Apple Releases Security Updates

Apple has released security updates to address vulnerabilities in watchOS, Xcode, and iOS. Exploitation of one of these vulnerabilities may allow a remote attacker to take control of an affected system. Users and administrators are encouraged to review the Apple security page for watchOS, Xcode,...

Address Sanitizer in macOS-vulnerability warning-the black bar safety net

A few days ago, the Keen Team@marcograss on their blog released a using Address Sanitizeraka asan found a heap overflow vulnerability. Discuss here about asan implementation. This article relates to the environment macOS 10.11.6 Xcode 7.3.1 make sure to use the official Apple's clang, with the op...

How to Collect Xcode Logs

You can collect system logs on iOS devices either by using iPhone Configuration Utility tool or Xcode. You can then email the files to Citrix support for help troubleshoot issues with apps...

Apple Xcode < 7.3.1 Multiple RCE (Mac OS X)

The version of Apple Xcode installed on the remote Mac OS X host is prior to 7.3.1. It is, therefore, affected by multiple remote code execution vulnerabilities in the bundled version of Git due to overflow conditions in the pathname function in revision.c that are triggered when pushing or cloni...

Apple Patches Two Flaws in Xcode's Git Implementation

Apple has updated its Xcode development environment, patching two vulnerabilities in its implementation of git. Git is a version control system, and in March its handlers patched two flaws that exposed the software to remote code execution. The new version of Xcode, 7.3.1, is available for El...

Apple Releases Security Update

Apple has released a security update for Xcode to address two vulnerabilities. Exploitation of either of these vulnerabilities may allow a remote attacker to take control of an affected system. Users and administrators are encouraged to review the Apple security update for Xcode and update to...

About the security content of Xcode 7.3.1

About the security content of Xcode 7.3.1 This document describes the security content of Xcode 7.3.1. For the protection of our customers, Apple does not disclose, discuss, or confirm security issues until a full investigation has occurred and any necessary patches or releases are available. To...

Apple Xcode otool memory corruption vulnerability

Apple Xcode is a set of Apple Apple Inc. to provide developers with an integrated development environment, which is mainly used for the development of Mac OS X and iOS applications. otool is one of the Mac OS X applications used in the decompilation tool. A memory corruption vulnerability exists ...

Apple Intel HD3000 Graphics kernel driver patch

While the iMessage crypto bug got most of the attention among this week’s Apple patches, another vulnerability that was addressed represents a nasty trend of privilege escalation flaws that merit watching. Researchers at Cisco on Wednesday disclosed details on a flaw in an OS X graphics kernel...

CVE-2016-1765

otool in Apple Xcode before 7.3 allows local users to gain privileges or cause a denial of service memory corruption and application crash via unspecified vectors...

CVE-2016-1765

otool in Apple Xcode before 7.3 allows local users to gain privileges or cause a denial of service memory corruption and application crash via unspecified vectors...

Memory corruption

otool in Apple Xcode before 7.3 allows local users to gain privileges or cause a denial of service memory corruption and application crash via unspecified vectors...

CVE-2016-1765

CVE-2016-1765 is an Apple Xcode 7.3-era memory corruption issue in otool (and related memory handling) that allows a local attacker to gain privileges or cause a denial of service. Affected: Xcode prior to 7.3 on macOS (OS X El Capitan v10.11 and later). Root cause: memory corruption from imprope...

CVE-2016-1765

otool in Apple Xcode before 7.3 allows local users to gain privileges or cause a denial of service memory corruption and application crash via unspecified vectors...

Apple Xcode < 7.3 Multiple Vulnerabilities (Mac OS X)

The version of Apple Xcode installed on the remote Mac OS X host is prior to 7.3. It is, therefore, affected by multiple vulnerabilities : - A flaw exists in Apache Subversion in modauthzsvn due to a failure to properly restrict anonymous access. An unauthenticated, remote attacker can exploit...

Apple Releases Multiple Security Updates

Apple has released security updates for iOS, watchOS, tvOS, Xcode, OS X El Capitan, OS X Server 5.1, and Safari to address multiple vulnerabilities. Exploitation of some of these vulnerabilities may allow a remote attacker to take control of an affected system. Available updates include: iOS 9.3...

About the security content of Xcode 7.3

About the security content of Xcode 7.3 This document describes the security content of Xcode 7.3. For the protection of our customers, Apple does not disclose, discuss, or confirm security issues until a full investigation has occurred and any necessary patches or releases are available. To lear...

iOS song of ice and fire fan outside the post - App Hook the Q & A and iOS 9 bash shell-vulnerability warning-the black bar safety net

In the previous Chapter we talked about in a non-jailbreak iOS on the App Hook. Using this technique, you can be in a non-jailbreak iOS on the system to achieve a variety of hook features, e.g., micro-channel auto-grab a red envelope, the automatic chat robot, game plug-in, etc. But because of...

Lobotomy - Android Reverse Engineering Framework & Toolkit

Lobotomy is an Android security toolkit that will automate different Android assessments and reverse engineering tasks. The goal of the Lobotomy toolkit is to provide a console environment, which would allow a user to load their target Android APK once, then have all the necessary tools without...

Rogue Chinese iOS App Removed from App Store

Apple removed an iOS application from its Chinese iTunes App Store that allowed users of non-jailbroken iOS devices to install pirated and jailbroken apps. Researchers at Palo Alto Networks, who discovered the rogue application, said the app was not malicious, but presented a serious security ris...