PT-2022-7567 · Apple +7 · Macos Ventura +13

Name of the Vulnerable Software and Affected Versions: tvOS versions prior to 16.1 iOS versions prior to 15.7.1 and prior to 16.1 iPadOS versions prior to 15.7.1 and prior to 16.1 macOS Ventura versions prior to 13 watchOS versions prior to 9.1 Safari versions prior to 16.1 Description: A...

The vulnerability of the WKUserScript script in Mozilla Firefox’s browser loading mechanism for iOS allows a malicious user to load any file they desire.

The vulnerability of the WKUserScript script in Mozilla Firefox’s browser download function for iOS is related to deficiencies in access control. Exploiting this vulnerability allows a remote attacker to download any file they desire...

Apple Security Update: iOS 16.0.2

Apple recommends to install security update iOS 16.0.2 on devices iPhone 8 and later...

The vulnerability of the Core Telephony framework in operating systems such as Mac OS, iOS, iPadOS, and watchOS allows attackers to circumvent security restrictions.

The vulnerability of the Core Telephony framework in operating systems such as Mac OS, iOS, iPadOS, and watchOS relates to the restoration of unreliable data in memory. Exploiting this vulnerability can allow a malicious actor to bypass security restrictions remotely...

Wifi HD Wireless Disk Drive 11 - Local File Inclusion

Exploit Title: Wifi HD Wireless Disk Drive 11 - Local File Inclusion Date: Aug 13, 2022 Exploit Author: Chokri Hammedi Vendor Homepage: http://www.savysoda.com Software Link: https://apps.apple.com/us/app/wifi-hd-wireless-disk-drive/id311170976 Version: 11 Tested on: iPhone OS 155 Proof of Concep...

PT-2022-7605 · Apple +5 · Macos Ventura +11

Name of the Vulnerable Software and Affected Versions: Safari versions prior to 16.2 tvOS versions prior to 16.2 macOS Ventura versions prior to 13.1 iOS versions prior to 15.7.2 and prior to 16.2 iPadOS versions prior to 15.7.2 and prior to 16.2 watchOS versions prior to 9.2 Description: A memor...

PhotoSync 4.7 Local File Inclusion Vulnerability

Exploit Title: PhotoSync 4.7 IOS APP Local file inclusion Exploit Author: Chokri Hammedi Vendor Homepage: https://www.photosync-app.com/home.html Software Link: https://apps.apple.com/us/app/photosync-transfer-photos/id415850124 Version: 4.7 Tested on: iPhone IOS 16.0 GET...

PhotoSync 4.7 Local File Inclusion

Exploit Title: PhotoSync 4.7 IOS APP Local file inclusion Date: Sep 19, 2022 Exploit Author: Chokri Hammedi Vendor Homepage: https://www.photosync-app.com/home.html Software Link: https://apps.apple.com/us/app/photosync-transfer-photos/id415850124 Version: 4.7 Tested on: iPhone IOS 16.0 GET...

CVE-2022-26959

There are two full read/write Blind/Time-based SQL injection vulnerabilities in the Northstar Club Management version 6.3 application. The vulnerabilities exist in the userName parameter of the processlogin.jsp page in the /northstar/Portal/ directory and the userID parameter of the login.jsp pag...

Apple Security Update: iOS 16.0.1

Apple recommends to install security update iOS 16.0.1 on devices iPhone 14 all models...

Apple Releases iOS and macOS Updates to Patch Actively Exploited Zero-Day Flaw

Apple has released another round of security updates to address multiple vulnerabilities in iOS and macOS, including a new zero-day flaw that has been used in attacks in the wild. The issue, assigned the identifier CVE-2022-32917, is rooted in the Kernel component and could enable a malicious app...

PT-2022-21550 · Apple · Ipados +4

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 12.6 iOS versions prior to 15.7 iPadOS versions prior to 15.7 macOS Big Sur versions prior to 11.7 Description: A logic issue was addressed with improved restrictions, which may have allowed an app to read sensitive...

PT-2022-21535 · Apple · Ios +2

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 12.6 iOS versions prior to 15.7 iPadOS versions prior to 15.7 macOS Big Sur versions prior to 11.7 Description: The issue allows an app to potentially disclose kernel memory due to inadequate memory handling. This has...

PT-2022-21572 · Apple · Ios +3

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 12.6 macOS Big Sur versions prior to 11.7 iOS versions prior to 15.7 iOS versions prior to 16 iPadOS versions prior to 15.7 Description: The issue allows an app to potentially execute arbitrary code with kernel...

Apple IOS 安全漏洞

Apple iOS is a set of operating systems developed for mobile devices by Apple Inc. in the United States. A security vulnerability exists in Apple IOS prior to version 16, which originates in Safari in the iPhone 8 series and later iPhones where accessing a malicious website may result in address...

PT-2022-6381 · Apple · Ios +2

Name of the Vulnerable Software and Affected Versions: Apple iOS versions prior to 15.7 and 16 Apple iPadOS versions prior to 15.7 Apple macOS versions prior to Big Sur 11.7 and Monterey 12.6 Description: The issue is related to a buffer overflow vulnerability that may allow an application to...

Apple IOS 安全漏洞

Apple iOS is a set of operating systems developed for mobile devices by the American company Apple. A security vulnerability exists in Apple IOS prior to version 16, which stems from the fact that in the iPhone 8 series and later iPhones, someone with physical access to the iOS device may be able...

PT-2022-21573

Name of the Vulnerable Software and Affected Versions Safari versions prior to 16 iOS versions prior to 16 iOS versions prior to 15.7 iPadOS versions prior to 15.7 Description An out-of-bounds read issue was addressed with improved bounds checking. Processing maliciously crafted web content may...

PT-2022-21555 · Apple · Ios +3

Name of the Vulnerable Software and Affected Versions: Safari versions prior to 16 iOS versions prior to 15.7 and 16 iPadOS versions prior to 15.7 macOS versions prior to Ventura 13 Description: An access issue was addressed with improvements to the sandbox, which may allow a sandboxed process to...

@Drive 2.8 Local File Inclusion Vulnerability

Exploit Title: @Drive 2.8 Local File inclusion Exploit Author: Chokri Hammedi Vendor Homepage: https://evolutive.co/ Software Link: https://apps.apple.com/us/app/drive/id578982909 Version: 2.8 Tested on: iPhone ios 15.6 GET /../../../../../../../../../../../../../../../../etc/hosts HTTP/1.1 Host:...