4801 matches found
CVE-2016-1854
WebKit, as used in Apple iOS before 9.3.2, Safari before 9.1.1, and tvOS before 9.2.1, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, a different vulnerability than CVE-2016-1855, CVE-2016-1856, and CVE-2016-1857...
CVE-2016-1833
The htmlCurrentChar function in libxml2 before 2.9.4, as used in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1, allows remote attackers to cause a denial of service heap-based buffer over-read via a crafted XML document...
CVE-2016-1856
WebKit, as used in Apple iOS before 9.3.2, Safari before 9.1.1, and tvOS before 9.2.1, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, a different vulnerability than CVE-2016-1854, CVE-2016-1855, and CVE-2016-1857...
CVE-2016-1834
Heap-based buffer overflow in the xmlStrncat function in libxml2 before 2.9.4, as used in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted XML...
PT-2016-2062
Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 9.3.2 Apple OS X versions prior to 10.11.5 Apple tvOS versions prior to 9.2.1 Apple watchOS versions prior to 2.2.1 Description The issue is related to a component called CoreCapture in Apple's operating systems,...
Apple iOS < 9.3.2 Multiple Vulnerabilities
Binary data appleios932check.nbin...
Apple iOS MDM Profile Signing Bypass
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Apple iOS. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of signed...
C/C++ Offline Compiler and C For OS - Persistent Cross-Site Scripting
Exploit for iOS platform in category web applications Document Title: =============== C & C++ for OS - Filter Bypass & Persistent Vulnerability Product & Service Introduction: =============================== This is an ios c app,you can learn,run,share c code. The software is a offline compiler f...
PT-2016-2097
Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 9.3.2 Safari versions prior to 9.1.1 tvOS versions prior to 9.2.1 Description The issue is related to the WebKit Canvas implementation, which allows remote attackers to execute arbitrary code or cause a denial of...
Apple iOS 9.3 S/Plus - Touch Passcode Bypass Vulnerability
Document Title: =============== Apple iOS 9.3 S/Plus - Touch Passcode Bypass Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1814 Vulnerability Magazine:...
Apple iOS 9.3 S/Plus - Touch Passcode Bypass Vulnerability
Document Title: =============== Apple iOS 9.3 S/Plus - Touch Passcode Bypass Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1814 Vulnerability Magazine:...
CVE-2016-1760
The XPC Services API in LaunchServices in Apple iOS before 9.3 allows attackers to bypass intended event-handler restrictions and modify an arbitrary app's events via a crafted app...
Design/Logic Flaw
The XPC Services API in LaunchServices in Apple iOS before 9.3 allows attackers to bypass intended event-handler restrictions and modify an arbitrary app's events via a crafted app...
CVE-2016-1760
CVE-2016-1760 affects iOS LaunchServices XPC Services API prior to iOS 9.3. The vulnerability arises from an event handler validation issue in the XPC Services API, which could allow a crafted app to bypass intended event-handler restrictions and modify events in arbitrary apps. The Apple advisor...
CVE-2016-1760: Improper Access Control
The XPC Services API in LaunchServices in Apple iOS before 9.3 allows attackers to bypass intended event-handler restrictions and modify an arbitrary app's events via a crafted app...
CVE-2016-1786
The Page Loading implementation in WebKit in Apple iOS before 9.3 and Safari before 9.1 mishandles HTTP responses with a 3xx aka redirection status code, which allows remote attackers to spoof the displayed URL, bypass the Same Origin Policy, and obtain sensitive cached information via a crafted...
CVE-2016-1785
The Page Loading implementation in WebKit in Apple iOS before 9.3 and Safari before 9.1 mishandles character encoding during access to cached data, which allows remote attackers to bypass the Same Origin Policy and obtain sensitive information via a crafted web site...
CVE-2016-1784
The History implementation in WebKit in Apple iOS before 9.3, Safari before 9.1, and tvOS before 9.2 allows remote attackers to cause a denial of service resource consumption and application crash via a crafted web site...
CVE-2016-1782
WebKit in Apple iOS before 9.3 and Safari before 9.1 does not properly restrict redirects that specify a TCP port number, which allows remote attackers to bypass intended port restrictions via a crafted web site...
