Security feature bypass

A vulnerability has been identified in SIMATIC WinCC OA Operator iOS App All versions V1.4. Insufficient protection of sensitive information e.g. session key for accessing server in Siemens WinCC OA Operator iOS app could allow an attacker with physical access to the mobile device to read...

CVE-2018-4847

A vulnerability has been identified in SIMATIC WinCC OA Operator iOS App All versions V1.4. Insufficient protection of sensitive information e.g. session key for accessing server in Siemens WinCC OA Operator iOS app could allow an attacker with physical access to the mobile device to read...

CVE-2018-4847

A vulnerability has been identified in SIMATIC WinCC OA Operator iOS App All versions V1.4. Insufficient protection of sensitive information e.g. session key for accessing server in Siemens WinCC OA Operator iOS app could allow an attacker with physical access to the mobile device to read...

CVE-2018-4847

The CVE concerns SIMATIC WinCC OA Operator iOS App (all versions prior to v1.4). Affected component: the app’s data directory where sensitive information (e.g., session keys) can be read if an attacker has physical access. Root cause: Insufficient protection of sensitive information leading to in...

CVE-2018-4847: Insertion of Sensitive Information into Externally-Accessible File or Directory

A vulnerability has been identified in SIMATIC WinCC OA Operator iOS App All versions V1.4. Insufficient protection of sensitive information e.g. session key for accessing server in Siemens WinCC OA Operator iOS app could allow an attacker with physical access to the mobile device to read...

PT-2018-16566

Name of the Vulnerable Software and Affected Versions SIMATIC WinCC OA Operator iOS App versions prior to V1.4 Description A security issue has been identified due to insufficient protection of sensitive information, such as session keys for accessing the server, in the Siemens WinCC OA Operator...

Siemens SIMATIC WinCC OA Operator IOS App (Update A)

1. EXECUTIVE SUMMARY CVSS v3 4.0 Vendor : Siemens Equipment : SIMATIC WinCC OA iOS App Vulnerability : File and Directory Information Exposure. 2 UPDATE INFORMATION This updated advisory is a follow-up to the original advisory titled ICSA-18-109-01 Siemens SIMATIC WinCC OA Operator iOS App that...

HPSBGN03565 rev.1 - Unsecure (http) Transactions in Isaac Mizrahi Smartwatch Mobile App

Potential Security Impact Potential theft of credentials and UI hijack Source: HP, HP Product Security Response Team PSRT Reported by: Jerry Decime VULNERABILITY SUMMARY A potential security vulnerability caused by the use of unsecure http transactions during login has been identified with early...

Netflix Opens Public Bug Bounty Program with $15K Payout Cap

Netflix expanded its bug bounty program on Wednesday opening it up to any white hat hacker and at the same time increased the top reward to $15,000. The bug bounty program, managed by Bugcrowd, now allows any registered hackers to scour Netflix vast mobile, cloud and software platform for minor a...

Code injection

Fixed sizes of HTTPS responses in Tinder iOS app and Tinder Android app allow an attacker to extract private sensitive information by sniffing network traffic...

CVE-2018-6018: Cleartext Transmission of Sensitive Information

Fixed sizes of HTTPS responses in Tinder iOS app and Tinder Android app allow an attacker to extract private sensitive information by sniffing network traffic...

PT-2018-17301

Name of the Vulnerable Software and Affected Versions Tinder iOS app affected versions not specified Tinder Android app affected versions not specified Description The issue allows an attacker to extract private sensitive information by sniffing network traffic due to fixed sizes of HTTPS...

PT-2018-17300

Name of the Vulnerable Software and Affected Versions Tinder iOS app affected versions not specified Tinder Android app affected versions not specified Description The issue concerns the unencrypted transmission of images in the Tinder app, which allows an attacker to extract private sensitive...

CVE-2018-6017: Cleartext Transmission of Sensitive Information

Unencrypted transmission of images in Tinder iOS app and Tinder Android app allows an attacker to extract private sensitive information by sniffing network traffic...

CVE-2018-5283

The Photos in Wifi application 1.0.1 for iOS has directory traversal via the ext parameter to assets-library://asset/asset.php...

CVE-2017-3194

Pandora iOS app prior to version 8.3.2 fails to properly validate SSL certificates provided by HTTPS connections, which may enable an attacker to conduct man-in-the-middle MITM attacks...

CVE-2017-3194: Improper Certificate Validation

Pandora iOS app prior to version 8.3.2 fails to properly validate SSL certificates provided by HTTPS connections, which may enable an attacker to conduct man-in-the-middle MITM attacks...

CVE-2017-3194

Pandora iOS app prior to version 8.3.2 fails to properly validate SSL certificates provided by HTTPS connections, which may enable an attacker to conduct man-in-the-middle MITM attacks...

PT-2017-15704

Name of the Vulnerable Software and Affected Versions Pandora iOS app versions prior to 8.3.2 Description The issue is related to the failure of the Pandora iOS app to properly validate SSL certificates provided by HTTPS connections. This failure may enable an attacker to conduct man-in-the-middl...

Apple macOS/iOS - Kernel Double Free due to IOSurfaceRootUserClient not Respecting MIG Ownership Rules

I have previously detailed the lifetime management paradigms in MIG in the writeups for: CVE-2016-7612 https://bugs.chromium.org/p/project-zero/issues/detail?id=926 and CVE-2016-7633 https://bugs.chromium.org/p/project-zero/issues/detail?id=954 If a MIG method returns KERNSUCCESS it means that th...