Apple Safari iPhone/iPod touch - Webpage Remote Code Execution

source: https://www.securityfocus.com/bid/38994/info Apple Safari running on iPhone and iPod touch is prone to a remote code-execution vulnerability. Successful exploits will allow an attacker to run arbitrary code in the context of the user running the application. Failed attacks may cause...

Apple iOS Safari - Bad 'VML' Remote Denial of Service

Exploit Title: Bad "VML" Remote DoS on Safari for iPhone & iPod Touch Date: 26/03/2010 Author: Nishant Das Patnaik For more of Nishant's research, please visit: http://nishantdaspatnaik.yolasite.com/research.php Tested on: iPod Touch 3G iPhone OS 3.1.3 Description: An attacker may direct the user...

Apple iOS Safari - Remote Denial of Service

Exploit Title: Remote DoS on Safari for iPhone & iPod Touch Date: 26/03/2010 Author: Nishant Das Patnaik For more of Nishant's research, please visit: http://nishantdaspatnaik.yolasite.com/research.php Tested on: iPod Touch 3G iPhone OS 3.1.3 Description: An attacker may direct the user to visit ...

Update Protection against Apple iPhone Safari 'tel:' URI Handling Remote Denial of Service

The Safari browser on the Apple iPhone is prone to a denial-of-service vulnerability. By persuading a user to visit a specially-crafted Web site containing a overly long tel: URI in an iframe, a remote attacker could exploit this vulnerability to cause the device to crash...

iPhone Hacked at Pwn2Own; SMS Database Stolen

VANCOUVER, BC — A pair of European researchers used the spotlight of the CanSecWest Pwn2Own hacking contest here to break into a fully patched iPhone and hijack the entire SMS database, including text messages that had already been deleted. Using an exploit against a previously unknown...

youku iphone Channels the presence of injection-vulnerability warning-the black bar safety net

http://iphone.youku.com/video.php?ch=1&id=1 8 7 5 1 9 1 6 and 1=2 union select 1,2,user,4,5,6,7,8,9,1 0,1 1/ Really didn't think youku there so kind of a problem, the privilege also is not small, can read the file, it seems security still start small. to: root:x:0:0:root:/root:/bin/bash...

Stack overflow

Stack consumption vulnerability in the WebCore::CSSSelector function in WebKit, as used in Apple Safari 4.0.4, Apple Safari on iPhone OS and iPhone OS for iPod touch, and Google Chrome 4.0.249, allows remote attackers to cause a denial of service application crash or possibly execute arbitrary co...

CVE-2010-1029

Stack consumption vulnerability in the WebCore::CSSSelector function in WebKit, as used in Apple Safari 4.0.4, Apple Safari on iPhone OS and iPhone OS for iPod touch, and Google Chrome 4.0.249, allows remote attackers to cause a denial of service application crash or possibly execute arbitrary co...

Pwn2Own Predictions: Apple iPhone Will Fall

Hackers at this year’s CanSecWest Pwn2Own contest will definitely break into an Apple iPhone by exploiting a remote code execution vulnerability. That’s the prediction from Charlie Miller and Aaron Portnoy, two security researchers who are monitoring events leading to next week’s hacker challenge...

iPhone Springboard Malformed Character Crash PoC

No description provided by source. !/usr/bin/python iPhone Springboard crash PoC by Chase Higgins. Devices tested: iPhone 2G @ OS 3.1, iPhone 3GS @ 3.1.3 this script acts as webserver, and causes Safari, as well as Mail and Springboard to crash all these apps crash after running this exploit on t...

iPhone Springboard Malformed Character Crash

!/usr/bin/python iPhone Springboard crash PoC by Chase Higgins. Devices tested: iPhone 2G @ OS 3.1, iPhone 3GS @ 3.1.3 this script acts as webserver, and causes Safari, as well as Mail and Springboard to crash all these apps crash after running this exploit on the iPhone. Unable to debug any of...

iPhone Springboard Malformed Character Crash PoC

Exploit for hardware platform in category dos / poc ================================================ iPhone Springboard Malformed Character Crash PoC ================================================ !/usr/bin/python iPhone Springboard crash PoC by Chase Higgins. Devices tested: iPhone 2G @ OS 3.1...

iPhone Springboard - Malformed Character Crash (PoC)

iPhone Springboard - Malformed Character Crash PoC !/usr/bin/python iPhone Springboard crash PoC by Chase Higgins. Devices tested: iPhone 2G @ OS 3.1, iPhone 3GS @ 3.1.3 this script acts as webserver, and causes Safari, as well as Mail and Springboard to crash all these apps crash after running...

iPhone Springboard - Malformed Character Crash (PoC)

!/usr/bin/python iPhone Springboard crash PoC by Chase Higgins. Devices tested: iPhone 2G @ OS 3.1, iPhone 3GS @ 3.1.3 this script acts as webserver, and causes Safari, as well as Mail and Springboard to crash all these apps crash after running this exploit on the iPhone. Unable to debug any of...

iPhone / iTouch FTPDisc 1.0 3 ExploitsInOne Buffer Overflow DoS

Exploit for unknown platform in category dos / poc =============================================================== iPhone / iTouch FTPDisc 1.0 3 ExploitsInOne Buffer Overflow DoS =============================================================== Title - iPhone / iTouch FTPDisc 1.0 3ExploitsInOne...

iPhone iTouch FtpDisc 1.0 - Buffer Overflow (Denial of Service) (PoC)

iPhone iTouch FtpDisc 1.0 - Buffer Overflow Denial of Service PoC Title - iPhone / iTouch FTPDisc 1.0 3ExploitsInOne BuffOverflow DoS Model - Tested on iPod Touch 3G 3.1.3 Software - FTPDisc 1.0 and FTPDisc 1.0 Lite http://itunes.apple.com/es/app/ftpdisc-lite-pdf-reader/id329157971?mt=8 Attacker ...

iPhone / iTouch FTPDisc 1.0 Buffer Overflow

Title - iPhone / iTouch FTPDisc 1.0 3ExploitsInOne BuffOverflow DoS Model - Tested on iPod Touch 3G 3.1.3 Software - FTPDisc 1.0 and FTPDisc 1.0 Lite http://itunes.apple.com/es/app/ftpdisc-lite-pdf-reader/id329157971?mt=8 Attacker - Tested from GNU/Linux Sidux, fuzzing with a future PenTBox versi...

iPhone CSS::Selector Crash Exploit

!/usr/bin/python , dM MMr 4MMML . MMMMM. xf . "M6MMM .MM- Mh.. +MM5MMM .MMMM .MMM. .MMMMML. MMMMMh MMMh. MM5MMM MMMMMMM 3MMMMx. 'MMM3MMf xnMMMMMM" 'MMMMM MMMMMM. nMMMMMMP" MMMMMx "MMM5M\ .MMMMMMM= MMMMMh "MMMMM" JMMMMMMP MMMMMM GMMMM. dMMMMMM . MMMMMM "MMMM .MMMMM .nnMP" .. MMMMx MMM" dMMMM"...

FtpDisc For iPhone Denial Of Service

!/usr/bin/perl Title: FtpDisc for Iphone - Remote DOS Exploit Date: 23/02/2010 Author: Ale46 - ale46atparanoicidotorg Software Link: http://mochasoft.dk/iphoneftp.htm Version: 1.0 Note: FtpDisc Lite has the same vuln Greetz: Gandalf use Net::FTP; if@ARGV\n"; exit; my $ftp; my $host = $ARGV0; my...

iPhone WebCore::CSSSelector() Remote Crash Vulnerability

No description provided by source. !/usr/bin/python , dM MMr 4MMML . MMMMM. xf . "M6MMM .MM- Mh.. +MM5MMM .MMMM .MMM. .MMMMML. MMMMMh MMMh. MM5MMM MMMMMMM 3MMMMx. 'MMM3MMf xnMMMMMM" 'MMMMM MMMMMM. nMMMMMMP" MMMMMx "MMM5M\ .MMMMMMM= MMMMMh "MMMMM" JMMMMMMP MMMMMM GMMMM. dMMMMMM . MMMMMM "MMMM .MMM...