search.electronique-mag.com Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1052494 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website...

Apple Shortcuts for iOS Sandbox Restriction Bypass Vulnerability

Apple Shortcuts for iOS is a set of shortcut applications from Apple USA based on the iOS platform. A security vulnerability exists in Apple Shortcuts for iOS prior to version 2.1.3. A local attacker can exploit the vulnerability to bypass sandbox restrictions...

Apple iOS and Apple macOS Mojave Feedback Assistant Component Competition Condition Vulnerability

Apple iOS and Apple macOS Mojave are both products of Apple Inc. Apple iOS is an operating system for mobile devices. apple macOS Mojave is a specialized operating system for Mac computers. feedback Assistant is one of the Feedback Assistant is one of the system error feedback components. A...

Multiple Apple Products TrueTypeScaler Component Out-of-Bounds Read Vulnerability

Apple iOS is an operating system developed for mobile devices. apple tvOS is an operating system for smart TVs. apple macOS Mojave is a specialized operating system developed for Mac computers. trueTypeScaler is a font file processing component of the... TrueTypeScaler is a font file processing...

Apple Bug bounty: Earn big backs for hacking iPhone & other products

By Waqas Hack iPhone and earn big bucks the right way. This is a post from HackRead.com Read the original post: Apple Bug bounty: Earn big backs for hacking iPhone & other products...

ToTok app caught spying on millions of Android & iPhone users

By Waqas It's time to delete the ToTok app right now! This is a post from HackRead.com Read the original post: ToTok app caught spying on millions of Android & iPhone users...

Apple devices vulnerable to arbitrary code execution in SecureROM

Overview Some Apple devices are vulnerable to arbitrary code execution at the Boot ROM level called "SecureROM" by Apple by exploiting a use-after-free vulnerability. Successful exploitation results in the ability to execute arbitrary code on the device. checkm8 is a public exploit for this...

CVE-2019-8798

A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 13.2 and iPadOS 13.2, macOS Catalina 10.15.1, tvOS 13.2, watchOS 6.1. An application may be able to execute arbitrary code with system privileges...

CVE-2019-8792

An injection issue was addressed with improved validation. This issue is fixed in Shazam Android App Version 9.25.0, Shazam iOS App Version 12.11.0. Processing a maliciously crafted URL may lead to arbitrary javascript code execution...

CVE-2019-8565

A race condition was addressed with additional validation. This issue is fixed in iOS 12.2, macOS Mojave 10.14.4. A malicious application may be able to gain root privileges...

CVE-2019-8529

A memory corruption issue was addressed with improved input validation. This issue is fixed in iOS 12.2, macOS Mojave 10.14.4. An application may be able to execute arbitrary code with kernel privileges...

PT-2019-19095 · Apple · Ios +1

Name of the Vulnerable Software and Affected Versions: iOS versions prior to 12.2 macOS Mojave versions prior to 10.14.4 Description: A race condition was addressed with additional validation. A malicious application may be able to gain root privileges. Recommendations: For iOS versions prior to...

Smart Krampus-3PC Malware Targets iPhone Users Online

A malicious web redirect campaign affecting iPhone users has impacted more than 100 publisher websites, including online newspapers and international weekly news magazines. According to The Media Trust’s Digital Security & Operations DSO team, iPhone users visiting any of the impacted websites we...

Apple Fixes ‘AirDoS’ Bug That Cripples Nearby iPhones, iPads

Apple fixed a bug in its file-swapping feature AirDrop, Tuesday, which allows nearby hackers to render iPhones and iPads inoperable. The bug opens the door for a type of denial-of-service attack, allowing an attacker to infinitely spam all nearby iPhones and iPads with AirDrop share popup...

About the security content of iOS 13.3 and iPadOS 13.3

About the security content of iOS 13.3 and iPadOS 13.3 This document describes the security content of iOS 13.3 and iPadOS 13.3. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches ...

Apple iOS/tvOS/iPadOS/watchOS/macOS CVE-2019-8848 Privilege Escalation Vulnerability

Description Apple iOS/tvOS/iPadOS/watchOS/macOS are prone to a privilege-escalation vulnerability. An attacker can exploit this issue to gain elevated privileges on an affected system. Technologies Affected Apple Ipad Mini- Apple TV Apple Watch Apple iOS 10 Apple iOS 10.0.1 Apple iOS 10.1 Apple i...

Apple iOS/iPadOS/tvOS/watchOS/macOS CVE-2019-8830 Arbitrary Code Execution Vulnerability

Description Apple iOS, iPadOS, tvOS, watchOS and macOS are prone to an arbitrary code execution vulnerability. A remote attacker can leverage this issue to execute arbitrary code in the context of the user running the application. Failed exploit attempts may result in a denial-of-service conditio...

Apple iOS/iPadOS/watchOS/macOS CVE-2019-8856 Security Vulnerability

Description Apple iOS/iPadOS/watchOS/macOS are prone to a security vulnerability. Attackers can exploit this issue to bypass security restrictions and perform unauthorized actions. Technologies Affected Apple Ipad Mini- Apple Watch Apple iOS 10 Apple iOS 10.0.1 Apple iOS 10.1 Apple iOS 10.2 Apple...

Why the iPhone 11 Tracks Your Location Even When You Tell It Not To

Russian disinformation, a VC hack, vulnerable VPNs, and more are in the week’s top security news...

Apple Explains Mysterious iPhone 11 Location Requests

KrebsOnSecurity ran a story this week that puzzled over Apple's response to inquiries about a potential privacy leak in its new iPhone 11 line, in which the devices appear to intermittently seek the user's location even when all applications and system services are individually set never to reque...