CVE-2017-2730

HUAWEI HiLink APP for IOS versions earlier before 5.0.25.306 and HUAWEI Tech Support APP for IOS versions earlier before 5.0.0 have an information leak vulnerability. When an iPhone with these APPs installed access the Wi-Fi hotpot built by attacker, the attacker can collect the information of...

CVE-2017-2730

CVE-2017-2730 affects Huawei HiLink (iOS) and Huawei Tech Support (iOS) apps prior to 5.0.25.306 and 5.0.0, respectively. The issue is an information-leak vulnerability where, when an iPhone running these apps connects to a Wi‑Fi hotspot set up by an attacker, the attacker can collect the phone’s...

iOS < 11.1 / tvOS < 11.1 / watchOS < 4.1 - Denial of Service

Exploit Title: TpwnT - iOS Denail of Service POC Date: 10-31-2017 Exploit Author: Russian Otter Ro Vendor Homepage: https://support.apple.com/en-us/HT208222 Version: 2.1 Tested on: iOS 10.3.2 - 11.1 CVE: CVE-2017-13849 """ ------------------------- CVE-2017-13849 TpwnT by Ro of SavSec...

10-year-old kid uses his face to unlock mom’s iPhone X with Face ID

By Waqas When iPhone X was launched, Apple claimed its Face ID This is a post from HackRead.com Read the original post: 10-year-old kid uses his face to unlock moms iPhone X with Face ID...

November 14, 2017 – Morning Cyber Coffee Headlines – “Hole Punch” Edition

Good morning! Sit with Carbon Black this morning over a cup of coffee or tea and browse a few industry headlines to get the day started. We’ve got just enough information below to get you through that first cup…enjoy! November 14, 2017 - Headlines Carbon Black in the News: Carbon Black taps...

Apple iPhone X Face ID Fooled by a Mask

Apple’s Face ID technology, the centerpiece biometric authentication mechanism for the iPhone X, has been cracked a little more than a week after it was introduced to the public. Researchers from Vietnamese security company Bkav demonstrated that they could fool the technology to unlock the phone...

The vulnerability of Wi-Fi operating system components in Mac OS X and iOS allows a hacker to execute arbitrary code in a privileged context or cause a service failure.

The vulnerability of Wi-Fi operating system components such as Mac OS X and iOS arises from the execution of operations beyond the buffer in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in privileged context or cause a service failure memory corruption ...

The vulnerability of the SQLite component in operating systems such as Mac OS X and iOS, as well as in the iCloud service, allows a malicious actor to execute arbitrary code in a privileged context or cause a service failure.

The vulnerability of the SQLite component in operating systems such as Mac OS X and iOS, as well as in the iCloud service, arises from operations that occur outside the buffer in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in privileged contexts or cau...

The vulnerability of the Wi-Fi component of the iOS operating system allows a hacker to trigger a service failure or execute arbitrary code in a privileged context.

The vulnerability of the iOS operating system’s Wi-Fi component arises from an operation that occurs outside the buffer in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in privileged context or cause a service failure memory corruption by using specially...

The vulnerability of the Exchange ActiveSync component of the iOS operating system allows a hacker to delete data from the device.

The vulnerability of the Exchange ActiveSync component of the iOS operating system is related to improper handling of permissions during account setup. Exploiting this vulnerability allows a malicious actor to delete data from the device during account setup, by capturing the open AutoDiscover V1...

The vulnerability of the SQLite component in Mac OS X and iOS operating systems allows a hacker to cause a service failure.

The vulnerability of the SQLite component in Mac OS X and iOS operating systems arises from the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

The vulnerability of the Kernel component in Mac OS X and iOS operating systems allows attackers to execute arbitrary code in a privileged context or cause service interruptions.

The vulnerability of the Kernel component in Mac OS X and iOS operating systems arises from the execution of an operation outside the buffer in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in privileged context, or cause a service failure memory...

Apple iPhone X's Face ID Hacked (Unlocked) Using 3D-Printed Mask

Just a week after Apple released its brand new iPhone X on November 3, a team of hackers has claimed to successfully hack Apple's Face ID facial recognition technology with a mask that costs less than $150. Yes, Apple's "ultra-secure" Face ID security for the iPhone X is not as secure as the...

CVE-2017-13805

An issue was discovered in certain Apple products. iOS before 11.1 is affected. The issue involves the "Siri" component. It allows physically proximate attackers to obtain sensitive information via a Siri request for private-content notifications that should not have been available in the...

CVE-2017-13799

An issue was discovered in certain Apple products. iOS before 11.1 is affected. macOS before 10.13.1 is affected. tvOS before 11.1 is affected. watchOS before 4.1 is affected. The issue involves the "Kernel" component. It allows attackers to execute arbitrary code in a privileged context or cause...

DEBIAN-CVE-2017-13788

An issue was discovered in certain Apple products. iOS before 11.1 is affected. Safari before 11.0.1 is affected. iCloud before 7.1 on Windows is affected. iTunes before 12.7.1 on Windows is affected. tvOS before 11.1 is affected. The issue involves the "WebKit" component. It allows remote...

DEBIAN-CVE-2017-13794

An issue was discovered in certain Apple products. iOS before 11.1 is affected. Safari before 11.0.1 is affected. iCloud before 7.1 on Windows is affected. iTunes before 12.7.1 on Windows is affected. tvOS before 11.1 is affected. The issue involves the "WebKit" component. It allows remote...

All it took for researchers was a mask to bypass iPhone X Face ID

By Waqas Apple Inc. introduced Face ID facial recognition system on September This is a post from HackRead.com Read the original post: All it took for researchers was a mask to bypass iPhone X Face ID...

tout-pour-iphone.com XSS vulnerability

Open Bug Bounty ID: OBB-392927 Description| Value ---|--- Affected Website:| tout-pour-iphone.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention...

Mobile Pwn2Own: Hackers pwn iPhone, Huawei, Galaxy and Pixel Phone

By Waqas At the Mobile Pwn2Own competition 2017, white hat hackers managed This is a post from HackRead.com Read the original post: Mobile Pwn2Own: Hackers pwn iPhone, Huawei, Galaxy and Pixel Phone...