Apple Facetime Information Disclosure

Affected Vendor: https://www.apple.com/ - Affected Software: Safari/Facetime on iOS - Affected Version: iOS 7 prior to 7.1 - Issue Type: Lack of user confirmation leading to a call being established, revealing the user's identity phone number or email address - Release Date: March 10, 2014 -...

Tweetbot Lack Of User Confirmation

Affected Vendor: http://tapbots.com/ - Affected Software: Tweetbot for Mac, iPad and iPhone - Affected Version: Mac: 1.3.3 - iPad: 2.8.5 - iPhone: 2.8.5 - Issue Type: Lack of user confirmation leading to Twitter action revealing the user's Twitter identity - Release Date: November 1, 2013 -...

Byword 2.x File Overwrite Vulnerability

The Metaclassy Byword app 2.x before 2.1 for iOS does not require confirmation of Replace file actions, which allows remote attackers to overwrite arbitrary files via the name and text parameters in a byword://replace URL. Affected Vendor: http://metaclassy.com/ - Affected Software: Byword for iO...