CVE-2010-5224

Untrusted search path vulnerability in Cool iPhone Ringtone Maker 2.2.3 allows local users to gain privileges via a Trojan horse dwmapi.dll file in the current working directory, as demonstrated by a directory that contains a .mp3 file. NOTE: some of these details are obtained from third party...

Design/Logic Flaw

Untrusted search path vulnerability in Cool iPhone Ringtone Maker 2.2.3 allows local users to gain privileges via a Trojan horse dwmapi.dll file in the current working directory, as demonstrated by a directory that contains a .mp3 file. NOTE: some of these details are obtained from third party...

CVE-2010-5224

CVE-2010-5224 is an untrusted search path vulnerability in Cool iPhone Ringtone Maker 2.2.3. Local users can gain privileges via a hijacked dwmapi.dll placed in the current working directory, demonstrated by a directory containing a .mp3 file. The available sources consistently describe the issue...

CVE-2010-5224

Untrusted search path vulnerability in Cool iPhone Ringtone Maker 2.2.3 allows local users to gain privileges via a Trojan horse dwmapi.dll file in the current working directory, as demonstrated by a directory that contains a .mp3 file. NOTE: some of these details are obtained from third party...

Most Smartphone Users Consider Privacy When Vetting Apps

Cellphone owners now account for 88 percent of the U.S. population, of which some 43 percent say they download applications on their phones. Among these ‘app users,’ 57 percent told the Pew Internet and American Life Project that they have either uninstalled existing applications or made the...

Apple WebKit (iTunes, iPhone, Safari, Google Chrome) multiple security vulnerabilities

70 of different memory corruption vulnerabilities, crossite scripting, information leakage...

Phishing for Fanboys with Phony iPhone 5 Images

There is no such thing as a trivial detail when it comes to the impending release of an Apple product and scammers are well aware of this. A recent attack is exploiting the public’s fascination with all things Apple and the ubiquitous interest in anything iPhone 5-related with an email phishing...

Serious Security Flaw : iPhone Bug Allows SMS Spoofing

A rather serious security flaw in the iPhone's SMS messaging system has been discovered and revealed by well-known security researcher and jailbreak extraordinaire 'pod2g'. Security flaw affecting all iPhones that he says could facilitate hackers or thieves to access your personal information. Th...

Researcher Finds iPhone Bug Allows SMS Spoofing

The iPhone SMS app contains a quirky bug that could allow someone to send a user a text message that appears to come from any number that the sender specifies. The researcher who discovered the bug said that it could be used by attackers to spoof messages from a bank or credit card company and se...

CVE-2012-2648

Cross-site scripting XSS vulnerability in the GoodReader app 3.16 and earlier for iOS on the iPad, and 3.15.1 and earlier for iOS on the iPhone and iPod touch, allows remote attackers to inject arbitrary web script or HTML via vectors involving use of this app in conjunction with a web browser...

CVE-2012-2648

CVE-2012-2648 is a cross-site scripting (XSS) vulnerability in the GoodReader app for iOS. The issue affects GoodReader versions 3.16 and earlier on the iPad and 3.15.1 and earlier on iPhone/iPod touch, where, when used in conjunction with a web browser, an attacker could inject arbitrary web scr...

CVE-2012-2648

Cross-site scripting XSS vulnerability in the GoodReader app 3.16 and earlier for iOS on the iPad, and 3.15.1 and earlier for iOS on the iPhone and iPod touch, allows remote attackers to inject arbitrary web script or HTML via vectors involving use of this app in conjunction with a web browser...

PT-2012-4160 · Apple · Goodreader

Name of the Vulnerable Software and Affected Versions: GoodReader app versions 3.16 and earlier for iOS on the iPad GoodReader app versions 3.15.1 and earlier for iOS on the iPhone and iPod touch Description: The issue allows remote attackers to inject arbitrary web script or HTML via vectors...

JVN#01598734: GoodReader vulnerable to cross-site scripting

GoodReader is a document reader for Apple mobile devices. GoodReader contains a cross-site scripting vulnerability. Impact When GoodReader is used through a web browser, an arbitrary script may be executed on the user's web browser. Solution Update the software Update to the latest version...

iAuto Mobile Application 2012 Multiple Vulnerabilities

Exploit for php platform in category web applications iAuto Mobile Application 2012 - Multiple Web Vulnerabilities Introduction: ============= With Internet on mobile devices booming, having a desktop-oriented version is just not enough anymore. Empower your visitors with content designed for...

meetOne Insecure Transport / Information Disclosure

SUMMARY meetOne, currently in Germany in the Top 50 social apps of the iTunes Store, has multiple vulnerabilities and has been found guilty of stealing Apple iPhone address books and abusing the e-mail addresses there for spam. Apple Inc. is ignoring the data theft and it seems even supressing...

ManageEngine Mobile Application Manager v10 SQL Injection

Exploit for php platform in category web applications ME Mobile Application Manager v10 - SQL Vulnerabilities Introduction: ============= ManageEngine Mobile Applications Manager is a server and application performance monitoring software that helps businesses ensure high availability and...

iphone end Taobao,Netease,youku Application Data transmission vulnerability-vulnerability warning-the black bar safety net

Lethal leaderboards【Iphone 9 1 assistant recommended list within the software disclosure of user information Full street smart machine. Full street public WIFI and the phone side of the application but worrying ! On the figure for the iphone end of the lower test platform The current wireless...

Instagram Patches "Friendship Vulnerability" Privacy Hole

Instagram has patched a flaw in its photo sharing application that could have allowed anyone to add themselves as friends to accounts and view information and photos that were set to private. The vulnerability, discovered by Spanish security researcher Sebastián Guerrero, could have allowed an...

Five Years Later, the iPhone's Legacy is Secure

It’s nearly impossible to remember now, but there was a time when the iPhone didn’t exist. That time was five years and one day ago, and up to that point the idea of standing in line overnight for a mobile phone was almost as ridiculous as the notion of Apple being thought of as an innovator in...