The vulnerability of the iOS operating system, which allows attackers to carry out “man-in-the-middle” attacks

The vulnerability of the WebKit component of the iOS operating system is related to errors in cryptographic transformations. Exploiting this vulnerability allows a remote attacker to perform “man-in-the-middle” attacks due to errors in SSL certificate processing...

Rakuten card for iOS Security Bypass Vulnerability

Rakuten card for iOS is a suite of iOS-based Rakuten card expense management applications from Rakuten Japan. A security bypass vulnerability exists in Rakuten card for iOS versions 5.2.0 through 5.2.4. An attacker could exploit the vulnerability to conduct a man-in-the-middle attack and spoof th...

Apple iOS Safari Information Disclosure Vulnerability

Apple iOS is an operating system for handheld devices developed by Apple Inc. Apple iOS suffers from an information disclosure vulnerability that allows remote attackers to exploit the vulnerability via specially crafted JavaScript code to obtain sensitive information related to browser history,...

Vulnerability in the Newphoria Reversi application

Newphoria Reversi for Android and iOS is a suite of Othello game apps based on the Android and iOS platforms from the Japanese company Newphoria. A security vulnerability exists in the Newphoria Reversi application. An attacker can exploit this vulnerability to bypass the URL whitelist protection...

Zerodium Hosts Million-Dollar iOS 9 Bug Bounty

Exploit vendor Zerodium, a company started by VUPEN founder Chaouki Bekrar, today announced it will host a month-long million-dollar bug bounty focused on Apple iOS 9. Bekrar said in a statement there is a $3 million pool available for the bounty, which will close on Oct. 31 or earlier if the tot...

Apple iOS WebKit Memory Corruption Vulnerability (CNVD-2015-06124)

Apple iOS is the latest operating system that runs on Apple's iPhone and iPod touch devices. A memory corruption vulnerability exists in the Apple iOS WebKit engine, which allows remote attackers to construct a malicious web page and trick users into parsing it, which could crash the application ...

Apple iOS Lock Screen Bypasses Audio Message Answer Vulnerability

Apple iOS is the latest operating system that runs on Apple's iPhone and iPod touch devices. Apple iOS has a security vulnerability that allows users with physical class access to bypass lock screen restrictions and answer audio messages from the lock screen...

Apple iOS XNU Memory Leak Vulnerability

Apple iOS is the latest operating system that runs on Apple's iPhone and iPod touch devices. A security vulnerability exists in Apple iOS XNU that allows local users to exploit a vulnerability to obtain kernel memory information...

Apple iOS Special Text File Code Execution Vulnerability

Apple iOS is the latest operating system that runs on Apple's iPhone and iPod touch devices. A security vulnerability in Apple iOS's handling of special text files allows remote attackers to exploit the vulnerability to construct malicious files that can be parsed by users and can be executed wit...

Apple iOS mail sender address handling vulnerability

Apple iOS is the latest operating system that runs on Apple's iPhone and iPod touch devices. A security vulnerability in Apple iOS mail handling of sender addresses allows attackers to exploit the vulnerability to obtain sensitive information...

Apple iOS Webkit URL Handling Vulnerability

Apple iOS is the latest operating system that runs on Apple's iPhone and iPod touch devices. Apple iOS suffers from a security vulnerability in the handling of tel://, facetime://, and facetime-audio:// URLs, which allows an attacker to construct a malicious WEB page and trick users into parsing...

Apple iOS kernel memory corruption vulnerability (CNVD-2015-06076)

Apple iOS is the latest operating system that runs on Apple's iPhone and iPod touch devices. A memory corruption vulnerability exists in the Apple iOS kernel, which allows malicious attackers to exploit the vulnerability to execute arbitrary code...

Apple iOS Webkit Memory Corruption Vulnerability (CNVD-2015-06180)

Apple iOS is the latest operating system that runs on Apple's iPhone and iPod touch devices. A memory corruption vulnerability exists in Webkit used by Apple iOS, which allows attackers to construct a malicious web page and trick users into parsing it, which could crash the application or execute...

Apple iOS Apple Pay Terminal Sensitive Transaction Information Acquisition Vulnerability

Apple iOS is the latest operating system that runs on Apple's iPhone and iPod touch devices. A security vulnerability exists in Apple iOS that allows a remote Apple Pay terminal to access limited, recent transaction information while the target user is making a payment...

Apple iOS WebKit Memory Corruption Vulnerability (CNVD-2015-06125)

Apple iOS is the latest operating system that runs on Apple's iPhone and iPod touch devices. A memory corruption vulnerability exists in the Apple iOS WebKit engine, which allows remote attackers to construct a malicious web page and trick users into parsing it, which could crash the application ...

Apple iOS Safari User Interface Forgery Vulnerability

Apple iOS is the latest operating system that runs on Apple's iPhone and iPod touch devices. A security vulnerability exists in Apple iOS Safari, which allows attackers to exploit a vulnerability to build a malicious web page that can be tricked into parsing and can spoof the user interface...

Apple iOS Webkit Memory Corruption Vulnerability (CNVD-2015-06147)

Apple iOS is the latest operating system that runs on Apple's iPhone and iPod touch devices. A memory corruption vulnerability exists in Webkit used by Apple iOS, which allows attackers to construct a malicious web page and trick users into parsing it, which could crash the application or execute...

iphone.jantareview.com XSS vulnerability

Vulnerable URL: http://iphone.jantareview.com/deals-by-store.php?q=%27%22%3E%22%3E%3CsVg/OnLOaD=alert%28%22XSSPOSED%22%29%3E=Nalanda===Lingerie==20=+Deals+and+Offers Details: Description| Value ---|--- Patched:| Yes, at 22.11.2017 Latest check for patch:| 22.11.2017 15:02 GMT Vulnerability type:|...

使用非官方渠道 Xcode 开发 App 造成的后门 (XcodeGhost)

经过对存在问题的应用进行 http 请求包进行抓取结果如下图 可以发现往 http://init.icloud-analysis.com 以POST的方式发送了数据, 而上述url则正是被爆出用于恶意收集用户信息的url 同时，XcodeGhost 病毒还可以在未越狱的 iPhone 上伪造弹窗进行钓鱼攻击，其生成的对话窗口仿真度非常高，很难辨别，因此用户如果在之前输入过iTunes密码，那么一定要尽快进行修改。 受影响部分应用列表： 微信IOS - 6.2.5 12306 - 2.12 滴滴出行 - 4.0.0.6 滴滴打车 - 3.9.7 高德地图 - 7.3.8 同花顺 -...

For Better Privacy & Security, Change these iOS 9 Settings Immediately

iOS 9 is out, and it's time to update your iPhone or iPad to the latest version of Apple's mobile operating system. The new iOS is better, faster, and more efficient than its predecessors, with a number of new features and improvements including enhanced multitasking for iPad, Proactive Assistant...