Samsung Galaxy S4 and iPhone 5 zero-day exploits revealed at Pwn2Own 2013 Contest

At Information Security Conference PacSec 2013 in Tokyo, Apple’s Safari browser for the iPhone 5 and the Samsung Galaxy S4 have been exploited by two teams of Japanese and Chinese white hat hackers. In HP's Pwn2Own 2013 contest, Japanese squad Team MBSD, of Mitsui Bussan Secure Directions won won...

Design/Logic Flaw

Tweetbot 1.3.3 for Mac, and 2.8.5 for iPad and iPhone, does not require confirmation of 1 follow or 2 favorite actions, which allows remote attackers to automatically force the user to perform undesired actions, as demonstrated via the tweetbot:///follow/ URL...

CVE-2013-5726

Tweetbot 1.3.3 for Mac and 2.8.5 for iPad/iPhone expose a vulnerability via the tweetbot:/// URL scheme that does not require user confirmation for follow or favorite actions. This design allows remote attackers to trigger actions on behalf of the user without prompts, effectively forcing undesir...

Tweetbot Lack Of User Confirmation

Affected Vendor: http://tapbots.com/ - Affected Software: Tweetbot for Mac, iPad and iPhone - Affected Version: Mac: 1.3.3 - iPad: 2.8.5 - iPhone: 2.8.5 - Issue Type: Lack of user confirmation leading to Twitter action revealing the user's Twitter identity - Release Date: November 1, 2013 -...

'LinkedIn Intro' iOS app can read your emails in iPhone

Your LinkedIn profile is your digital resume. Yesterday, LinkedIn launched a new app for for iOS devices called Intro 'LinkedIn Intro'. With this feature an email on your iPhone will display a picture of the sender, with useful profile info from LinkedIn. Basically, to use the service, a LinkedIn...

'LinkedIn Intro' iOS app can read your emails in iPhone

None...

Apple iOS 7 for iPhone本地安全绕过漏洞(CVE-2013-5162)

BUGTRAQ ID: 63277 CVECAN ID: CVE-2013-5162 iOS是由苹果公司为移动设备所开发的操作系统，支持的设备包括iPhone、iPod touch、iPad、Apple TV。 iPhone 4及更高版本上使用的Apple iOS的密码输入视图在电话已经禁用的情况下仍然可以访问，存在绕过错误密码尝试的安全漏洞。 0 Apple iPhone 4.0 厂商补丁： Apple ----- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.apple.com/support/downloads/...

CVE-2013-5162

Passcode Lock in Apple iOS before 7.0.3 on iPhone devices allows physically proximate attackers to bypass the passcode-failure disabled state by leveraging certain incorrect visibility of the passcode-entry view after use of the Phone app...

Null pointer dereference

Passcode Lock in Apple iOS before 7.0.3 on iPhone devices allows physically proximate attackers to bypass an intended passcode requirement, and dial arbitrary telephone numbers, by tapping the emergency-call button during a certain notification and camera-pane state to trigger a NULL pointer...

Authorization

Passcode Lock in Apple iOS before 7.0.3 on iPhone devices allows physically proximate attackers to bypass the passcode-failure disabled state by leveraging certain incorrect visibility of the passcode-entry view after use of the Phone app...

CVE-2013-5162

Passcode Lock in Apple iOS before 7.0.3 on iPhone devices allows physically proximate attackers to bypass the passcode-failure disabled state by leveraging certain incorrect visibility of the passcode-entry view after use of the Phone app...

CVE-2013-5162

CVE-2013-5162 affects Apple iOS on iPhone devices prior to 7.0.3. The vulnerability arises from an incorrect visibility of the passcode-entry view after using the Phone app, allowing physically proximate attackers to bypass the passcode-failure disabled state. Affected component: the passcode-ent...

Apple iMessage Open to Man in the Middle, Spoofing Attacks

The Apple iMessage protocol has been shrouded in secrecy for years now, but a pair of security researchers have reverse-engineered the protocol and found that Apple controls the encryption key infrastructure for the system and therefore has the ability to read users’ text messages–or decrypt them...

UbiDisk File Manager v2.0 iOS - Multiple Vulnerabilities

Document Title: =============== UbiDisk File Manager v2.0 iOS - Multiple Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1109 Release Date: ============= 2013-10-14 Vulnerability Laboratory ID VL-ID: ====================================...

Apple iOS密码锁安全限制绕过漏洞

CVE ID: CVE-2013-5161 iOS是由苹果公司为移动设备所开发的操作系统，支持的设备包括iPhone、iPod touch、iPad、Apple TV。 Apple iOS 7.0.2之前版本的密码锁没有正确过滤锁定状态，物理接触受影响设备的攻击者在某些情况下可绕过密码限制，打开“照相机”应用或读取最近打开的应用列表。 0 Apple iOS 7.0.2 厂商补丁： Apple ----- Apple已经为此发布了一个安全公告（HT5957）以及相应补丁: HT5957：About the security content of iOS 7.0.2...

iPhone iOS 7.0.2 Sim Lock Screen Bypass vulnerability

If you're unlucky enough to lose your Smartphone or have it stolen, anyone who finds the device will also be able to access any content stored on the device, whether its contacts, music or documents. But by implementing a SIM card PIN lock, everytime the device is powered down and subsequently...

iPhone iOS 7.0.2 Sim Lock Screen Bypass vulnerability

If you're unlucky enough to lose your Smartphone or have it stolen, anyone who finds the device will also be able to access any content stored on the device, whether its contacts, music or documents. But by implementing a SIM card PIN lock, everytime the device is powered down and subsequently...

iPhone Fingerprint scanner hack allows attacker to hijack Apple ID using Flight Mode

A German security firm SRL claims a vulnerability in Touch ID Fingerprint Scanner and iCloud allows a hacker to access a locked device and potentially gain control over an owner’s Apple ID. SRL points out that Airplane mode can be enabled on a stolen phone from the lockscreen, which turns off...

Apple iOS 7.0.2 iP 5S - Sim Lock Screen Display Bypass

Document Title: =============== Apple iOS 7.0.2 iP 5S - Sim Lock Screen Display Bypass References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1104 Advisory: http://www.vulnerability-lab.com/getcontent.php?id=1105 Video: https://www.youtube.com/watch?v=6e-hvglQdg Release Date:...

Apple iOS 7.0.2 iP 5S - Sim Lock Screen Display Bypass

Document Title: =============== Apple iOS 7.0.2 iP 5S - Sim Lock Screen Display Bypass References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1104 Advisory: http://www.vulnerability-lab.com/getcontent.php?id=1105 Video: https://www.youtube.com/watch?v=6e-hvglQdg Release Date:...