187 matches found
DVIA-v2
DVIA-v2 Desarrollado por 8ksec.io DVIA-v2 escrito en Swift junto con vulnerabilidades adicionales Damn Vulnerable iOS App DVIA es una aplicación de iOS que es malditamente vulnerable. Su objetivo principal es proporcionar una plataforma para entusiastas/profesionales de la seguridad móvil o...
ipa-scope
IPA-SCOPE v.2 IPA-SCOPE 是一个针对 iOS 应用的静态分析工具，能够提取重要信息，如链接、有趣的文件（.json, .cer, .der, .api 等），在渗透测试 iOS 应用时非常有用，能展示良好的结果。 此工具的新功能 ✅快速且易于使用 ✅获取二进制信息（如 API 密钥、子域名等） ✅保存并显示过滤结果 ✅获取目标应用中的链接库 ✅获取应用中的所有字符串和类 要求： Linux 或 Mac OS 安装： git clone https://github.com/xcodeOn1/ipa-scope.git sudo pip3 install -r...
PT-2026-53283
Name of the Vulnerable Software and Affected Versions Home Assistant versions prior to 2025.5.0 Description The iOS companion app fails to respect the SSID allowlist for internal networks. While the app typically uses the Service Set Identifier SSID—the public name of a wireless network—to...
CVE-2019-25339 GHIA CamIP 1.2 for iOS - 'Password' Denial of Service
GHIA CamIP 1.2 for iOS contains a denial of service vulnerability in the password input field that allows attackers to crash the application. Attackers can paste a 33-character buffer of repeated characters into the password field to trigger an application crash on iOS devices...
CVE-2025-12699
The ZOLL ePCR IOS application reflects unsanitized user input into a WebView. Attacker-controlled strings placed into PCR fields run number, incident, call sign, notes are interpreted as HTML/JS when the app prints or renders that content. In the proof of concept POC, injected scripts return loca...
CVE-2020-37086
Easy Transfer 1.7 iOS mobile application contains a directory traversal vulnerability that allows remote attackers to access unauthorized file system paths without authentication. Attackers can exploit the vulnerability by manipulating path parameters in GET and POST requests to list or download...
CVE-2022-50952
Banco Guayaquil 8.0.0 mobile iOS application contains a persistent cross-site scripting vulnerability in the TextBox Name Profile input. Attackers can inject malicious script code through a POST request that executes on application review without user interaction...
EUVD-2022-55945
Banco Guayaquil 8.0.0 mobile iOS application contains a persistent cross-site scripting vulnerability in the TextBox Name Profile input. Attackers can inject malicious script code through a POST request that executes on application review without user interaction...
CVE-2020-36995
Mocha Telnet Lite for iOS 4.2 contains a denial of service vulnerability that allows attackers to crash the application by manipulating the user configuration input. Attackers can overwrite the 'User' field with 350 bytes of repeated characters to trigger an application crash and prevent normal...
CVE-2021-41719
Maharashtra State Electricity Distribution Company Limited Mahavitran IOS Application 16.1 application till version 16.1 communicates using the GET method to process requests that contain sensitive information such as user account name and password, which can expose that information through the...
CVE-2021-33982
An insufficient session expiration vulnerability exists in the "Fish | Hunt FL" iOS app version 3.8.0 and earlier, which allows a remote attacker to reuse, spoof, or steal other user and admin sessions...
CVE-2020-12129
The AirDisk Pro app 5.5.3 for iOS allows XSS via the createFolder parameter of the Create Folder function...
EUVD-2017-14989
Malware in sbrugna...
EUVD-2019-9084
Malware in sbrugna...
EUVD-2020-27677
Malware in sbrugna...
EUVD-2014-5131
Malware in sbrugna...
EUVD-2015-7944
Malware in sbrugna...