Vulnerabilities of iOS and Mac OS X operating systems, allowing attackers to execute arbitrary code or cause system failures

The vulnerability of the FontParser component in iOS and Mac OS X operating systems arises due to buffer overflow. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or cause a service failure using the created font file...

Vulnerabilities of iOS and Mac OS X operating systems, allowing attackers to execute arbitrary code in a privileged context

The vulnerability of the kernel in iOS and Mac OS X operating systems is related to a numerical overflow condition. Exploiting this vulnerability allows an attacker to execute arbitrary code in a privileged context remotely...

Vulnerabilities of iOS and Mac OS X operating systems, allowing attackers to execute arbitrary code or cause system failures

The vulnerability of the libxpc component in iOS and Mac OS X operating systems arises due to buffer overflow. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely or trigger a service failure using XPC messages...

This iPhone Malware infecting Jailbroken Devices Stole 225,000 Apple Accounts

Jailbreakers Beware! Some shady tweaks that you installed on their jailbroken devices are looking to steal your iCloud login credentials, a report said. The iCloud account details, including email addresses and passwords, of nearly 220,000 jailbreak users have been breached, an online Chinese...

Apple iOS MSVDX Driver Denial of Service Vulnerability

Apple iOS is the latest operating system that runs on Apple's iPhone and iPod touch devices. A security vulnerability in the Apple iOS MSVDX driver allows remote users to build special video files that trick apps into parsing and crashing the system...

Apple iOS Office Viewer Sensitive Information Disclosure Vulnerability

Apple iOS is the latest operating system that runs on Apple's iPhone and iPod touch devices. A security vulnerability exists in Apple iOS Office Viewer that allows remote users to construct special XML files and trick apps into parsing them, which can trigger XML external entity processing to...

Apple iOS code signature bypass vulnerability (CNVD-2015-05542)

Apple iOS is the latest operating system that runs on Apple's iPhone and iPod touch devices. Apple iOS suffers from a security vulnerability that allows malicious applications to execute unsigned code by exploiting a code signing flaw...

Apple iOS QL Office Memory Corruption Vulnerability

Apple iOS is the latest operating system that runs on Apple's iPhone and iPod touch devices. A security vulnerability in Apple iOS handling of QL Office documents allows a remote user to build special files and trick apps into parsing them, which can trigger a memory corruption vulnerability and...

Apple iOS Information Disclosure Vulnerability (CNVD-2015-05564)

Apple iOS is the latest operating system that runs on Apple's iPhone and iPod touch devices. A security vulnerability in the Apple iOS bootp allows a remote Wi-Fi network class to determine network information previously accessed by the target service...

Apple iOS Libc TRE library memory corruption vulnerability (CNVD-2015-05565)

Apple iOS is the latest operating system that runs on Apple's iPhone and iPod touch devices. A memory corruption vulnerability exists in the Apple iOS Libc TRE, which allows an attacker to exploit the vulnerability to cause an application to process special rule expressions to execute arbitrary...

Apple iOS Libc TRE Library Memory Corruption Vulnerability

Apple iOS is the latest operating system that runs on Apple's iPhone and iPod touch devices. A memory corruption vulnerability exists in the Apple iOS Libc TRE, which allows an attacker to exploit the vulnerability to cause an application to process special rule expressions to execute arbitrary...

Apple iOS iCloud Information Disclosure Vulnerability

Apple iOS is the latest operating system that runs on Apple's iPhone and iPod touch devices. Apple iOS has a security vulnerability that allows malicious apps to access previously logged-in users' iCloud record information...

Apple iOS WebViews FaceTime URL Parsing Vulnerability

Apple iOS is the latest operating system that runs on Apple's iPhone and iPod touch devices. A security vulnerability in Apple iOS WebViews handling of FaceTime URLs allows remote attackers to exploit the vulnerability to initialize FactTime calls without user authorization...

Apple iOS Security Mechanism Bypass Vulnerability

Apple iOS is the latest operating system that runs on Apple's iPhone and iPod touch devices. A security vulnerability exists in Apple iOS that allows a remote user in a privileged network location, configured with a local user, to accept untrusted credentials via the lock screen...

Apple iOS Safari WebKit Security Bypass Vulnerability

Apple iOS is the latest operating system that runs on Apple's iPhone and iPod touch devices. A security vulnerability exists in WebKit in Apple Safari used in Apple iOS, which can be exploited by attackers to perform man-in-the-middle attacks and obtain sensitive information through sniffing the...

ownCloud for iOS Security Bypass Vulnerability

ownCloud for iOS is a free and open source personal cloud storage solution based on the iOS platform created by German KDE developer Frank Karlitschek. The program offers file management, music storage, calendars, and more. A security bypass vulnerability exists in ownCloud for iOS. An attacker c...

Device Inspector v1.5 iOS - Command Inject Vulnerabilities

Document Title: =============== Device Inspector v1.5 iOS - Command Inject Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1558 Release Date: ============= 2015-08-07 Vulnerability Laboratory ID VL-ID: ====================================...

iphone-gps.ru XSS vulnerability

Vulnerable URL: http://www.iphone-gps.ru/?s=" Details: Description| Value ---|--- Patched:| Yes, at 22.11.2017 Latest check for patch:| 22.11.2017 09:44 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 123913 Google Pagerank| 1 VIP website status:| No Check...

WordPress WP-PowerPlayGallery 3.3 File Upload / SQL Injection

Title: Remote file upload vulnerability & SQLi in wordpress plugin wp-powerplaygallery v3.3 Author: Larry W. Cashdollar, @larry0 Date: 2015-06-27 Download Site: https://wordpress.org/plugins/wp-powerplaygallery Vendor: WP SlideShow Vendor Notified: 2015-06-29 Advisory:...

APPLE-SA-2015-06-30-1 iOS 8.4

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 APPLE-SA-2015-06-30-1 iOS 8.4 iOS 8.4 is now available and addresses the following: Application Store Available for: iPhone 4s and later, iPod touch 5th generation and later, iPad 2 and later Impact: A malicious universal provisioning profile app ma...