Apple Ransomware Targeting iCloud Users Hits Australia

A handful of iPhone, iPad and Mac users, largely confined to Australia, awoke Tuesday to discover their devices had been taken hostage by ransomware. Instead of their normal home screens, users were greeted with a message promising that their devices would be unlocked if a ransom, somewhere betwe...

Files Desk Pro v1.4 iOS - File Include Web Vulnerability

Document Title: =============== Files Desk Pro v1.4 iOS - File Include Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1266 Release Date: ============= 2014-05-15 Vulnerability Laboratory ID VL-ID: ====================================...

Files Desk Pro v1.4 iOS - File Include Web Vulnerability

Document Title: =============== Files Desk Pro v1.4 iOS - File Include Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1266 Release Date: ============= 2014-05-15 Vulnerability Laboratory ID VL-ID: ====================================...

My Photo Wifi Share & PS 1.1 iOS - Local Command Injection Vulnerability

Document Title: =============== My Photo Wifi Share & PS 1.1 iOS - Local Command Injection Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1232 Release Date: ============= 2014-03-24 Vulnerability Laboratory ID VL-ID:...

iThoughtsHD Map名跨站脚本漏洞

Bugtraq ID:66431 CVE ID:CVE-2014-1826 iThoughtsHD是一款针对iPad设计的超实用的思维导图软件。 iPAD设备上的iThoughtsHD app 4.19存在跨站脚本漏洞，当使用WiFi传输功能时，允许远程攻击者利用漏洞通过特制的map名注入任意WEB脚本或HTML。当恶意数据被查看时，可获取敏感信息或劫持用户会话。 0 iThoughtsHD app 4.19 for iOS 目前没有详细解决方案提供： http://www.ithoughts.co.uk/iThoughtsHD/Welcome.html?...

iThoughtsHD任意文件上传漏洞

CVE ID:CVE-2014-1827 iThoughtsHD是一款ios应用，属于思维导图软件。 iPad设备上使用的iThoughtsHD app 4.19 for iOS，在启用了WiFi Transfer功能后，可使远程攻击者通过上传诸如.html%00.txt的文件，即在扩展名后加%00序列来达到上传任意文件的目的。 0 iThoughtsHD iThoughtsHD 4.19 目前厂商还没有提供补丁或者升级程序： www.ithoughts.co.uk/...

CVE-2014-1828

The iThoughts web server in the iThoughtsHD app 4.19 for iOS on iPad devices allows remote attackers to cause a denial of service disk consumption by uploading a large file...

CVE-2014-1826

Cross-site scripting XSS vulnerability in the iThoughtsHD app 4.19 for iOS on iPad devices, when the WiFi Transfer feature is used, allows remote attackers to inject arbitrary web script or HTML via a crafted map name...

CVE-2014-1827

The iThoughtsHD app 4.19 for iOS on iPad devices, when the WiFi Transfer feature is used, allows remote attackers to upload arbitrary files by placing a %00 sequence after a dangerous extension, as demonstrated by a .html%00.txt file...

Design/Logic Flaw

The iThoughts web server in the iThoughtsHD app 4.19 for iOS on iPad devices allows remote attackers to cause a denial of service disk consumption by uploading a large file...

Design/Logic Flaw

The iThoughtsHD app 4.19 for iOS on iPad devices, when the WiFi Transfer feature is used, allows remote attackers to upload arbitrary files by placing a %00 sequence after a dangerous extension, as demonstrated by a .html%00.txt file...

Cross site scripting

Cross-site scripting XSS vulnerability in the iThoughtsHD app 4.19 for iOS on iPad devices, when the WiFi Transfer feature is used, allows remote attackers to inject arbitrary web script or HTML via a crafted map name...

CVE-2014-1826

The CVE-2014-1826 entry concerns iThoughtsHD for iOS (iPad) version 4.19, where the WiFi Transfer feature allows cross-site scripting via a crafted map name. The vulnerability is an XSS in the map name handling, enabling remote attackers to inject arbitrary web script or HTML when the map name is...

CVE-2014-1828

The CVE-2014-1828 entry concerns iThoughtsHD for iOS (iPad), where the iThoughts web server component in version 4.19 exposes a Denial of Service risk via uploading large files. The observed impact is disk consumption leading to service disruption. The vulnerability details across connected sourc...

CVE-2014-1826

Cross-site scripting XSS vulnerability in the iThoughtsHD app 4.19 for iOS on iPad devices, when the WiFi Transfer feature is used, allows remote attackers to inject arbitrary web script or HTML via a crafted map name...

CVE-2014-1828

The iThoughts web server in the iThoughtsHD app 4.19 for iOS on iPad devices allows remote attackers to cause a denial of service disk consumption by uploading a large file...

CVE-2014-1827

The iThoughtsHD app 4.19 for iOS on iPad devices, when the WiFi Transfer feature is used, allows remote attackers to upload arbitrary files by placing a %00 sequence after a dangerous extension, as demonstrated by a .html%00.txt file...

CVE-2014-1827

The CVE-2014-1827 entry affects iThoughtsHD 4.19 for iOS on iPad, where enabling WiFi Transfer allows remote upload of arbitrary files by exploiting a null-byte (%00) injection after a dangerous extension (demonstrated with .html%00.txt). Affected component is the web upload interface; root cause...

iThoughtsHD 4.19 DoS / XSS / File Upload

iThoughts Multiple Vulnerabilities 24 March 2014 Authors: James Davis , Justin C. Klein Keane Description of Vulnerability iThoughtsHD brings mind mapping to the iPad. Based on the award winning iThoughts for iPhone, iThoughtsHD has been designed specifically for the iPad. iThoughtsHD will import...

NCC00596 Technical Advisory: iOS 7 arbitrary code execution in kernel mode

...................................... Vulnerability Summary ...................................... Title iOS 7 arbitrary code execution in kernel mode Release Date 14 March 2014 Reference NGS00596 Discoverer Andy Davis Vendor Apple Vendor Reference 600217059 Systems Affected iPhone 4 and later,...