21 matches found
CVE-2020-27950
CVE-2020-27950 CVE-2020-27950 エクスプロイト...
browser-crash-tool
ブラウザクラッシュツール - Kali 概要 このツールは、Metasploitのwebkitbackdropfilterblur補助モジュールを使用して、iOS WebKitの脆弱性（CVE-2020-27950）を悪用します。しかし、いくつかのテストの後、すべてのブラウザで動作するようです。細工されたWebページを読み込むことで、対象のブラウザをクラッシュさせます。また、ngrokを使用して悪意のあるページへの公開アクセス可能なリンクを作成し、ターゲットに簡単に送信できるようにします。 免責事項:...
CVE-2020-27950
A memory initialization issue was addressed. This issue is fixed in macOS Big Sur 11.0.1, watchOS 7.1, iOS 12.4.9, watchOS 6.2.9, Security Update 2020-006 High Sierra, Security Update 2020-006 Mojave, iOS 14.2 and iPadOS 14.2, watchOS 5.3.9, macOS Catalina 10.15.7 Supplemental Update, macOS...
Exploit for Improper Initialization in Apple Ipados
This is a PoC exploit for CVE-2020-27950, a vulnerability in the macOS kernel that allows for a port pointer leak. The exploit targets the macOS kernel and leverages a vulnerability in the kalloc.1024 buffer to allocate a controlled buffer with a magic value. The exploit then creates an ipckmsg...
CVE-2020-27950
CVE-2020-27950 is a memory initialization issue in Apple’s XNU kernel that could allow a malicious app to disclose kernel memory. The CVE is fixed in multiple Apple updates: macOS Big Sur 11.0.1, iOS 14.2/iPadOS 14.2, watchOS 7.1, watchOS 6.2.9, and Security Updates for macOS Catalina 10.15.7 (Su...
CVE-2020-27950
A memory initialization issue was addressed. This issue is fixed in macOS Big Sur 11.0.1, watchOS 7.1, iOS 12.4.9, watchOS 6.2.9, Security Update 2020-006 High Sierra, Security Update 2020-006 Mojave, iOS 14.2 and iPadOS 14.2, watchOS 5.3.9, macOS Catalina 10.15.7 Supplemental Update, macOS...
Google Hacker Details Zero-Click 'Wormable' Wi-Fi Exploit to Hack iPhones
Google Project Zero white-hat hacker Ian Beer on Tuesday disclosed details of a now-patched critical "wormable" iOS bug that could have made it possible for a remote attacker to gain complete control of any device in the vicinity over Wi-Fi. The exploit makes it possible to "view all the photos,...
About the security content of Security Update 2020-006 High Sierra, Security Update 2020-006 Mojave - Apple Support
About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recent releases are listed on the Apple security updates page. Apple security documents reference...
About the security content of Security Update 2020-006 High Sierra, Security Update 2020-006 Mojave
About the security content of Security Update 2020-006 High Sierra, Security Update 2020-006 Mojave This document describes the security content of Security Update 2020-006 High Sierra, Security Update 2020-006 Mojave. About Apple security updates For our customers' protection, Apple doesn't...
Apple Patches Bugs Tied to Previously Identified Zero-Days
Apple has patched three previously identified zero-day vulnerabilities in its iPhone, iPod and iPad devices potentially related to a spate of related flaws recently discovered by the Google Project Zero team that also affect Google Chrome and Windows. Apple this week released iOS 14.2 and iPadOS...
Update Your iOS Devices Now — 3 Actively Exploited 0-Days Discovered
Apple on Thursday released multiple security updates to patch three zero-day vulnerabilities that were revealed as being actively exploited in the wild. Rolled out as part of its iOS, iPadOS, macOS, and watchOS updates, the flaws reside in the FontParser component and the kernel, allowing...
Update Your iOS Devices Now — 3 Actively Exploited 0-Days Discovered
Apple on Thursday released multiple security updates to patch three zero-day vulnerabilities that were revealed as being actively exploited in the wild. Rolled out as part of its iOS, iPadOS, macOS, and watchOS updates, the flaws reside in the FontParser component and the kernel, allowing...
CVE-2020-27950
creationtimestamp| type| source ---|---|--- 2020-11-06 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=524 2020-11-06 09:06:43+00:00| exploited| https://t.me/thehackernews/892 2020-11-06 10:46:03+00:00| exploited| https://t.me/truesecator/1121 2020-11-06 15:57:15+00:00|...
Vulnerabilities fixed in Apple iOS and iPadOS
Vulnerabilities have been fixed in Apple iOS and iPadOS, including three 0-day vulnerabilities. The vulnerabilities allow a malicious person to carry out attacks execute attacks that result in the following categories of damage: Remote code execution Administrator/Root privileges. Increased user...
About the security content of watchOS 6.2.9 - Apple Support
About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recent releases are listed on the Apple security updates page. Apple security documents reference...
About the security content of macOS Catalina 10.15.7 Supplemental Update, macOS Catalina 10.15.7 Update - Apple Support
About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recent releases are listed on the Apple security updates page. Apple security documents reference...
About the security content of iOS 12.4.9 - Apple Support
About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recent releases are listed on the Apple security updates page. Apple security documents reference...
About the security content of watchOS 5.3.9
About the security content of watchOS 5.3.9 This document describes the security content of watchOS 5.3.9. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are...
About the security content of macOS Catalina 10.15.7 Supplemental Update, macOS Catalina 10.15.7 Update
About the security content of macOS Catalina 10.15.7 Supplemental Update, macOS Catalina 10.15.7 Update This document describes the security content of macOS Catalina 10.15.7 Supplemental Update, macOS Catalina 10.15.7 Update. About Apple security updates For our customers' protection, Apple...
About the security content of watchOS 6.2.9
About the security content of watchOS 6.2.9 This document describes the security content of watchOS 6.2.9. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are...