Beware! Connecting to This Wireless Network Can Break Your iPhone's Wi-Fi Feature

A wireless network naming bug has been discovered in Apple's iOS operating system that effectively disables an iPhone's ability to connect to a Wi-Fi network. The issue was spotted by security researcher Carl Schou, who found that the phone's Wi-Fi functionality gets permanently disabled after...

Patch now! Apple fixes in-the-wild iPhone vulnerabilities

Apple has fixed two vulnerabilities in Safaris WebKit component, announcing it is aware of a report that they may have been actively exploited. Both vulnerabilities could be abused by maliciously crafted web content that could lead to arbitrary code execution: In other words, the bugs let rogue...

Apple Hurries Patches for Safari Bugs Under Active Attack

Apple issued two out-of-band security fixes for its Safari web browser, fixing zero-day vulnerabilities that “may have been actively exploited,” according to a Monday security bulletin by the company. The bugs affect sixth-generation Apple iPhones, iPads and iPod touch model hardware, released...

The vulnerability of the web page rendering module in WebKit operating systems for tvOS, iOS, iPadOS, and watchOS allows attackers to execute arbitrary code.

The vulnerability of the Web page rendering module in WebKit operating systems for tvOS, iOS, iPadOS, and watchOS is related to the use of memory after it is freed. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code using malicious web content...

The vulnerability of the web page rendering module in WebKit operating systems for tvOS, iOS, iPadOS, and watchOS allows attackers to execute arbitrary code.

The vulnerability of the Web page rendering module in WebKit operating systems for tvOS, iOS, iPadOS, and watchOS is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using malicious web content...

Issue with Activation Lock Bypass command Endpoint management console for iPhone only.

Issue: On supervised iPhone devices, when we send Activation lock Bypass command from console, it will always results in failure and we can see the error message under Device Details - Delivery Groups. Issue is seen only iPhone models and on iPad it works fine. We have confirmed Activation lock...

CVE-2021-20728

Improper access control vulnerability in goo blog App for Android ver.1.2.25 and earlier and for iOS ver.1.3.3 and earlier allows a remote attacker to lead a user to access an arbitrary website via the vulnerable App...

CVE-2021-20732

The ATOM ATOM - Smart life App for Android versions prior to 1.8.1 and ATOM - Smart life App for iOS versions prior to 1.8.2 does not verify server certificate properly, which allows man-in-the-middle attackers to eavesdrop on encrypted communication via a crafted certificate...

wireapp wire-ios 输入验证错误漏洞

Wire is a chat software by an individual developer. The program supports Web, WindowsiOS, Android, and OS X platforms, has a group feature, allows voice calls, sends photos, and its original way of saying hello, PING. Wire wire-ios has a security vulnerability that can be exploited by attackers t...

PT-2021-5441 · Apple · Ipados +4

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 11.4 tvOS versions prior to 14.6 watchOS versions prior to 7.5 iOS versions prior to 14.6 iPadOS versions prior to 14.6 Description: A logic issue was addressed with improved state management, which could allow a...

PT-2021-5440 · Apple · Ipados +4

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 11.4 tvOS versions prior to 14.6 watchOS versions prior to 7.5 iOS versions prior to 14.6 iPadOS versions prior to 14.6 Description: A logic issue was addressed with improved validation, which could allow a malicious...

Apple Exec Calls Level of Mac Malware ‘Unacceptable’

Apple is using the growing threat of malware on its Mac platform as a defense in a lawsuit that could force the company to open up new channels of applications for its mobile iOS platform. In testimony in a California court Wednesday, Apple head of software engineering, Craig Federighi called the...

The vulnerability of iPhone smartphones and iPad tablets based on A7-A11 chips lies in the lack of protection for sensitive data, allowing attackers to gain access to encryption/decryption functions.

The vulnerability of iPhone smartphones and iPad tablets based on A7-A11 chips relates to the lack of protection for sensitive data. Exploiting this vulnerability can allow attackers to gain access to encryption/decryption functions by using the Checkm8 exploit, which runs during device startup a...

WebSSH for iOS 14.16.10 - (mashREPL) Denial of Service Exploit

Exploit Title: WebSSH for iOS 14.16.10 - 'mashREPL' Denial of Service PoC Author: Luis Martinez Vendor Homepage: https://apps.apple.com/mx/app/webssh-ssh-client/id497714887 Software Link: App Store for iOS devices Tested Version: 14.16.10 Vulnerability Type: Denial of Service DoS Local Tested on...

CVE-2021-31319

Telegram Android 7.1.0 2090, Telegram iOS 7.1, and Telegram macOS 7.1 are affected by an Integer Overflow in the LOTGradient::populate function of their custom fork of the rlottie library. A remote attacker might be able to access heap memory out-of-bounds on a victim device via a malicious...

CVE-2021-31320

Telegram Android 7.1.0 2090, Telegram iOS 7.1, and Telegram macOS 7.1 are affected by a Heap Buffer Overflow in the VGradientCache::generateGradientColorTable function of their custom fork of the rlottie library. A remote attacker might be able to overwrite heap memory out-of-bounds on a victim...

UBUNTU-CVE-2021-31323

Telegram Android 7.1.0 2090, Telegram iOS 7.1, and Telegram macOS 7.1 are affected by a Heap Buffer Overflow in the LottieParserImpl::parseDashProperty function of their custom fork of the rlottie library. A remote attacker might be able to access heap memory out-of-bounds on a victim device via ...

UBUNTU-CVE-2021-31319

Telegram Android 7.1.0 2090, Telegram iOS 7.1, and Telegram macOS 7.1 are affected by an Integer Overflow in the LOTGradient::populate function of their custom fork of the rlottie library. A remote attacker might be able to access heap memory out-of-bounds on a victim device via a malicious...

webkitgtk: Input validation issue leading to cross site scripting attack

An input validation issue was addressed with improved input validation. This issue is fixed in iTunes 12.11.3 for Windows, iCloud for Windows 12.3, macOS Big Sur 11.3, Safari 14.1, watchOS 7.4, tvOS 14.5, iOS 14.5 and iPadOS 14.5. Processing maliciously crafted web content may lead to a cross sit...

PT-2021-19239 · Telegram +2 · Telegram Ios +4

Name of the Vulnerable Software and Affected Versions: Telegram Android versions prior to 7.1.0 2090 Telegram iOS versions prior to 7.1 Telegram macOS versions prior to 7.1 Description: The issue is related to an Integer Overflow in the LOTGradient::populate function of the custom fork of the...