On Vulnerable iOS Apps, macOS Macros Malware, and More

Mike Mimoso and Chris Brook preview RSA 2017 and discuss the previous week’s news including the report on how a handful of iOS apps are vulnerable to interception attacks, macro malware coming to MacOS, a new Uber open source module. Show notes: Popular iOS Apps Vulnerable to TLS Interception...

Smart TV Maker Fined $2.2 Million For Spying on Its 11 Million Users

Your government is spying on you! Businesses are spying on you! Your phone and browser are constantly spying on you! Even your TV is spying on you! Yes, you should also worry about your "smart" TV, as one of the world's biggest smart TV makers Vizio has been caught secretly collecting its...

Apple TV < 10.1.1 Multiple Vulnerabilities

Binary data 9932.prm...

Apple TV < 10.1.1 Multiple Vulnerabilities

According to its banner, the version of Apple TV on the remote device is prior to 10.1.1. It is, therefore, affected by multiple vulnerabilities : - A stack-based buffer overflow condition exists in libarchive in the bsdtarexpandchar function within file util.c due to improper validation of certa...

You TV Player - Dynamic Code Loading, External URLs, SD-card access vulnerabilities

HackApp vulnerability scanner discovered that application You TV Player published at the 'play' market has multiple vulnerabilities...

About the security content of tvOS 10.0.1 - Apple Support

About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recent releases are listed on the Apple security updates page. For more information about security, se...

About the security content of tvOS 9.2 - Apple Support

For the protection of our customers, Apple does not disclose, discuss, or confirm security issues until a full investigation has occurred and any necessary patches or releases are available. To learn more about Apple Product Security, see the Apple Product Security website. For information about...

About the security content of Apple TV 7.2.1 - Apple Support

For the protection of our customers, Apple does not disclose, discuss, or confirm security issues until a full investigation has occurred and any necessary patches or releases are available. To learn more about Apple Product Security, see the Apple Product Security website. For information about...

Apple TV < 10.1 Multiple Vulnerabilities

Binary data 9848.prm...

Cross-site scripting vulnerability in wordpress plugin somali-live-tv

WordPress is a set of WordPress Software Foundation's blogging platform developed using the PHP language, which supports personal blog sites on servers with PHP and MySQL. The wordpress plugin somali-live-tv suffers from a cross-site scripting vulnerability due to improper filtering of user input...

Multiple Apple Products IOKit Component Memory Leak Vulnerability

Apple iOS, watchOS, macOS, and tvOS are products of Apple Inc. Apple iOS is an operating system developed for mobile devices; watchOS is a smartwatch operating system; and IOKit is a component that reads system information. A security vulnerability exists in the IOKit component of several Apple...

Memory Corruption Vulnerability in WebKit Component of Multiple Apple Products (CNVD-2016-12792)

Apple Safari, iCloud for Windows, iTunes, iOS, and tvOS are products of Apple Inc. Apple Safari is a web browser that is the default browser shipped with the Mac OS X and iOS operating systems; iTunes is a suite of media player applications. WebKit is an open source web browser engine developed b...

About the security content of tvOS 10.1

About the security content of tvOS 10.1 This document describes the security content of tvOS 10.1. For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recent releases are listed on th...

gq.ru XSS vulnerability

Vulnerable URL: http://www.gq.ru/culture/tv/1689757khoroshikhserialovobotnosheniyakh.php?...

CVE-2016-6916

Integer overflow in nvhostjob.c in the NVIDIA video driver for Android, Shield TV before OTA 3.3, Shield Table before OTA 4.4, and Shield Table TK1 before OTA 1.5 allows local users to cause a denial of service system crash via unspecified vectors, which triggers a buffer overflow...

CVE-2016-6917

Buffer overflow in nvhostjob.c in the NVIDIA video driver for Android, Shield TV before OTA 3.3, Shield Table before OTA 4.4, and Shield Table TK1 before OTA 1.5...

CVE-2016-6915

Stack-based buffer overflow in nvhostjob.c in the NVIDIA video driver for Android, Shield TV before OTA 3.3, Shield Table before OTA 4.4, and Shield Table TK1 before OTA 1.5...

Silk TV - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Silk TV published at the 'play' market has multiple vulnerabilities...

Apple TV < 10.0.1 Multiple Vulnerabilities

Binary data 9757.prm...

Apple TV < 10.0.1 Multiple Vulnerabilities

According to its banner, the version of Apple TV on the remote device is prior to 10.0.1. It is, therefore, affected by multiple vulnerabilities : - A flaw exists in WebKit when handling the location attribute that allows an unauthenticated, remote attacker to bypass the cross-origin policies and...