21 matches found
EUVD-2015-4026
Malware in sbrugna...
EUVD-2025-22137
Malicious code in bioql PyPI...
CVE-2025-36106
IBM Cognos Analytics Mobile iOS 1.1.0 through 1.1.22 could allow malicious actors to view and modify information coming to and from the application which could then be used to access confidential information on the device or network by using a the deprecated or misconfigured AFNetworking library ...
CVE-2025-36106
IBM Cognos Analytics Mobile iOS 1.1.0 through 1.1.22 could allow malicious actors to view and modify information coming to and from the application which could then be used to access confidential information on the device or network by using a the deprecated or misconfigured AFNetworking library ...
CVE-2025-36106 IBM Cognos Analytics Mobile (iOS) information disclosure
IBM Cognos Analytics Mobile iOS 1.1.0 through 1.1.22 could allow malicious actors to view and modify information coming to and from the application which could then be used to access confidential information on the device or network by using a the deprecated or misconfigured AFNetworking library ...
CVE-2025-36106 IBM Cognos Analytics Mobile (iOS) information disclosure
IBM Cognos Analytics Mobile iOS 1.1.0 through 1.1.22 could allow malicious actors to view and modify information coming to and from the application which could then be used to access confidential information on the device or network by using a the deprecated or misconfigured AFNetworking library ...
CVE-2025-36106
CVE-2025-36106 affects IBM Cognos Analytics Mobile (iOS) 1.1.0–1.1.22. The root cause is use of a deprecated/misconfigured AFNetworking library at runtime, enabling an attacker to view and modify information transmitted by the app and potentially access confidential data on the device or network....
PT-2025-30324 · Ibm +1 · Ibm Cognos Analytics Mobile +1
Name of the Vulnerable Software and Affected Versions: IBM Cognos Analytics Mobile iOS versions 1.1.0 through 1.1.22 Description: The application uses a deprecated or misconfigured AFNetworking library at runtime, potentially allowing malicious actors to view and modify information transmitted to...
Arbitary Code Injection
AFNetworking is vulnerable to arbitrary code injection. It uses a hard-coded multipart form data boundary, potentially allowing an attacker to inject and execute malicious code...
Spoofing SSL Servers Via An Arbitrary Valid Certificate.
AFNetworking has a flaw which allows attackers to spoof SSL servers. The vulnerability exists because the default value for AFSecurityPolicy.validatesDomainName is not set to Yes. Therefore, it does not perform verification of a server hostname against the domain name in the subject's Common Name...
CVE-2015-3996
The default AFSecurityPolicy.validatesDomainName configuration for AFSSLPinningModeNone in the AFNetworking framework before 2.5.3, as used in the ownCloud iOS Library, disables verification of a server hostname against the domain name in the subject's Common Name CN of the X.509 certificate, whi...
Default configuration
The default AFSecurityPolicy.validatesDomainName configuration for AFSSLPinningModeNone in the AFNetworking framework before 2.5.3, as used in the ownCloud iOS Library, disables verification of a server hostname against the domain name in the subject's Common Name CN of the X.509 certificate, whi...
CVE-2015-3996
The default AFSecurityPolicy.validatesDomainName configuration for AFSSLPinningModeNone in the AFNetworking framework before 2.5.3, as used in the ownCloud iOS Library, disables verification of a server hostname against the domain name in the subject's Common Name CN of the X.509 certificate, whi...
CVE-2015-3996
CVE-2015-3996 affects the AFNetworking framework before 2.5.3 (as used by the ownCloud iOS Library). The default AFSSLPinningModeNone disables hostname verification against the certificate’s CN, allowing a MITM attacker to spoof SSL servers with an arbitrary valid certificate. Affected components...
Improper validation of certificates within the iOS application - ownCloud
The ownCloud iOS Library was vulnerable against a remotely exploitable certification problem until version 1.1.2. The vulnerable library version is used by the official ownCloud iOS client until version 3.4.4. Specifically it has been discovered that the used networking library AFNetworking is pe...
Mobile App: Improper validation of certificates within the iOS application
The ownCloud iOS Library was vulnerable against a remotely exploitable certification problem until version 1.1.2. The vulnerable library version is used by the official ownCloud iOS client until version 3.4.4. Specifically it has been discovered that the used networking library AFNetworking is pe...
Second Crypto Bug in Networking Library Could Affect 25,000 Apps
A few weeks after the developers of the AFNetworking library that’s popular among iOS and OS X app developers patched a serious bug in the library that enabled man-in-the-middle attacks, another, similar flaw has surfaced. The new vulnerability is related to how the AFNetworking library handles...
Popular iOS network communications library AFNetworking exposed SSL vulnerability, the impact of China UnionPay, Bank of China, Bank of communications, 2. 5 million iOS applications-vulnerability warning-the black bar safety net
A presence in the popular open source iOS network communications library AFNetworking in severe vulnerability that the Apple App Store 2 5 0 0 0 a iOS app in HTTPS traffic exposure in-the-middle（MITM attack. AFNetworking is a famous open source network library, to be able to developers in iOS and...
Critical SSL Vulnerability Leaves 25,000 iOS Apps Vulnerable to Hackers
A critical vulnerability resides in AFNetworking could allow an attacker to cripple the HTTPS protection of 25,000 iOS apps available in Apple's App Store via man-in-the-middle MITM attacks. AFNetworking is a popular open-source code library that lets developers drop networking capabilities into...
DUO-PSA-2015-002: Duo Product Security Advisory
Duo Product Security Advisory Advisory ID: DUO-PSA-2015-002 Original Publication Date: 2015-04-06 Revision Date: 2015-04-13 Status: Confirmed, Fixed Document Revision: 2 Overview Duo Security has identified an issue in recent versions of Duo Mobile for iOS that could allow attackers to perform a...