Apple iOS and iPadOS Security Vulnerabilities

Apple iOS and Apple iPadOS are products of Apple Inc. Apple iOS is an operating system developed for mobile devices, and Apple iPadOS is an operating system for iPad tablets. A security vulnerability exists in Apple iOS 17 and iPadOS 17, which arises from processing web content that may disclose...

Cloudflare WARP 安全漏洞

Cloudflare WARP Cloudflare Vpn is a client application for secure connectivity from Cloudflare, Inc. A security vulnerability exists in Cloudflare WARP, which can be exploited to bypass the lock WARP switch feature on the WARP iOS mobile client by enabling both the "Disable Cellular Networks" and...

Apple iOS 和 iPadOS 安全漏洞

Apple tvOS is a set of smart TV operating systems from Apple USA. A security vulnerability exists in Apple iOS prior to 15.7.1 and iPadOS prior to 15.7.1, which stems from the handling of maliciously crafted USD files that may disclose memory contents. The following products and versions are...

CVE-2019-25071

A vulnerability was found in Apple iPhone up to 12.4.1. It has been declared as critical. Affected by this vulnerability is Siri. Playing an audio or video file might be able to initiate Siri on the same device which makes it possible to execute commands remotely. Exploit details have been...

Fake iOS Jailbreak Site Lures in Apple Users

Bad actors are taking advantage of a recently-disclosed iOS bug with a fake website claiming to give iPhone users the ability to jailbreak their phones. In reality, researchers warn, the site ultimately enables attackers to conduct click fraud. A jailbreak, a method to escape Apple’s limitations ...

Texture Information Disclosure Vulnerability

Texture is a magazine management application. An information disclosure vulnerability exists in Texture versions 4.21.0.1 and earlier Android and 5.11.6 and earlier iOS. The vulnerability stems from errors such as configuration during operation of a networked system or product. An unauthorized...

LINE for iOS Man-in-the-Middle Attack Vulnerability

LINE for iOS is a suite of live chat software based on the iOS platform. The program supports free calls, sending SMS and more. A security vulnerability exists in LINE versions 7.1.3 to 7.1.5, which is caused by the program failing to validate the SSL server's X.509 certificate. The vulnerability...

iPhone playing the video automatically shut down“wonderful”vulnerability cause analysis-vulnerability warning-the black bar safety net

A description of the No. 23 in the morning major Network Media issued a newsiOS also exposed new vulnerabilities, play a particular video led to the automatic shutdown with the demo video））, the main contents are: Apple iOS devices and is a burst of new vulnerabilities that play a particular MP4...

The vulnerability of the iOS operating system allows a perpetrator to execute arbitrary code or cause a service failure.

The vulnerability of the WebKit component of the iOS operating system arises due to buffer overflow. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or cause a service failure by using a specially crafted web page...

The vulnerability of the multimedia player iTunes and the iOS operating system allows a hacker to execute arbitrary code or trigger a service failure.

The vulnerability of the WebKit component in the multimedia player iTunes and the iOS operating system exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or cause a service failure by using a specially crafted...

Rakuten card for iOS Security Bypass Vulnerability

Rakuten card for iOS is a suite of iOS-based Rakuten card expense management applications from Rakuten Japan. A security bypass vulnerability exists in Rakuten card for iOS versions 5.2.0 through 5.2.4. An attacker could exploit the vulnerability to conduct a man-in-the-middle attack and spoof th...

Apple iOS Webkit Memory Corruption Vulnerability (CNVD-2015-06147)

Apple iOS is the latest operating system that runs on Apple's iPhone and iPod touch devices. A memory corruption vulnerability exists in Webkit used by Apple iOS, which allows attackers to construct a malicious web page and trick users into parsing it, which could crash the application or execute...

Share 1.0 For iPhone / iPod Touch Directory Traversal

Exploit Title: Share v1.0 for iPhone / iPod touch, Directory Traversal Date: 02/24/2011 Author: R3d@l3rt, Sunlight, H@ckk3y Software Link : http://itunes.apple.com/kr/app/filer-lite-download-view-manage/id350671847?mt=8 Version: 1.0 Tested on: iPhone, iPod 3GS with 4.2.1 firmware There is directo...

FileApp For iPhone / iPad / iPod FTP Denial Of Service

Title : FileApp \n" print "Example:./FileApp 10.10.10.10\n" if lensys.argv 2: Usage sys.exit1 else: hostname = sys.argv1 username = "\x41" 5000 passwd = "[email protected]" username = "anonymous" passwd = "\x41" 5000 sock = socket.socketsocket.AFINET, socket.SOCKSTREAM try: sock.connecthostname, 2121 print...

Google Chrome Survives: Most Secure? Nope

The only browser that survived Pwn2Own this year was Google Chrome. This led to numerous news reports like this one suggesting that Google’s browser was somehow more secure than the others. This is far from the truth. In fact, the vulnerability that caused the iPhone’s downfall was in the WebKit...

iPhone Hacked at Pwn2Own; SMS Database Stolen

VANCOUVER, BC — A pair of European researchers used the spotlight of the CanSecWest Pwn2Own hacking contest here to break into a fully patched iPhone and hijack the entire SMS database, including text messages that had already been deleted. Using an exploit against a previously unknown...

iPhone Worm Circulating in the Wild

A simple, yet effective, worm is now circulating on some jailbroken iPhones, changing settings on the phones and terminating some services. The worm, which was discovered Sunday, doesn’t appear to be too malicious, but is an indicator of what might lie ahead for owners of iPhones and other...

Apple iOS Mobile Safari - Memory Exhaustion Remote Denial of Service

source: https://www.securityfocus.com/bid/27442/info Apple iPhone is prone to a remote denial-of-service vulnerability. Attackers can exploit this issue by enticing an unsuspecting user to view a maliciously crafted webpage. Successful attacks cause a kernel panic, crashing the device. Given the...