21 matches found
CVE-2020-27950
CVE-2020-27950 CVE-2020-27950 漏洞利用...
browser-crash-tool
浏览器崩溃工具 - Kali 概述 该工具利用 iOS WebKit 中的一个漏洞（CVE-2020-27950），借助 Metasploit 的 webkitbackdropfilterblur 辅助模块实现攻击。但经过一些测试后，它似乎对所有浏览器都有效，它通过加载精心构造的网页导致目标浏览器崩溃。该工具还使用 ngrok 创建一个可公开访问的恶意页面链接，便于发送给目标。 免责声明： 本工具仅用于教育目的，并协助网络安全专业人员在受控环境中了解浏览器漏洞并对其进行测试。严禁将本工具用于未经授权或恶意活动。...
CVE-2020-27950
A memory initialization issue was addressed. This issue is fixed in macOS Big Sur 11.0.1, watchOS 7.1, iOS 12.4.9, watchOS 6.2.9, Security Update 2020-006 High Sierra, Security Update 2020-006 Mojave, iOS 14.2 and iPadOS 14.2, watchOS 5.3.9, macOS Catalina 10.15.7 Supplemental Update, macOS...
Exploit for Improper Initialization in Apple Ipados
This is a PoC exploit for CVE-2020-27950, a vulnerability in the macOS kernel that allows for a port pointer leak. The exploit targets the macOS kernel and leverages a vulnerability in the kalloc.1024 buffer to allocate a controlled buffer with a magic value. The exploit then creates an ipckmsg...
CVE-2020-27950
CVE-2020-27950 is a memory initialization issue in Apple’s XNU kernel that could allow a malicious app to disclose kernel memory. The CVE is fixed in multiple Apple updates: macOS Big Sur 11.0.1, iOS 14.2/iPadOS 14.2, watchOS 7.1, watchOS 6.2.9, and Security Updates for macOS Catalina 10.15.7 (Su...
CVE-2020-27950
A memory initialization issue was addressed. This issue is fixed in macOS Big Sur 11.0.1, watchOS 7.1, iOS 12.4.9, watchOS 6.2.9, Security Update 2020-006 High Sierra, Security Update 2020-006 Mojave, iOS 14.2 and iPadOS 14.2, watchOS 5.3.9, macOS Catalina 10.15.7 Supplemental Update, macOS...
Google Hacker Details Zero-Click 'Wormable' Wi-Fi Exploit to Hack iPhones
Google Project Zero white-hat hacker Ian Beer on Tuesday disclosed details of a now-patched critical "wormable" iOS bug that could have made it possible for a remote attacker to gain complete control of any device in the vicinity over Wi-Fi. The exploit makes it possible to "view all the photos,...
About the security content of Security Update 2020-006 High Sierra, Security Update 2020-006 Mojave - Apple Support
About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recent releases are listed on the Apple security updates page. Apple security documents reference...
About the security content of Security Update 2020-006 High Sierra, Security Update 2020-006 Mojave
About the security content of Security Update 2020-006 High Sierra, Security Update 2020-006 Mojave This document describes the security content of Security Update 2020-006 High Sierra, Security Update 2020-006 Mojave. About Apple security updates For our customers' protection, Apple doesn't...
Apple Patches Bugs Tied to Previously Identified Zero-Days
Apple has patched three previously identified zero-day vulnerabilities in its iPhone, iPod and iPad devices potentially related to a spate of related flaws recently discovered by the Google Project Zero team that also affect Google Chrome and Windows. Apple this week released iOS 14.2 and iPadOS...
Update Your iOS Devices Now — 3 Actively Exploited 0-Days Discovered
Apple on Thursday released multiple security updates to patch three zero-day vulnerabilities that were revealed as being actively exploited in the wild. Rolled out as part of its iOS, iPadOS, macOS, and watchOS updates, the flaws reside in the FontParser component and the kernel, allowing...
Update Your iOS Devices Now — 3 Actively Exploited 0-Days Discovered
Apple on Thursday released multiple security updates to patch three zero-day vulnerabilities that were revealed as being actively exploited in the wild. Rolled out as part of its iOS, iPadOS, macOS, and watchOS updates, the flaws reside in the FontParser component and the kernel, allowing...
CVE-2020-27950
creationtimestamp| type| source ---|---|--- 2020-11-06 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=524 2020-11-06 09:06:43+00:00| exploited| https://t.me/thehackernews/892 2020-11-06 10:46:03+00:00| exploited| https://t.me/truesecator/1121 2020-11-06 15:57:15+00:00|...
Vulnerabilities fixed in Apple iOS and iPadOS
Vulnerabilities have been fixed in Apple iOS and iPadOS, including three 0-day vulnerabilities. The vulnerabilities allow a malicious person to carry out attacks execute attacks that result in the following categories of damage: Remote code execution Administrator/Root privileges. Increased user...
About the security content of watchOS 6.2.9 - Apple Support
About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recent releases are listed on the Apple security updates page. Apple security documents reference...
About the security content of macOS Catalina 10.15.7 Supplemental Update, macOS Catalina 10.15.7 Update - Apple Support
About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recent releases are listed on the Apple security updates page. Apple security documents reference...
About the security content of iOS 12.4.9 - Apple Support
About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recent releases are listed on the Apple security updates page. Apple security documents reference...
About the security content of watchOS 5.3.9
About the security content of watchOS 5.3.9 This document describes the security content of watchOS 5.3.9. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are...
About the security content of macOS Catalina 10.15.7 Supplemental Update, macOS Catalina 10.15.7 Update
About the security content of macOS Catalina 10.15.7 Supplemental Update, macOS Catalina 10.15.7 Update This document describes the security content of macOS Catalina 10.15.7 Supplemental Update, macOS Catalina 10.15.7 Update. About Apple security updates For our customers' protection, Apple...
About the security content of watchOS 6.2.9
About the security content of watchOS 6.2.9 This document describes the security content of watchOS 6.2.9. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are...