FTP OnConnect v1.4.11 iOS - Multiple Web Vulnerabilities

Document Title: =============== FTP OnConnect v1.4.11 iOS - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1041 Release Date: ============= 2013-08-03 Vulnerability Laboratory ID VL-ID: ====================================...

Apple to Fix Malicious Fake USB Charger Flaw

Apple claims it will fix a previously disclosed flaw in the current iteration of its mobile operating system, iOS 6, that can allow hackers complete access to an iPhone or iPad via a fake USB charger. Reuters confirmed the impending fix Wednesday after speaking with Apple spokesman Tom Numayr at...

Private Photos 1.0 Script Insertion

Title: ====== Private Photos v1.0 iOS - Persistent Path Web Vulnerability Date: ===== 2013-07-25 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1034 VL-ID: ===== 1034 Common Vulnerability Scoring System: ==================================== 3.5 Introduction:...

Private Photos v1.0 iOS - Persistent Path Web Vulnerability

Title: ====== Private Photos v1.0 iOS - Persistent Path Web Vulnerability Date: ===== 2013-07-25 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1034 VL-ID: ===== 1034 Common Vulnerability Scoring System: ==================================== 3.5 Introduction:...

WebDisk 3.0.2 PhotoViewer iOS - Command Execution

Title: ====== WebDisk 3.0.2 PhotoViewer iOS - Command Execution Vulnerability Date: ===== 2013-07-27 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1035 VL-ID: ===== 1035 Common Vulnerability Scoring System: ==================================== 8.8 Introduction:...

WebDisk 3.0.2 PV iOS - Command Execution Vulnerability

Document Title: =============== WebDisk 3.0.2 PV iOS - Command Execution Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1035 Release Date: ============= 2013-07-26 Vulnerability Laboratory ID VL-ID: ==================================== 103...

Private Photos v1.0 iOS - Persistent Path Web Vulnerability

Document Title: =============== Private Photos v1.0 iOS - Persistent Path Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1034 Release Date: ============= 2013-07-24 Vulnerability Laboratory ID VL-ID: ===================================...

iPic Sharp v1.2.1 iOS - Persistent Foldername Vulnerability

Document Title: =============== iPic Sharp v1.2.1 iOS - Persistent Foldername Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1031 Release Date: ============= 2013-07-23 Vulnerability Laboratory ID VL-ID: ===================================...

Photo Server 2.0 iOS - Multiple Critical Vulnerabilities

Document Title: =============== Photo Server 2.0 iOS - Multiple Critical Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1029 Release Date: ============= 2013-07-22 Vulnerability Laboratory ID VL-ID: ====================================...

WiFly 1.0 Pro iOS - Multiple Vulnerabilities

WiFly 1.0 Pro iOS - Multiple Vulnerabilities Title: ====== WiFly 1.0 Pro iOS - Multiple Web Vulnerabilities Date: ===== 2013-07-15 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1011 VL-ID: ===== 1011 Common Vulnerability Scoring System:...

Olive File Manager 1.0.1 Arbitrary File Upload / XSS

Title: ====== Olive File Manager v1.0.1 iOS - Multiple Vulnerabilities Date: ===== 2013-07-13 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1009 VL-ID: ===== 1009 Common Vulnerability Scoring System: ==================================== 5.6 Introduction: =============...

FTP Sprite 1.2.1 iOS - Persistent Cross-Site Scripting

Title: ====== FTP Sprite v1.2.1 iOS - Persistent Web Vulnerability Date: ===== 2013-07-12 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1007 VL-ID: ===== 1007 Common Vulnerability Scoring System: ==================================== 3.7 Introduction: ============= FTP...

SimpleTransfer 2.2.1 - Command Injection Vulnerabilities

Title: ====== SimpleTransfer 2.2.1 - Command Injection Vulnerabilities Date: ===== 2013-05-03 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=937 VL-ID: ===== 937 Common Vulnerability Scoring System: ==================================== 5.6 Introduction: =============...

Wifi Photo Transfer 2.1 & 1.1 PRO - Multiple Vulnerabilities

Title: ====== Wifi Photo Transfer 2.1 & 1.1 PRO - Multiple Vulnerabilities Date: ===== 2013-04-21 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=932 VL-ID: ===== 932 Common Vulnerability Scoring System: ==================================== 6.1 Introduction: ===========...

File Lite 3.3 & 3.5 PRO iOS - Multiple Web Vulnerabilities

====== File Lite 3.3 & 3.5 PRO iOS - Multiple Web Vulnerabilities Date: ===== 2013-05-04 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=939 VL-ID: ===== 939 Common Vulnerability Scoring System: ==================================== 5.9 Introduction: ============= You ha...

Olive File Manager v1.0.1 iOS - Multiple Vulnerabilities

Document Title: =============== Olive File Manager v1.0.1 iOS - Multiple Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1009 Release Date: ============= 2013-07-12 Vulnerability Laboratory ID VL-ID: ====================================...

Air Drive Plus 2.4 LFI / XSS / File Upload

Title: ====== Air Drive Plus v2.4 iOS - Arbitrary File Upload Vulnerability Date: ===== 2013-07-09 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1000 VL-ID: ===== 1000 Common Vulnerability Scoring System: ==================================== 6.7 Introduction:...

MyFolder FileManager 1.8 iOS - Multiple Vulnerabilities

Document Title: =============== MyFolder FileManager 1.8 iOS - Multiple Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1001 Release Date: ============= 2013-07-09 Vulnerability Laboratory ID VL-ID: ==================================== 10...

Apple iOS XNU内核‘get_xattrinfo’函数拒绝服务漏洞

CVE-2013-3955 Apple iOS是美国苹果（Apple）公司为移动设备所开发的操作系统。支持的设备包括iPhone、iPod Touch、iPad、Apple TV。 iPad设备上的Apple iOS 5.x版本和6.x至6.1.3版本中的XNU内核中的‘getxattrinfo’函数中存在漏洞，该漏洞源于程序没有正确地验证AppleDouble文件的头。本地攻击者可通过msdosfs文件系统上的无效文件利用该漏洞造成拒绝服务（内存损坏）或产生其他未明影响。 0 Apple iOS 5.x Apple iOS 6.x Apple iOS 6.1.3...

Memory corruption

The getxattrinfo function in the XNU kernel in Apple iOS 5.x and 6.x through 6.1.3 on iPad devices does not properly validate the header of an AppleDouble file, which might allow local users to cause a denial of service memory corruption or have unspecified other impact via an invalid file on an...