How to: Protect Systems From BlueBorne Attacks?

PenTestIT RSS Feed No matter what part of the world you live in, I'm sure that you must have at least heard about the latest Bluetooth attack making rounds - BlueBorne. I'm also sure that if you have a vulnerable device and you have some time until your vendor releases a patch remediating this...

CVE-2017-14315

In Apple iOS 7 through 9, due to a BlueBorne flaw in the implementation of LEAP Low Energy Audio Protocol, a large audio command can be sent to a targeted device and lead to a heap overflow with attacker-controlled data. Since the audio commands sent via LEAP are not properly validated, an attack...

Zerodium Offers $500K for Secure Messaging App Zero Days

Zerodium, a vendor operating in the nebulous exploit acquisition market, has put a premium on zero-day vulnerabilities in secure messaging applications in a new pricing structure announced today. Remote code execution and local privilege elevation zero days in messaging apps such as WhatsApp,...

CVE-2017-8248

A buffer overflow may occur in the processing of a downlink NAS message in Qualcomm Telephony as used in Apple iPhone 5 and later, iPad 4th generation and later, iPod touch 6th generation...

Apple iOS 10.3 - UI SMS Access Permission Vulnerability

Document Title: =============== Apple iOS 10.3 - UI SMS Access Permission Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2078 Apple Security ID: 666589482 Video: https://www.vulnerability-lab.com/getcontent.php?id=2079 Vulnerability...

Apple iOS v10.3 - UI SMS Access Permission Vulnerability

Document Title: =============== Apple iOS v10.3 - UI SMS Access Permission Vulnerability References: =========== https://www.vulnerability-lab.com/getcontent.php?id=2079 Video: https://www.youtube.com/watch?v=jePRogkoon8 Advisory: https://www.vulnerability-lab.com/getcontent.php?id=2078...

Apple iOS v10.3 - UI SMS Access Permission Vulnerability

Document Title: =============== Apple iOS v10.3 - UI SMS Access Permission Vulnerability References: =========== https://www.vulnerability-lab.com/getcontent.php?id=2079 Video: https://www.youtube.com/watch?v=jePRogkoon8 Advisory: https://www.vulnerability-lab.com/getcontent.php?id=2078...

WebKit memory corruption vulnerability in multiple Apple products (CNVD-2017-16613)

Apple iOS, iCloud for Windows, iTunes for Windows, Safari, and tvOS are products of Apple Inc. Apple iOS is an operating system developed for mobile devices; Safari is a web browser that is the default browser included with the Mac OS X and iOS operating systems. WebKit is an open source web...

WebKit memory corruption vulnerability in multiple Apple products (CNVD-2017-16618)

Apple iOS, iCloud for Windows, iTunes for Windows, Safari, and tvOS are products of Apple Inc. Apple iOS is an operating system developed for mobile devices; Safari is a web browser that is the default browser included with the Mac OS X and iOS operating systems. WebKit is an open source web...

Security research team released 8 Apple iOS security vulnerability: hackers can easily attack-vulnerability warning-the black bar safety net

According to foreign media ZDNet reports, the Israeli mobile security company Zimperium recently released 8 Apple iOS system vulnerabilities, hackers can exploit these vulnerabilities to completely control the user's iOS device, so as to obtain the device's GPS data, photos, and contact...

Code injection

An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. The issue involves the "Notifications" component. It allows physically proximate attackers to read unintended notifications on the lock screen...

Apple iOS 10.3 - MobileData Access Permission Vulnerability

Document Title: =============== Apple iOS 10.3 - MobileData Access Permission Vulnerability References: =========== https://www.vulnerability-lab.com/getcontent.php?id=2077 Video: https://www.youtube.com/watch?v=XAv5v01PN6Q News Article:...

Apple iOS / OS X NSKeyedArchiver Memory Corruption(CVE-2017-2527)

CAMediaTimingFunctionBuiltin is a class in QuartzCore. Its initWithCoder: method reads an Int "index" then passes that to builtinfunction mov ebx, edi -- controlled unsigned int mov r14d, ebx lea r15, ZL9functions0 ; functions mov rax, r15+r148 if rax is non-null it's returned as an objective-c...

Memory Corruption Vulnerability in WebKit Component of Multiple Apple Products (CNVD-2017-08080)

Apple iOS, Safari, and tvOS are products of Apple Inc. Apple iOS is an operating system developed for mobile devices; Safari is a web browser that is the default browser that comes with Mac OS X and iOS operating systems; and tvOS is an operating system for smart TVs. webKit is an open source web...

Apple iOS, Safari and tvOS WebKit Web Inspector Component Memory Corruption Vulnerability

Apple iOS, Safari, and tvOS are products of Apple Inc. Apple iOS is an operating system developed for mobile devices; Safari is a web browser that is the default browser shipped with Mac OS X and iOS operating systems. tvOS is an operating system for Smart TVs. Inspector is one of the Web Inspect...

Apple iOS, Safari and tvOS WebKit Cross-Site Scripting Vulnerability

pple iOS, Safari and tvOS are all products of the United States Apple Apple. apple iOS is a set of operating systems developed for mobile devices; Apple Safari is a Web browser, is the default browser that comes with Mac OS X and iOS operating systems. webKit is a set of open-source Web browser...

CVE-2017-2538

An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. Safari before 10.1.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted we...

CVE-2017-2496

An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. Safari before 10.1.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted we...

Apple iOS < 10.3.2 Multiple Vulnerabilities

Binary data appleios1032check.nbin...

Apple iOS 10.3 - Control Panel Denial of Service Vulnerability

Document Title: =============== Apple iOS 10.3 - Control Panel Denial of Service Vulnerability References: =========== https://www.vulnerability-lab.com/getcontent.php?id=2059 Video: https://www.youtube.com/watch?v=MSscCLATxPQ Release Date: ============= 2017-04-27 Vulnerability Laboratory ID...