Photo Server 2.0 iOS - Multiple Vulnerabilities

Title: ====== Photo Server 2.0 iOS - Multiple Critical Vulnerabilities Date: ===== 2013-07-23 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1029 VL-ID: ===== 1029 Common Vulnerability Scoring System: ==================================== 8.6 Introduction: =============...

Photo Server 2.0 iOS - Multiple Critical Vulnerabilities

Document Title: =============== Photo Server 2.0 iOS - Multiple Critical Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1029 Release Date: ============= 2013-07-22 Vulnerability Laboratory ID VL-ID: ====================================...

Olive File Manager 1.0.1 Arbitrary File Upload / XSS

Title: ====== Olive File Manager v1.0.1 iOS - Multiple Vulnerabilities Date: ===== 2013-07-13 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1009 VL-ID: ===== 1009 Common Vulnerability Scoring System: ==================================== 5.6 Introduction: =============...

Flux Player v3.1.0 iOS - File Include & Arbitrary File Upload

Document Title: =============== Flux Player v3.1.0 iOS - File Include & Arbitrary File Upload References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1013 Release Date: ============= 2013-07-15 Vulnerability Laboratory ID VL-ID:...

WiFly 1.0 Pro iOS - Multiple Web Vulnerabilities

Document Title: =============== WiFly 1.0 Pro iOS - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1011 Release Date: ============= 2013-07-14 Vulnerability Laboratory ID VL-ID: ==================================== 1011 Comm...

Olive File Manager v1.0.1 iOS - Multiple Vulnerabilities

Document Title: =============== Olive File Manager v1.0.1 iOS - Multiple Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1009 Release Date: ============= 2013-07-12 Vulnerability Laboratory ID VL-ID: ====================================...

Air Drive Plus 2.4 LFI / XSS / File Upload

Title: ====== Air Drive Plus v2.4 iOS - Arbitrary File Upload Vulnerability Date: ===== 2013-07-09 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1000 VL-ID: ===== 1000 Common Vulnerability Scoring System: ==================================== 6.7 Introduction:...

FTP Sprite v1.2.1 iOS - Persistent Web Vulnerability

Document Title: =============== FTP Sprite v1.2.1 iOS - Persistent Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1007 Release Date: ============= 2013-07-11 Vulnerability Laboratory ID VL-ID: ==================================== 1007...

MyFolder FileManager 1.8 iOS - Multiple Vulnerabilities

Document Title: =============== MyFolder FileManager 1.8 iOS - Multiple Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1001 Release Date: ============= 2013-07-09 Vulnerability Laboratory ID VL-ID: ==================================== 10...

Mobile USB Drive HD 1.2 Shell Upload

Title: ====== Mobile USB Drive HD 1.2 - Arbitrary File Upload Vulnerability Date: ===== 2013-06-27 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=989 VL-ID: ===== 989 Common Vulnerability Scoring System: ==================================== 6.8 Introduction:...

Mobile USB Drive HD 1.2 - Arbitrary File Upload Vulnerability

Document Title: =============== Mobile USB Drive HD 1.2 - Arbitrary File Upload Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=989 Release Date: ============= 2013-06-26 Vulnerability Laboratory ID VL-ID: ==================================...

Apple iOS Mobile Hotspot默认WPA2密码生成漏洞

Apple iOS是一款运行在苹果iPhone和iPod touch设备上的最新的操作系统。 Apple iOS处理Mobile Hotspot默认WPA2密码生成处理存在漏洞，默认密码的生成基于一个仅包含1842项的单词word列表，由于选择单词word的过程来自单词word列表，不够随机，允许攻击者比较容易的通过暴力破解攻击获取密码。 漏洞是由于Apple iOS 6及之前版本中配置中的WifiPasswordController generateDefaultPassword方法依靠UITextChecker suggestWordInLanguage方法来选择Wi-Fi...

CVE-2013-4616

The WifiPasswordController generateDefaultPassword method in Preferences in Apple iOS 6 and earlier relies on the UITextChecker suggestWordInLanguage method for selection of Wi-Fi hotspot WPA2 PSK passphrases, which makes it easier for remote attackers to obtain access via a brute-force attack th...

CVE-2013-4616

The WifiPasswordController generateDefaultPassword method in Preferences in Apple iOS 6 and earlier relies on the UITextChecker suggestWordInLanguage method for selection of Wi-Fi hotspot WPA2 PSK passphrases, which makes it easier for remote attackers to obtain access via a brute-force attack th...

iOS 7 Beta Vulnerable to Screen-Lock Bypass

An iPhone user in Spain who downloaded the beta version of Apple iOS 7, which was made available Monday, was able to bypass its screen-lock security feature. The revamped mobile operating system was unveiled by the Cupertino, California technology giant last week at its annual World Wide Develope...

Hacking iPhone to bypass iOS 7 Lockscreen

About this time every year, Apple gives a gift to mobile developers: the newest version of iOS. The all-new Apple iOS 7 launched at WWCD 2013 this week and Just after 48 hours of iOS 7 release, 36-year old Jose Rodriguez iPhone user able to hack and bypass Lockscreen to access the Photos in just ...

Hacking iPhone to bypass iOS 7 Lockscreen

About this time every year, Apple gives a gift to mobile developers: the newest version of iOS. The all-new Apple iOS 7 launched at WWCD 2013 this week and Just after 48 hours of iOS 7 release, 36-year old Jose Rodriguez iPhone user able to hack and bypass Lockscreen to access the Photos in just ...

Apple iOS XNU内核‘get_xattrinfo’函数拒绝服务漏洞

CVE-2013-3955 Apple iOS是美国苹果（Apple）公司为移动设备所开发的操作系统。支持的设备包括iPhone、iPod Touch、iPad、Apple TV。 iPad设备上的Apple iOS 5.x版本和6.x至6.1.3版本中的XNU内核中的‘getxattrinfo’函数中存在漏洞，该漏洞源于程序没有正确地验证AppleDouble文件的头。本地攻击者可通过msdosfs文件系统上的无效文件利用该漏洞造成拒绝服务（内存损坏）或产生其他未明影响。 0 Apple iOS 5.x Apple iOS 6.x Apple iOS 6.1.3...

Apple iOS ‘openSharedCacheFile’函数基于栈的缓冲区溢出漏洞

CVE-2013-3950 Apple iOS是美国苹果（Apple）公司为移动设备所开发的操作系统。支持的设备包括iPhone、iPod Touch、iPad、Apple TV。 Apple iOS 5.1.x版本和6.x至6.1.3版本中的dyld中的dyld.cpp中的‘openSharedCacheFile’函数中存在基于栈的缓冲区溢出漏洞。攻击者可通过DYLDSHAREDCACHEDIR环境变量中较长的字符串利用该漏洞实施越狱攻击。 0 Apple iOS 5.1.x Apple iOS 6.x Apple iOS 6.1.3...

CVE-2013-3955

The getxattrinfo function in the XNU kernel in Apple iOS 5.x and 6.x through 6.1.3 on iPad devices does not properly validate the header of an AppleDouble file, which might allow local users to cause a denial of service memory corruption or have unspecified other impact via an invalid file on an...