Apple iOS Safari - 'decodeURI' Remote Crash

Apple iPhone 3 Safari JavaScript - decodeURI Remote Crash decodeURI'$string'; "; iffileputcontents"./crash.html", $code echo"Point your safari mobile browser to crash.html.\r\n"; else echo"Cannot create file.\r\n"; ?...

Apple iOS Safari - body alink Remote Crash

----------------------------------- Exploit Title: Apple iPhone Safari body alink Remote Crash Date: 19/12/2010 Author: Pr0T3cT10n Affected Version: IOS 4.0.1 Tested on Apple iPhone 3, IOS 4.0.1 MobileSafari Launch Safari, point your browser to the page and safari will crash. ISRAEL,...

Apple iPhone Safari Denial Of Service

----------------------------------- Exploit Title: Apple iPhone Safari body alink Remote Crash Date: 19/12/2010 Author: Pr0T3cT10n Affected Version: IOS 4.0.1 Tested on Apple iPhone 3, IOS 4.0.1 MobileSafari Launch Safari, point your browser to the page and safari will crash. ISRAEL,...

CVE-2010-4552

Memory leak in IBM Lotus Notes Traveler before 8.5.1.1 allows remote attackers to cause a denial of service memory consumption and daemon outage by sending many embedded objects in e-mail messages for iPhone clients...

Memory corruption

Memory leak in IBM Lotus Notes Traveler before 8.5.1.1 allows remote attackers to cause a denial of service memory consumption and daemon outage by sending many embedded objects in e-mail messages for iPhone clients...

Information disclosure

IBM Lotus Notes Traveler before 8.5.1.2 allows remote authenticated users to cause a denial of service daemon crash by accepting a meeting invitation with an iNotes client and then accepting this meeting invitation with an iPhone client...

CVE-2010-4548

IBM Lotus Notes Traveler before 8.5.1.2 allows remote authenticated users to cause a denial of service daemon crash by accepting a meeting invitation with an iNotes client and then accepting this meeting invitation with an iPhone client...

CVE-2010-4552

Memory leak in IBM Lotus Notes Traveler before 8.5.1.1 allows remote attackers to cause a denial of service memory consumption and daemon outage by sending many embedded objects in e-mail messages for iPhone clients...

CVE-2010-4012

Race condition in Apple iOS 4.0 through 4.1 for iPhone 3G and later allows physically proximate attackers to bypass the passcode lock by making a call from the Emergency Call screen, then quickly pressing the Sleep/Wake button...

CVE-2010-4012

CVE-2010-4012 affects Apple iOS 4.0–4.1 on iPhone 3G and later. A race condition on the Emergency Call screen allows physically proximate attackers to bypass the device passcode by initiating a call, then quickly pressing Sleep/Wake. The impact is bypassing the lock screen; exploitation details b...

CVE-2010-4012

Race condition in Apple iOS 4.0 through 4.1 for iPhone 3G and later allows physically proximate attackers to bypass the passcode lock by making a call from the Emergency Call screen, then quickly pressing the Sleep/Wake button...

iFTPStorage for iPhone / iPod touch <= 1.3 - Directory Traversal

Exploit for hardware platform in category remote exploits ================================================================ iFTPStorage for iPhone / iPod touch = 1.3 - Directory Traversal ================================================================ Exploit: iFTPStorage for iPhone / iPod touch ...

iOS iFTPStorage 1.3 - Directory Traversal

iOS iFTPStorage 1.3 - Directory Traversal x3l http://gahor-krisztian.hu/xel [email protected] Exploit: iFTPStorage for iPhone / iPod touch = 1.3 - Directory Traversal Date: 02/12/2010 Author: x3l Software Link: http://itunes.apple.com/us/app/iftpstorage/id333357690?mt=8 Version: 1.3 Tested o...

iFTPStorage 1.3 Directory Traversal

x3l http://gahor-krisztian.hu/xel [email protected] Exploit: iFTPStorage for iPhone / iPod touch = 1.3 - Directory Traversal Date: 02/12/2010 Author: x3l Software Link: http://itunes.apple.com/us/app/iftpstorage/id333357690?mt=8 Version: 1.3 Tested on: iPhone 3GS with 4.2.1 firmware There is...

Sparse iPhone, iPad Screen Space Aids Phishers

Pinched screen real estate on iPhone devices may make it easier for users to be fooled into using bogus “phishing” Web sites, according to an analysis by researcher Nitesh Dhanjani. In a post on the SANS Application Security Street Fighter Blog on Monday, Dhanjani called attention to the common...

8) Your next wallet is a phone. Discuss.

Mobile payments have been going strong in countries like Japan and Finland for years now. In the U.S., however, its taken longer for mobile payments to get a hold on consumers. That’s all about to change. Late model mobile devices like Apple’s iPhone and Google Android-based phones now offer...

Heap overflow

Heap-based buffer overflow in the GSM mobility management implementation in Telephony in Apple iOS before 4.2 on the iPhone and iPad allows remote attackers to execute arbitrary code on the baseband processor via a crafted Temporary Mobile Subscriber Identity TMSI field...

Hackers Push Jailbreak for iOS 4.2 Devices

A leading group of mobile device hackers have released a software update that allows iPhone and iPad users to circumvent content controls using the latest version of Apple’s iOS operating system. The so-called “jailbreak” was released within hours of Apple’s own release of iOS 4.2.1 by the iPhone...

Security A Hidden Benefit of iOS 4.2 Update

Apple iPhone and iPad users are buzzing about the new features that come with the latest update to the company’s iOS mobile operating system. But the update also contains dozens of fixes for security holes that could have allowed attackers to compromise the popular devices using malicious PDF...

[TEHTRI-Security] CVE-2010-1752: Update your MacOSX

Gents, During the 1st HITB Amsterdam 2010, TEHTRI-Security made advisories about security issues on handled devices iPhone, HTC, iPad, BlackBerry, etc. As we made penetration tests for more than 15 years on highly sensitive networks, we were luckily able to find vulnerabilities working on those...