Apple iOS Security Bypass Vulnerability (CNVD-2016-10413)

Apple iOS is an operating system developed by Apple for mobile devices. A security bypass vulnerability exists in Apple iOS versions prior to 10.1. An attacker can exploit this vulnerability to bypass security restrictions and perform unauthorized operations...

Multiple Apple Products libxpc Arbitrary Code Execution Vulnerability

Apple iOS and so on are the products of the American Apple Apple company. apple iOS is a set of operating systems developed for mobile devices; tvOS is a set of smart TV operating system; watchOS is a set of smart watch operating system. libxpc is one of the Apple XPC library open source...

Warning! Your iPhone Can Get Hacked Just by Opening a JPEG Image, PDF or Font File

What's worse than knowing that innocent looking JPEGs, PDFs and font files can hijack your iPhone, iPad, and iPod. Yes, attackers can take over your vulnerable Apple's iOS device remotely – all they have to do is trick you to view a maliciously-crafted JPEG graphic or PDF file through a website o...

XSS Vulnerability in NetEase Mail Master Client IOS Version

NetEase Mail Master client is a universal email client launched by NetEase 163. An XSS vulnerability exists in the IOS version Ver4.14.1 of the NetEase Mail Master client. It allows attackers to insert malicious js code into the page to obtain user cookies and other information, leading to user...

The vulnerabilities in operating systems such as Mac OS X and iOS allow attackers to trigger service failures or execute arbitrary code.

The vulnerability of the libxslt component in Mac OS X and iOS operating systems arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code or cause a service failure memory corruption by using a...

The vulnerabilities in iOS and Mac OS X operating systems allow attackers to trigger service failures or execute arbitrary code in privileged contexts.

The vulnerability of the IOAcceleratorFamily component in iOS and Mac OS X operating systems is related to pointer dereferencing errors. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in privileged contexts or trigger a service failure dereferencing the null...

The vulnerability of the iOS operating system and the Safari browser allows a perpetrator to trigger a service failure or execute arbitrary code.

The vulnerability of the WebKit component of the iOS operating system and the Safari browser arises from an operation that goes beyond the buffer in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or cause a service failure memory corruption through a...

The vulnerabilities in iOS and Mac OS X operating systems allow attackers to trigger service failures or execute arbitrary code in privileged contexts.

The vulnerability of the IOAcceleratorFamily component in iOS and Mac OS X operating systems arises from operations that occur outside of the buffer in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in privileged context or cause a service failure memory...

iphone-backup.net XSS vulnerability

Vulnerable URL: http://iphone-backup.net/index.php?l=prompt'OPENBUGBOUNTY'...

U by BBT for iOS Security Bypass Vulnerability

U by BB&T for iOS is a suite of iOS-based banking apps. A security vulnerability exists in U by BB&T for iOS 1.5.4 and earlier versions, which originates from the program failing to properly validate the SSL server's X.509 certificate. The vulnerability can be exploited to conduct a...

Apple iOS/Safari/iTunes WebKit Unauthorized Access Vulnerability

Apple iOS, Safari and iTunes are all products of Apple Inc. Apple iOS is an operating system developed for mobile devices; Safari is a web browser that is the default browser that comes with Mac OS X and iOS operating systems. iTunes is a set of media player applications. WebKit is an open source...

Signal Adds iPhone Access to Desktop App

Open Whisper Systems has long offered Android users of its encrypted messaging app a companion desktop version of the service. iPhone users haven’t been as lucky until Monday when the company announced desktop support for iPhone users of its Signal desktop beta app called Signal Private Messenger...

UBUNTU-CVE-2016-4762

WebKit in Apple iOS before 10, iTunes before 12.5.1 on Windows, iCloud before 6.0 on Windows, and Safari before 10 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site...

iPhone 7 Jailbreak Has Already Been Achieved In Just 24 Hours!

It has only been a few days since the launch of Apple's brand new iPhone 7 and iPhone 7 Plus, but it appears that the new iPhone has already been jailbroken. That didn't take long. Right? Security researcher and well-known hacker Luca Tedesco shared an image of his jailbroken smartphone on his...

The vulnerabilities in operating systems such as Mac OS X and iOS allow attackers to trigger service failures or execute arbitrary code.

The vulnerability of the CoreGraphics component in Mac OS X and iOS operating systems arises due to buffer overflow. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely or cause a service failure memory corruption by using a specially crafted BMP image...

The vulnerabilities in operating systems such as Mac OS X and iOS allow attackers to trigger service failures or execute arbitrary code.

The vulnerability of the ImageIO component in Mac OS X and iOS operating systems arises due to buffer overflow. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely or cause a service failure memory corruption by using a specially created TIFF file...

Researcher Proves Viability of NAND Mirroring to Bypass iPhone Passcode Restrictions

NAND mirroring was outright dismissed by FBI director James Comey as a means of breaking into San Bernardino terrorist Syed Farook’s iPhone 5c during the government’s spat with Apple earlier this year. “It doesn’t work,” Comey said. Well, turns out, it does. Sergei Skorobogatov of the University ...

Instead of spending $1.3 million, FBI could have Hacked iPhone in just $100

Do you remember the infamous encryption fight between the FBI and Apple for unlocking an iPhone 5C belongs to a terrorist? Yes, you got it right, the same Apple vs. FBI case where the FBI paid almost $1.3 Million to a group of hackers to unlock that iPhone. However, if the agency had shown some...

X (Formerly Twitter): Twitter iOS fails to validate server certificate and sends oauth token

Twitter on iOS newest two versions 6.62 and 6.62.1 are affected, other versions not tested. Tested independently on two different iPhone 6 with iOS version 9.3.3 and 9.3.5 without Jailbreak. The iPhone were without any mobileconfig profiles installed - no we did not install any CA certificate in...

About the security content of iOS 10.0.1

About the security content of iOS 10.0.1 This document describes the security content of iOS 10.0.1. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available...