WordPress iPhone Webclip Manager plugin <= 0.5 - CSRF to Stored XSS vulnerability

CSRF to Stored XSS vulnerability discovered by SOPROBRO Patchstack Alliance in WordPress Plugin iPhone Webclip Manager versions = 0.5...

Andrew Tate’s ‘Educational Platform’ Was Hacked

Plus: The worst telecom hack in US history rolls on, iPhones are harder to break into, and more of the week’s top security news...

WordPress iPhone Webclip Manager Plugin <= 0.5 is vulnerable to Cross Site Request Forgery (CSRF)

Software iPhone Webclip Manager Type Plugin Vulnerable versions = 0.5 Fixed in N/A OWASP Top 10 A1: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2024-53735 Patch priority Low CVSS severity Low 7.1 Developer Claim ownership PSID 64928b79a59b Credits SOPROBRO Require...

Apple iOS和Apple iPadOS 安全漏洞

Apple iOS and Apple iPadOS are products of Apple Inc. Apple iOS is an operating system developed for mobile devices, and Apple iPadOS is an operating system for iPad tablets. A security vulnerability exists in Apple iOS before 18.1.1 and Apple iPadOS before 18.1.1, which stems from the fact that...

SUSE CVE-2024-11115

Insufficient policy enforcement in Navigation in Google Chrome on iOS prior to 131.0.6778.69 allowed a remote attacker to perform privilege escalation via a series of UI gestures. Chromium security severity: Medium...

You lost your iPhone, but it’s locked. That’s fine, right?

TL;DR Default iOS configuration leaves your locked device vulnerable Ensure your emergency contacts are set. Use ‘FindMy’ to track / wipe lost devices. Take regular backups. Consider turning off the lock screen message previews. Introduction Picture this: you've lost your iPhone. Luckily, it's...

CVE-2024-44233

The issue was addressed with improved bounds checks. This issue is fixed in macOS Sonoma 14.7.1, macOS Ventura 13.7.1, visionOS 2.1, watchOS 11.1, tvOS 18.1, iOS 17.7.1 and iPadOS 17.7.1, iOS 18.1 and iPadOS 18.1. Parsing a maliciously crafted video file may lead to unexpected system termination...

Apple多款产品 安全漏洞

Apple iOS is an operating system developed for mobile devices. apple tvOS is a smart TV operating system. apple macOS is a proprietary operating system developed for Mac computers. A security vulnerability exists in multiple Apple products that originates from an improper boundary check, where...

VulnCheck KEV: CVE-2020-9870

A logic issue was addressed with improved validation. This issue is fixed in iOS 13.6 and iPadOS 13.6, macOS Catalina 10.15.6, tvOS 13.4.8. An attacker with memory write capability may be able to bypass pointer authentication codes and run arbitrary code...

CVE-2024-40867

A custom URL scheme handling issue was addressed with improved input validation. This issue is fixed in iOS 18.1 and iPadOS 18.1. A remote attacker may be able to break out of Web Content sandbox...

Apple Launches ‘Apple Intelligence’ and Offers $1M Bug Bounty for Security

Apple unveils 'Apple Intelligence' for iPhone, iPad, and Mac devices while offering a $1 million bug bounty for…...

Apple iOS和Apple iPadOS 安全漏洞

Apple iOS and Apple iPadOS are products of Apple Inc. Apple iOS is an operating system developed for mobile devices, and Apple iPadOS is an operating system for iPad tablets. A security vulnerability exists in Apple iOS version 18.1 and Apple iPadOS version 18.1, which arises from an attacker wit...

Apple iOS和Apple iPadOS 安全漏洞

Apple iOS and Apple iPadOS are products of Apple Inc. Apple iOS is an operating system developed for mobile devices, and Apple iPadOS is an operating system for iPad tablets. A security vulnerability exists in Apple iOS version 18.1 and Apple iPadOS version 18.1, which originates from handling...

PT-2024-31113 · Apple · Ios +3

Name of the Vulnerable Software and Affected Versions: iOS versions prior to 18.1 iPadOS versions prior to 18.1 watchOS versions prior to 11.1 Description: The issue allows an app to potentially determine a user's current location due to inadequate redaction of sensitive information. This was...

PT-2024-29110 · Apple · Ios +1

Name of the Vulnerable Software and Affected Versions: iOS versions prior to 18 iPadOS versions prior to 18 Description: An issue allowed an attacker to potentially use Siri to enable Auto-Answer Calls. This could be exploited on a locked device. Recommendations: For iOS versions prior to 18,...

PT-2024-31081 · Apple · Visionos +7

Name of the Vulnerable Software and Affected Versions: visionOS versions prior to 2.1 iOS versions prior to 18.1 iPadOS versions prior to 18.1 macOS Ventura versions prior to 13.7.1 macOS Sonoma versions prior to 14.7.1 watchOS versions prior to 11.1 tvOS versions prior to 18.1 Description: A pat...

PT-2024-31048 · Apple · Macos Sonoma +3

Name of the Vulnerable Software and Affected Versions: Apple iOS versions prior to 17.7.1 Apple iPadOS versions prior to 17.7.1 Apple macOS Sonoma versions prior to 14.7.1 Apple iOS versions prior to 18.1 Apple iPadOS versions prior to 18.1 Description: Processing a maliciously crafted file may...

PT-2024-31097 · Apple · Visionos +6

Name of the Vulnerable Software and Affected Versions: iOS versions prior to 18.1 iPadOS versions prior to 18.1 visionOS versions prior to 2.1 macOS Sonoma versions prior to 14.7.1 watchOS versions prior to 11.1 tvOS versions prior to 18.1 Description: The issue allows a malicious app to access...

Apple iOS和Apple iPadOS 安全漏洞

Apple iOS and Apple iPadOS are products of Apple Inc. Apple iOS is an operating system developed for mobile devices, and Apple iPadOS is an operating system for iPad tablets. A security vulnerability exists in Apple iOS version 18 and Apple iPadOS version 18, which stems from a password autofill...

PT-2024-31062 · Apple · Ipados +5

Name of the Vulnerable Software and Affected Versions: macOS Sonoma versions prior to 14.7.1 macOS Ventura versions prior to 13.7.1 visionOS versions prior to 2.1 watchOS versions prior to 11.1 tvOS versions prior to 18.1 iOS versions prior to 17.7.1 and prior to 18.1 iPadOS versions prior to...