PhotoSync 4.7 Local File Inclusion

Exploit Title: PhotoSync 4.7 IOS APP Local file inclusion Date: Sep 19, 2022 Exploit Author: Chokri Hammedi Vendor Homepage: https://www.photosync-app.com/home.html Software Link: https://apps.apple.com/us/app/photosync-transfer-photos/id415850124 Version: 4.7 Tested on: iPhone IOS 16.0 GET...

CVE-2022-26959

There are two full read/write Blind/Time-based SQL injection vulnerabilities in the Northstar Club Management version 6.3 application. The vulnerabilities exist in the userName parameter of the processlogin.jsp page in the /northstar/Portal/ directory and the userID parameter of the login.jsp pag...

Apple Security Update: iOS 16.0.1

Apple recommends to install security update iOS 16.0.1 on devices iPhone 14 all models...

Apple Releases iOS and macOS Updates to Patch Actively Exploited Zero-Day Flaw

Apple has released another round of security updates to address multiple vulnerabilities in iOS and macOS, including a new zero-day flaw that has been used in attacks in the wild. The issue, assigned the identifier CVE-2022-32917, is rooted in the Kernel component and could enable a malicious app...

PT-2022-21550 · Apple · Ipados +4

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 12.6 iOS versions prior to 15.7 iPadOS versions prior to 15.7 macOS Big Sur versions prior to 11.7 Description: A logic issue was addressed with improved restrictions, which may have allowed an app to read sensitive...

PT-2022-6381 · Apple · Ios +2

Name of the Vulnerable Software and Affected Versions: Apple iOS versions prior to 15.7 and 16 Apple iPadOS versions prior to 15.7 Apple macOS versions prior to Big Sur 11.7 and Monterey 12.6 Description: The issue is related to a buffer overflow vulnerability that may allow an application to...

PT-2022-21535 · Apple · Ios +2

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 12.6 iOS versions prior to 15.7 iPadOS versions prior to 15.7 macOS Big Sur versions prior to 11.7 Description: The issue allows an app to potentially disclose kernel memory due to inadequate memory handling. This has...

Apple IOS 安全漏洞

Apple iOS is a set of operating systems developed for mobile devices by Apple Inc. in the United States. A security vulnerability exists in Apple IOS prior to version 16, which originates in Safari in the iPhone 8 series and later iPhones where accessing a malicious website may result in address...

PT-2022-21572 · Apple · Ios +3

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 12.6 macOS Big Sur versions prior to 11.7 iOS versions prior to 15.7 iOS versions prior to 16 iPadOS versions prior to 15.7 Description: The issue allows an app to potentially execute arbitrary code with kernel...

PT-2022-21573

Name of the Vulnerable Software and Affected Versions Safari versions prior to 16 iOS versions prior to 16 iOS versions prior to 15.7 iPadOS versions prior to 15.7 Description An out-of-bounds read issue was addressed with improved bounds checking. Processing maliciously crafted web content may...

Apple IOS 安全漏洞

Apple iOS is a set of operating systems developed for mobile devices by the American company Apple. A security vulnerability exists in Apple IOS prior to version 16, which stems from the fact that in the iPhone 8 series and later iPhones, someone with physical access to the iOS device may be able...

PT-2022-21555 · Apple · Ios +3

Name of the Vulnerable Software and Affected Versions: Safari versions prior to 16 iOS versions prior to 15.7 and 16 iPadOS versions prior to 15.7 macOS versions prior to Ventura 13 Description: An access issue was addressed with improvements to the sandbox, which may allow a sandboxed process to...

mbDrive Lite WiFi Flash Disk 1.4.0 Cross Site Scripting

Exploit Title: mbDrive Lite - WiFi flash disk 1.4.0 Reflected XSS Date: Sep 8, 2022 Exploit Author: Chokri Hammedi Vendor Homepage: https://apps.apple.com/us/developer/haw-yuan-yang/id291212805 Software Link: https://apps.apple.com/us/app/mbdrive-lite-wifi-flash-disk/id343254033 Version: 1.4.0...

@Drive 2.8 Local File Inclusion Vulnerability

Exploit Title: @Drive 2.8 Local File inclusion Exploit Author: Chokri Hammedi Vendor Homepage: https://evolutive.co/ Software Link: https://apps.apple.com/us/app/drive/id578982909 Version: 2.8 Tested on: iPhone ios 15.6 GET /../../../../../../../../../../../../../../../../etc/hosts HTTP/1.1 Host:...

@Drive 2.8 Local File Inclusion

Exploit Title: @Drive 2.8 Local File inclusion Date: Sep 8, 2022 Exploit Author: Chokri Hammedi Vendor Homepage: https://evolutive.co/ Software Link: https://apps.apple.com/us/app/drive/id578982909 Version: 2.8 Tested on: iPhone ios 15.6 GET...

FE File Explorer 11.0.4 Local File Inclusion Exploit

Exploit Title: FE File Explorer 11.0.4 Local File inclusion Exploit Author: Chokri Hammedi Vendor Homepage: https://www.skyjos.com/ Software Link: https://apps.apple.com/us/app/fe-file-explorer-file-manager/id510282524 Version: 11.0.4 Tested on: iPhone ios 15.6 from ftplib import FTP import...

Apple releases security update for iPhones and iPads to address vulnerability

Apple has released a security update for iOS 12.5.6 to patch a remotely exploitable WebKit vulnerability that allows attackers to execute arbitrary code on unpatched devices. The WebKit zero-day that is known as CVE-2022-32893 was fixed for iOS 15.6.1, iPadOS 15.6, and macOS Monterey 12.5.1 on...

Apple Releases iOS Update for Older iPhones to Fix Actively Exploited Vulnerability

Apple on Wednesday backported security updates to older iPhones, iPads, and iPod touch devices to address a critical security flaw that has been actively exploited in the wild. The shortcoming, tracked as CVE-2022-32893 CVSS score: 8.8, is an out-of-bounds write issue affecting WebKit that could...

Apple Releases Security Updates for Multiple Products

Apple has released security updates to address a vulnerability CVE-2022-32893 in iPhone 5s, iPhone 6, iPhone 6 Plus, iPad Air, iPad mini 2, iPad mini 3, and iPod touch 6th generation. Exploitation of this vulnerability could allow an attacker to take control of affected device. CISA encourages...

How to set up an iPhone for your kids

Thanks to Thomas Reed for his expertise and guidance. This is it. After much hemming and hawing, you've finally given in and bought your child their first smartphone, which you plan to give to them before the school year starts. But before you give it to them, it's worth sitting them down to talk...