CVE-2024-56968

A security vulnerability exists in Shenzhen Intellirocks Tech Co. Ltd Govee Home for iOS version 6.5.01 . The flaw allows an attacker to access sensitive user information by supplying a crafted payload or a carefully crafted link. This issue is associated with CWE-601 (URL Redirection to Untruste...

CVE-2024-56953

An issue in Baidu China Co Ltd Baidu Input Method iOS version v12.6.13 allows attackers to access user information via supplying a crafted link...

CVE-2024-56971

A security vulnerability exists in Shuqi Novel iOS version 5.3.8 by Zhiyuan Yuedu (Guangzhou) Literature Information Technology Co., Ltd. The flaw allows an attacker to gain access to sensitive user information by providing a crafted link . This issue is categorized under CWE-601 (URL Redirection...

CVE-2024-56971

An issue in Zhiyuan Yuedu Guangzhou Literature Information Technology Co., Ltd Shuqi Novel iOS 5.3.8 allows attackers to access sensitive user information via supplying a crafted link...

CVE-2024-56948

An issue in KuGou Technology CO. LTD KuGou Music iOS v20.0.0 allows attackers to access sensitive user information via supplying a crafted link...

CVE-2024-56967

A vulnerability exists in Cloud Whale Interactive Technology LLC. PolyBuzz iOS version 2.0.20 that allows an attacker to access sensitive user information by providing a crafted link . The issue is associated with CWE-601 (URL Redirection to Untrusted Site) and CWE-922 (Insecure Storage of Sensit...

CVE-2023-38009

IBM Cognos Mobile Client for iOS 1.1 is affected by information disclosure via man-in-the-middle attacks due to lack of certificate pinning. The issue is documented in CVE-2023-38009 and corroborated by multiple sources in IBM/Red Hat/CNVD records. Remediation guidance consistently recommends upg...

CVE-2025-23108

Opening Javascript links in a new tab via long-press in the Firefox iOS client could result in a malicious script spoofing the URL of the new tab. This vulnerability was fixed in Firefox for iOS 134...

CVE-2025-23108 Firefox Mobile iOS Full Address Bar Spoof Using Open in New Tab and Javascript URI

Opening Javascript links in a new tab via long-press in the Firefox iOS client could result in a malicious script spoofing the URL of the new tab. This vulnerability was fixed in Firefox for iOS 134...

CISCO-SA-20180207-IOS

creationtimestamp| type| source ---|---|--- 2024-12-17 06:40:42+00:00| seen| https://social.circl.lu/users/vulnerabilitylookup/statuses/113666792775517368...

Researchers Uncover Symlink Exploit Allowing TCC Bypass in iOS and macOS

Details have emerged about a now-patched security vulnerability in Apple's iOS and macOS that, if successfully exploited, could sidestep the Transparency, Consent, and Control TCC framework and result in unauthorized access to sensitive information. The flaw, tracked as CVE-2024-44131 CVSS score:...

Apple iOS和iPadOS 安全漏洞

Apple iOS and Apple iPadOS are both products of Apple Inc. Apple iOS is an operating system developed for mobile devices. apple iPadOS is an operating system for the iPad tablet computer. A security vulnerability exists in Apple iOS prior to 18.2 and iPadOS prior to 18.2, which stems from the fac...

PT-2025-11544 · Apple · Ios +1

Name of the Vulnerable Software and Affected Versions: iOS versions prior to 18.2 iPadOS versions prior to 18.2 Description: A user in a privileged network position may be able to leak sensitive information. The issue was addressed by using HTTPS when sending information over the network...

Unspecified Vulnerability in Mozilla Firefox for iOS

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. A security vulnerability exists in Mozilla Firefox for iOS prior to version 131.2, which originates when opening an external link to an HTTP website under certain circumstances, and can be exploited by...

DEBIAN-CVE-2024-9961

Use after free in ParcelTracking in Google Chrome on iOS prior to 130.0.6723.58 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: Medium...

Microsoft Outlook for iOS Information Disclosure Vulnerability

...

Mozilla Focus for iOS Spoofing Vulnerability (CNVD-2024-40517)

Mozilla Focus is a browser for iOS devices from the Mozilla Foundation. Mozilla Focus for iOS is vulnerable to a spoofing vulnerability caused by an error related to the use of Javascript links. An attacker can exploit this vulnerability to spoof URL addresses in the Focus navigation bar...

Mozilla Firefox for iOS cross-site scripting vulnerability (CNVD-2024-36717)

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. Mozilla Firefox for iOS suffers from a cross-site scripting vulnerability that is caused due to prolonged pressing of download links. An attacker can exploit this vulnerability to steal the victim's...

Mozilla Firefox for iOS cross-site scripting vulnerability (CNVD-2024-36718)

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. A cross-site scripting vulnerability exists in Mozilla Firefox for iOS. The vulnerability is caused due to improper validation of user-supplied input in the link context menu. An attacker could use thi...

Apple iOS和Apple iPadOS 安全漏洞

Apple iOS and Apple iPadOS are products of Apple Inc.Apple iOS is an operating system developed for mobile devices.Apple iPadOS is an operating system for iPad tablets. A security vulnerability exists in Apple iOS before version 16.7.9 and iPadOS before version 16.7.9, which stems from the fact...