ManageEngine Mobile Application Manager v10 SQL Injection

Exploit for php platform in category web applications ME Mobile Application Manager v10 - SQL Vulnerabilities Introduction: ============= ManageEngine Mobile Applications Manager is a server and application performance monitoring software that helps businesses ensure high availability and...

Instagram Patches "Friendship Vulnerability" Privacy Hole

Instagram has patched a flaw in its photo sharing application that could have allowed anyone to add themselves as friends to accounts and view information and photos that were set to private. The vulnerability, discovered by Spanish security researcher Sebastián Guerrero, could have allowed an...

Five Years Later, the iPhone's Legacy is Secure

It’s nearly impossible to remember now, but there was a time when the iPhone didn’t exist. That time was five years and one day ago, and up to that point the idea of standing in line overnight for a mobile phone was almost as ridiculous as the notion of Apple being thought of as an innovator in...

Tightened Security, Regulated App Permissions in Store for iOS 6

In a move that will patch several loopholes with its iPhone, the newest iteration of Apple’s mobile operation system, iOS 6, will come with heightened security, it was revealed at the company’s Worldwide Developers Conference WWDC this week. Releasing this fall but currently available in beta, iO...

Phil Zimmermann Returns With Silent Circle Voice and Data Privacy

If you use encryption products to protect your data or communications, you owe a debt of gratitude to Phil Zimmermann. Now, Zimmermann is aiming to collect on that debt with his new company, Silent Circle, a startup that will provide secure phone, email and SMS communications. Zimmermann has been...

Absinthe 2.0 Jailbreak for iOS 5.1.1 Devices Released

A group of developers has released a new untethered jailbreak for devices running iOS 5.1.1. The hack allows users to run unsigned apps on their devices, something that Apple doesn’t like so much. The new version of the Absinthe jailbreak tool was released publicly on Friday by the Chronic-Dev Te...

Apple iOS 5.1.1 Safari Browser - JS match() search() Crash (PoC)

Apple iOS 5.1.1 Safari Browser - JS match search Crash PoC !/usr/bin/env ruby - Title iOS \n\ Crash PoC\n\ \n\ var s = "poc";\n\ s.match"chrbufferlen";\n\ \n\ "; def help puts "iOS = v5.1.1 Safari Browser JS match, search Crash PoC" puts "$0 -p bindport -h bindaddress --verbose" end Parsing...

Dolphin CS 1.5 Android|iPhone - Multiple Vulnerabilities

Document Title: =============== Dolphin CS 1.5 Android|iPhone - Multiple Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=566 Release Date: ============= 2012-05-17 Vulnerability Laboratory ID VL-ID: ==================================== 56...

Dolphin CS 1.5 Android|iPhone - Multiple Vulnerabilities

Document Title: =============== Dolphin CS 1.5 Android|iPhone - Multiple Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=566 Release Date: ============= 2012-05-17 Vulnerability Laboratory ID VL-ID: ==================================== 56...

MobileSpy Android|iPhone|W7P|sOS - Web Vulnerabilities

Exploit for hardware platform in category web applications Title: ====== MobileSpy Android|iPhone|W7P|sOS - Web Vulnerabilities Common Vulnerability Scoring System: ==================================== 7.3 Introduction: ============= Mobile Spy defines the latest in high-tech cell phone...

'The Hackers Conference 2012' to be held in New Delhi

'The Hackers Conference 2012' to be held in New Delhi The Biggest Hacking Mania has arrived. The Hackers Conference 2012 will be held in New Delhi on July 29. THC 2012 is expected to be the first open gathering of Blackhat hackers in India who will debate latest security issues with the top...

Apple Releases iOS 5.1.1

Apple has released iOS 5.1.1 for iPhone, iPod, iPad, and iPad 2 to address multiple vulnerabilities. These vulnerabilities may allow an attacker to execute arbitrary code, perform a cross-site-scripting attack, or spoof a website address. US-CERT encourages users and administrators to review Appl...

Permanent Reverse TCP Backdoor for IPhone and IPad

Security Expert from Coresec explains the use of a Permanent Reverse TCP Backdoor "sbd-1.36" for IPhone and IPad developed by Michel Blomgren. sbd is a Netcat-clone, designed to be portable and offer strong encryption. It runs on Unix-like operating systems and on Microsoft Win32. sbd features...

Researchers Find Bug in SMS App That Can Lead to iPhone Exploits

Researchers have identified a bug in an application that can enable attackers potentially to gain control of a victim’s iPhone. The app in question, TreasonSMS, enables users to send SMS messages from a desktop Web browser by using their iPhones as Web servers. The bug lies in the way that the...

IPhone TreasonSMS - HTML Inject & File Include Vulnerability

Title: ====== IPhone TreasonSMS - HTML Inject & File Include Vulnerability Date: ===== 2012-04-23 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=154 VL-ID: ===== 154 Introduction: ============= treasonSMS allows you to send SMS from your desktop computer. It turns your...

IPhone TreasonSMS HTML Injection / File Inclusion

Title: ====== IPhone TreasonSMS - HTML Inject & File Include Vulnerability Date: ===== 2012-04-23 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=154 VL-ID: ===== 154 Introduction: ============= treasonSMS allows you to send SMS from your desktop computer. It turns your...

IPhone TreasonSMS & WifiSMS - Multiple Web Vulnerabilities

Document Title: =============== IPhone TreasonSMS & WifiSMS - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=154 Release Date: ============= 2012-04-22 Vulnerability Laboratory ID VL-ID: ====================================...

IPhone TreasonSMS & WifiSMS - Multiple Web Vulnerabilities

Document Title: =============== IPhone TreasonSMS & WifiSMS - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=154 Release Date: ============= 2012-04-22 Vulnerability Laboratory ID VL-ID: ====================================...

http-icloud-sendmsg NSE Script

Sends a message to a iOS device through the Apple MobileMe web service. The device has to be registered with an Apple ID using the Find My Iphone application. Script Arguments http-icloud-sendmsg.username the Apple ID username http-icloud-sendmsg.sound boolean specifying if a loud sound should be...

Fedora Update for usbmuxd FEDORA-2012-1192

Check for the Version of usbmuxd OpenVAS Vulnerability Test Fedora Update for usbmuxd FEDORA-2012-1192 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...