS, tvOS and macOS Mojave Kernel Elevation of Privilege Vulnerability
Apple iOS, tvOS, and macOS Mojave are products of Apple Inc. Apple iOS is an operating system for mobile devices; tvOS is an operating system for smart TVs; and macOS Mojave is a specialized operating system for Mac computers. kernel is a component of the Kernel is one of the kernel components. A...
Multiple Apple Products WebKit Memory Corruption Vulnerability (CNVD-2018-24811)
Apple iOS is an operating system developed for mobile devices; Safari is a web browser that is the default browser shipped with the Mac OS X and iOS operating systems. iTunes for Windows is a media player and application for the Windows platform. WebKit is one of the web browser engine components...
Apple iOS v12.1 - Authentication Bypass Vulnerability
Document Title: =============== Apple iOS v12.1 - Authentication Bypass Vulnerability References: =========== https://www.vulnerability-lab.com/getcontent.php?id=2163 Watch Video: https://www.youtube.com/watch?v=3jKMbdBo4kc Advisory: https://www.vulnerability-lab.com/getcontent.php?id=2162 Releas...
Apple iOS v12.1 - Authentication Bypass Vulnerability
Document Title: =============== Apple iOS v12.1 - Authentication Bypass Vulnerability References: =========== https://www.vulnerability-lab.com/getcontent.php?id=2163 Watch Video: https://www.youtube.com/watch?v=3jKMbdBo4kc Advisory: https://www.vulnerability-lab.com/getcontent.php?id=2162 Releas...
PT-2018-16473
Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 12 Apple macOS versions prior to 10.14 Apple tvOS versions prior to 12 Apple watchOS versions prior to 5 Description An out-of-bounds read issue was addressed with improved bounds checking. Recommendations For Apple...
PT-2018-16415
Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 12 Apple macOS versions prior to 10.14 Apple tvOS versions prior to 12 Apple watchOS versions prior to 5 Apple iTunes for Windows versions prior to 12.9 Apple iCloud for Windows versions prior to 7.7 Description A...
iOS Text Gatherer
This module collects text messages from iPhones. Tested on iOS 10.3.3 on an iPhone 5. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'iOS Text Gatherer', 'Description' = %q This module collects...
Apple iOS < 12.1 Multiple Vulnerabilities
Binary data appleios121check.nbin...
PT-2018-16553
Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 12 Apple macOS versions prior to 10.14 Apple tvOS versions prior to 12 Apple watchOS versions prior to 5 Description A memory corruption issue was addressed with improved memory handling. Recommendations For Apple i...
PT-2018-16534
Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 12 Apple macOS versions prior to 10.14 Description A memory corruption issue was addressed with improved memory handling. Recommendations For Apple iOS versions prior to 12, update to iOS 12 or later. For Apple macO...
Apple iOS Kernel - Use-After-Free due to bad Error Handling in Personas Exploit
Exploit for iOS platform in category dos / poc Apple iOS Kernel - Use-After-Free due to bad Error Handling in Personas / There was recently some cleanup in the persona code to fix some race conditions there, I don't think it was sufficient: In kpersonaallocsyscall if we provide an invalid userspa...
Apple iOS / macOS - Sandbox Escape due to Trusted Length Field in Shared Memory Exploit
Exploit for multiple platform in category dos / poc Apple iOS/macOS - Sandbox Escape due to Trusted Length Field in Shared Memory used by HID Event Subsystem iohideventsystem is a MIG service which provides proxy access to various HID devices for untrusted clients. On iOS it's hosted by backboard...
Apple iOS - Kernel Stack Memory Disclosure due to Failure to Check copyin Return Value
Here's a code snippet from sleh.c with the second level exception handler for undefined instruction exceptions: static void handleuncategorizedarmsavedstatet state, booleant instrLen2 exceptiontypet exception = EXCBADINSTRUCTION; machexceptiondatatypet codes2 = EXCARMUNDEFINED; machmsgtypenumbert...
Apple iOS - Kernel Stack Memory Disclosure due to Failure to Check copyin Return Value
Apple iOS - Kernel Stack Memory Disclosure due to Failure to Check copyin Return Value Here's a code snippet from sleh.c with the second level exception handler for undefined instruction exceptions: static void handleuncategorizedarmsavedstatet state, booleant instrLen2 exceptiontypet exception =...
Apple iOS < 12.0.1 Multiple Vulnerabilities
Binary data appleios1201check.nbin...
Apple_iOS Meterpreter, Reverse HTTPS Inline
Run the Meterpreter / Mettle server payload stageless This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework Module generated by tools/modules/generatemettlepayloads.rb module MetasploitModule CachedSize = 643824 include...
Apple_iOS Meterpreter, Reverse TCP Inline
Run the Meterpreter / Mettle server payload stageless This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework Module generated by tools/modules/generatemettlepayloads.rb module MetasploitModule CachedSize = 643824 include...
PT-2018-16479
Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 11.3 Apple Safari versions prior to 11.1 Apple iCloud for Windows versions prior to 7.4 Apple tvOS versions prior to 11.3 Apple watchOS versions prior to 4.3 Apple iTunes for Windows versions prior to 12.7.4...