Apple-Remote-Crash-Tool-CVE-2018-4407

Apple-Remote-Crash-Tool-CVE-2018-4407 동일한 WiFi 네트워크에 있는 모든 macOS High Sierra 또는 iOS 11 장치를 충돌시킵니다 공개된 '힙 버퍼 오버플로 취약점'CVE-2018-4407을 사용하여 전체 네트워크를 더 쉽게 공격할 수 있게 해주는 작은 도구입니다. 요구 사항 MacOS Python 설치 Scapy 설치 pip install scapy 기본 원리 대상 장치의 IP 주소로 악성 ICMP 패킷을 전송합니다 지원 대상 Apple iOS 11 및 이전 버전: 모든 장치 iO...

ios11-cookie-set-expire-issue

iOS 11 쿠키 설정/만료 문제 iOS 11 홈 화면 웹 앱에서 쿠키 설정 및 만료에 간헐적인 문제가 있는 것으로 보입니다. 두 가지 오류 동작이 관찰될 수 있습니다: 쿠키가 설정된 후 앱을 닫았다가 다시 열면, 앱을 다시 열었을 때 쿠키가 더 이상 존재하지 않을 수 있습니다 쿠키가 만료된 후 앱을 닫았다가 다시 열면, 앱을 다시 열었을 때 쿠키가 여전히 존재할 수 있습니다 재현 단계: 1. Mobile Safari에서...

needle

Needle Needle — это open source модульный фреймворк, предназначенный для упрощения процесса оценки безопасности iOS-приложений. ВНИМАНИЕ: Этот инструмент снят с эксплуатации и больше не поддерживается. Мы оставляем оригинальный проект в архивных целях. Изначально Needle был создан для работы с iO...

CVE-2018-4302

A null pointer dereference was addressed with improved validation. This issue is fixed in macOS High Sierra 10.13, iCloud for Windows 7.0, watchOS 4, iOS 11, iTunes 12.7 for Windows. Processing maliciously crafted XML may lead to an unexpected application termination or arbitrary code execution...

EUVD-2018-16088

Malware in sbrugna...

EUVD-2017-16155

Malware in sbrugna...

CVE-2018-4302

A null pointer dereference was addressed with improved validation. This issue is fixed in macOS High Sierra 10.13, iCloud for Windows 7.0, watchOS 4, iOS 11, iTunes 12.7 for Windows. Processing maliciously crafted XML may lead to an unexpected application termination or arbitrary code execution...

Null pointer dereference

A null pointer dereference was addressed with improved validation. This issue is fixed in macOS High Sierra 10.13, iCloud for Windows 7.0, watchOS 4, iOS 11, iTunes 12.7 for Windows. Processing maliciously crafted XML may lead to an unexpected application termination or arbitrary code execution...

New iOS Jailbreak Tool Works on iPhone Models iOS 11 to iOS 13.5

A hacker team has released a new method to jailbreak iPhones that they claim uses a zero-day exploit that allows them to jailbreak iPhones running iOS 11 through Apple’s most recent version of its mobile operating system – iOS 13.5. Calling it a “big milestone for jailbreaking,” one of its...

Apple iOS/tvOS/iPadOS/watchOS/macOS CVE-2019-8848 Privilege Escalation Vulnerability

Description Apple iOS/tvOS/iPadOS/watchOS/macOS are prone to a privilege-escalation vulnerability. An attacker can exploit this issue to gain elevated privileges on an affected system. Technologies Affected Apple Ipad Mini- Apple TV Apple Watch Apple iOS 10 Apple iOS 10.0.1 Apple iOS 10.1 Apple i...

Apple macOS 10.13 - workq_kernreturn Denial of Service (PoC)

Apple macOS 10.13 - workqkernreturn Denial of Service PoC / Exploit Title: MacOS 10.13 - 'workqkernreturn' Denial of Service PoC Date: 2018-07-30 Exploit Author: Fabiano Anemone Vendor Homepage: https://www.apple.com/ Version: iOS 11.4.1 / MacOS 10.13.6 Tested on: iOS / MacOS CVE: Not assigned...

Apple iOS 11.x & 12.x - Authentication Bypass Vulnerability

Document Title: =============== Apple iOS 11.x & 12.x - Authentication Bypass Vulnerability References: =========== https://www.vulnerability-lab.com/getcontent.php?id=2161 View Video: https://www.youtube.com/watch?v=m9VMidADJcc Release Date: ============= 2018-10-26 Vulnerability Laboratory ID...

Apple iOS 11.x & 12.x - Authentication Bypass Vulnerability

Document Title: =============== Apple iOS 11.x & 12.x - Authentication Bypass Vulnerability References: =========== https://www.vulnerability-lab.com/getcontent.php?id=2161 View Video: https://www.youtube.com/watch?v=m9VMidADJcc Release Date: ============= 2018-10-25 Vulnerability Laboratory ID...

XNU kernel heap overflow due to bad bounds checking in MPTCP(CVE-2018-4241)

mptcpusrconnectx is the handler for the connectx syscall for the APMULTIPATH socket family. The logic of this function fails to correctly handle source and destination sockaddrs which aren't AFINET or AFINET6: // verify salen for AFINET: if dst-safamily == AFINET && dst-salen !=...

XNU Kernel - Heap Overflow Due to Bad Bounds Checking in MPTCP

mptcpusrconnectx is the handler for the connectx syscall for the APMULTIPATH socket family. The logic of this function fails to correctly handle source and destination sockaddrs which aren't AFINET or AFINET6: // verify salen for AFINET: if dst-safamily == AFINET && dst-salen !=...

XNU Kernel - Heap Overflow Due to Bad Bounds Checking in MPTCP

XNU Kernel - Heap Overflow Due to Bad Bounds Checking in MPTCP mptcpusrconnectx is the handler for the connectx syscall for the APMULTIPATH socket family. The logic of this function fails to correctly handle source and destination sockaddrs which aren't AFINET or AFINET6: // verify salen for...

XNU Kernel - Heap Overflow Due to Bad Bounds Checking in MPTCP Exploit

Exploit for multiple platform in category dos / poc mptcpusrconnectx is the handler for the connectx syscall for the APMULTIPATH socket family. The logic of this function fails to correctly handle source and destination sockaddrs which aren't AFINET or AFINET6: // verify salen for AFINET: if...

Code injection

An issue was discovered in certain Apple products. iOS before 11 is affected. The issue involves the "Sandbox Profiles" component. It allows attackers to determine whether arbitrary files exist via a crafted app...

QR Code Bug in Apple iOS 11 Could Lead You to Malicious Sites

A new vulnerability has been disclosed in iOS Camera App that could be exploited to redirect users to a malicious website without their knowledge. The vulnerability affects Apple's latest iOS 11 mobile operating system for iPhone, iPad, and iPod touch devices and resides in the built-in QR code...

Apple Siri is the aeration privacy vulnerability: lock screen notifications directly read-vulnerability warning-the black bar safety net

! iOS 11, Apple introduced a new way to protect user privacy, the user through the iPhone's lock screen hide notification content, until the use of Touch ID or Face ID to unlock the device. But in fact, even if unable to unlock the phone, or is there a very simple way to read these hidden...