iWifi for Chat v1.1 iOS - Denial of Service Vulnerability

Document Title: =============== iWifi for Chat v1.1 iOS - Denial of Service Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1375 Release Date: ============= 2014-12-16 Vulnerability Laboratory ID VL-ID: ====================================...

Masque iOS Vulnerability Disclosed

The vulnerability used in the WireLurker attacks has been uncovered and was reported to Apple in July but has yet to be patched, a researcher at FireEye said. Today’s disclosure of the Masque attack, which affects iOS 7.1.1, 7.1.2, 8.0, 8.1, and 8.1.1 beta, revealed that Apple mobile devices are...

iOS QuickOffice 3.1.0 - HTTP Method Remote DoS

No description provided by source. Exploit: QuickOffice v3.1.0 for iPhone/iPod Touch Malformed HTTP Method Remote DoS Date: 14/06/2010 Author: Nishant Das Patnaik Website: http://nishantdaspatnaik.yolasite.com Software Link: http://itunes.apple.com/us/app/quickoffice-connect/id304673686?mt=8...

AirPhoto WebDisk v4.1.0 iOS - Code Execution Vulnerability

Document Title: =============== AirPhoto WebDisk v4.1.0 iOS - Code Execution Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1258 Release Date: ============= 2014-04-22 Vulnerability Laboratory ID VL-ID: ====================================...

CVE-2012-5422

The CVE-2012-5422 entry describes an unspecified vulnerability in Cisco IOS on AS5400 devices, with versions before 15.3(2)T, that allows remote authenticated users to cause a denial of service (spurious errors) via unknown vectors (Bug ID CSCub61009). Affected product: Cisco IOS on AS5400 system...

Apple's SSL Vulnerability might allow NSA to hack iOS Devices Remotely

Just two days before Apple has disclosed a critical Security flaw in the SSL implementation on the iOS software that would allow man-in-the-middle attacks to intercept the SSL data by spoofing SSL servers. Dubbed as CVE-2014-1266, the so-called ‘goto fail;’ vulnerability in which the secure...

iOS vulnerability allows to disable 'Find My iPhone' without password

Smartphone manufacturers are adding ways for owners to track and manage their phones if they ever get lost or stolen. Find My iPhone is a service that comes with every iOS device that allows you to track your iPhone, whether it was lost or stolen. Normally, the iPhone requires a password if you...

Air Drive Plus v2.4 iOS - Arbitrary File Upload Vulnerability

Document Title: =============== Air Drive Plus v2.4 iOS - Arbitrary File Upload Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1000 Release Date: ============= 2013-07-08 Vulnerability Laboratory ID VL-ID:...

Air Drive Plus v2.4 iOS - Arbitrary File Upload Vulnerability

Document Title: =============== Air Drive Plus v2.4 iOS - Arbitrary File Upload Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1000 Release Date: ============= 2013-07-08 Vulnerability Laboratory ID VL-ID:...

Critical iOS vulnerability in Configuration Profiles pose malware threat

Israeli mobile security start-up Skycure has exposed a vulnerability that could allow hackers to control and spy on iPhones. A major security vulnerability for iOS configuration profiles pose malware threat. The vulnerability affects a file known as mobileconf files, which are used by cell phone...

How to bypass iOS 6.1.2 Screen Lock, another Exploit Exposed

After a series of security issues, it appears that Apple still has not been able to resolve all the issue in iOS. Last week, Apple rolled out its iOS 6.1.2 update to owners of the iPhone, iPad and iPod touch in an effort to fixing the 3G connectivity and an Exchange calendar bugs. Hackers found a...

Apple iOS < 6.0 Multiple Vulnerabilities

Binary data 6589.prm...

Design/Logic Flaw

Cisco IOS 12.4 and 15.0 through 15.2 allows physically proximate attackers to bypass the No Service Password-Recovery feature and read the start-up configuration via unspecified vectors, aka Bug ID CSCtr97640...

Apple Drops Researcher From Dev Program Over iOS Bug Demo App

Just a few hours after it became public the security researcher Charlie Miller had inserted a proof-of-concept app into the Apple App Store to demonstrate a serious vulnerability in iOS, Apple informed Miller that it was removing him from its developer program. Miller had created the app, which i...

CVE-2011-0350

Unspecified vulnerability in Cisco IOS 12.424MD before 12.424MD2 on the Cisco Content Services Gateway Second Generation aka CSG2 allows remote attackers to cause a denial of service device hang or reload via crafted TCP packets, aka Bug ID CSCth41891, a different vulnerability than CVE-2011-0349...

CVE-2010-3830

CVE-2010-3830 : The connected sources confirm a vulnerability in Apple iOS prior to 4.2 where an invalid pointer is accessed during the processing of packet filter rules. This flaw can allow local users to gain privileges via unspecified vectors. The affected product is iOS; the root cause is the...

CVE-2010-1387

Use-after-free vulnerability in JavaScriptCore in WebKit in Apple iTunes before 9.2 on Windows, and Apple iOS before 4 on the iPhone and iPod touch, allows remote attackers to execute arbitrary code or cause a denial of service application crash via vectors related to page transitions, a differen...

CVE-2009-2867

Cisco IOS Zone-Based Policy Firewall SIP inspection is affected by CVE-2009-2867 (Bug CSCsr18691). A crafted SIP transit packet can cause a denial of service resulting in a device reload on affected releases. The advisory specifies that only devices configured with SIP inspection in Zone-Based Po...

CVE-2006-4950

Cisco IOS 12.2 through 12.4 before 20060920, as used by Cisco IAD2430, IAD2431, and IAD2432 Integrated Access Devices, the VG224 Analog Phone Gateway, and the MWR 1900 and 1941 Mobile Wireless Edge Routers, is incorrectly identified as supporting DOCSIS, which allows remote attackers to gain...

Cisco IOS TCLSH AAA Command Authorization Bypass (CSCeh73049)

The remote host is a CISCO router containing a version of IOS that is vulnerable to a remote AAA command authorization bypass attack. The remote version of IOS does not enforce AAA command authorization checks for commands etnered in the TCL shell. An attacker with a shell access on the remote...