Apple iOS 8.0.2 Authentication Bypass

Document Title: =============== Apple iOS 8.0 - 8.0.2 - Controls Re Auth Bypass Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1322 Video: http://www.vulnerability-lab.com/getcontent.php?id=1334 Release Date: ============= 2015-03-02...

SevenIT SevDesk 3.10 - Multiple Web Vulnerabilities

Exploit for multiple platform in category web applications Document Title: =============== SevenIT SevDesk 3.10 - Multiple Web Vulnerabilities Product & Service Introduction: =============================== The integrated customer management, digital customer file is the central record for a sing...

Lost Your Phone? Google Search 'Find My Phone' To Locate It

How many of you have an issue to forget your mobile phones? I guess, most of us. Sometimes in our homes, sometimes in our offices, sometimes in our cars and sometimes we even don’t remember the exact place where we left our phones. Now, Finding your phone is as simple as searching something on...

WordPress Windows Desktop And iPhone Photo Uploader File Upload Vulnerability

WordPress Windows Desktop and iPhone Photo Uploader plugin suffers from a remote shell upload vulnerability. Exploit Title : Wordpress plugin Windows Desktop and iPhone Photo Uploader arbitrary file upload vulnerbility Author : Manish Kishan Tanwar AKA error1046 Home Page :...

WordPress Plugin Windows Desktop and iPhone Photo Uploader - Arbitrary File Upload

WordPress Plugin Windows Desktop and iPhone Photo Uploader - Arbitrary File Upload Exploit Title : Wordpress plugin Windows Desktop and iPhone Photo Uploader arbitrary file upload vulnerbility Author : Manish Kishan Tanwar AKA error1046 Home Page :...

Apple iOS Task Switcher Sensitive Information Disclosure Vulnerability

Apple iOS is the latest operating system that runs on Apple's iPhone and iPod touch devices. A security vulnerability exists in Apple iOS UIKit. A remote attacker can exploit the vulnerability to expose data in application snapshots to Task Switcher to obtain sensitive information...

Apple iOS IOHIDFamily API Memory Corruption Vulnerability

Apple iOS is the latest operating system that runs on Apple's iPhone and iPod touch devices. A memory corruption vulnerability exists in the Apple iOS IOHIDFamily API, which allows local attackers to exploit the vulnerability to execute arbitrary code...

Apple iOS MobileFrameBuffer Memory Disclosure Vulnerability

Apple iOS is the latest operating system that runs on Apple's iPhone and iPod touch devices. A memory content disclosure vulnerability exists in Apple iOS MobileFrameBuffer, which allows local attackers to exploit the vulnerability to obtain sensitive information...

Windows Desktop And iPhone Photo Uploader <= 1.8 - File Upload

The i-dump-iphone-to-wordpress-photo-uploader WordPress plugin was affected by a File Upload security vulnerability...

Apple iOS Memory Out-of-Bounds Access Vulnerability

Apple iOS is the latest operating system that runs on Apple's iPhone and iPod touch devices. A memory out-of-bounds access vulnerability exists in the Apple iOS kernel, allowing malicious applications to read kernel memory or crash the system...

WordPress Windows Desktop and iPhone Photo Uploader Plugin - Arbitrary File Upload

Windows Desktop and iPhone Photo Uploader plugin is prone to an arbitrary file upload vulnerability. It allows an attacker to upload arbitrary files to the affected computer. Solution Upgrade the plugin...

Apple iOS Webkit suffers from unspecified memory corruption vulnerability (CNVD-2015-02328)

Apple iOS is the latest operating system that runs on Apple's iPhone and iPod touch devices. An unspecified memory corruption vulnerability exists in Apple iOS Webkit, which allows attackers to exploit the vulnerability to construct a malicious web page that can be tricked into being parsed by a...

Apple Mac OS X/iOS CFNetwork HTTPProtocol Cross Domain COOKIE Disclosure Vulnerability

Apple Mac OS X is an operating system developed by Apple Inc. Apple iOS is the latest operating system that runs on Apple's iPhone and iPod touch devices. A cross-domain COOKIE disclosure vulnerability in the Apple Mac OS X/iOS CFNetwork HTTPProtocol handling redirection allows attackers to explo...

Without jailbreak iPhone 6 on steal Alipay and wechat payment account password-loophole warning-the black bar safety net

The vulnerability is iOS system vulnerabilities,and Alipay,wechat app has nothing to do. This article just take Alipay and micro letter as a demonstration of the vulnerability of the application,other applications can also be caught,forwarding those who do not taken out of context. This...

Facebook Vulnerability Leaks Users' Private Photos

If you have enabled automatic Facebook Photo Sync feature on your iPhone, iPad or Android devices, then Beware! Hackers can steal your personal photographs without your knowledge. In 2012, the social network giant introduced Facebook Photo Sync feature for iPhone, iPad and Android devices which, ...

Wifi Drive Pro v1.2 iOS - File Include Web Vulnerability

Document Title: =============== Wifi Drive Pro v1.2 iOS - File Include Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1447 Release Date: ============= 2015-03-13 Vulnerability Laboratory ID VL-ID: ====================================...

TextSecure to Drop Support for Encrypted SMS

Open Whisper Systems is phasing out support for encrypted SMS and MMS messages in its TextSecure messaging product. The move does not spell the end for encrypted messaging for users of the Android app, as the company plans to switch to its own transport protocol to address some of the security an...

“Legacy”vulnerability: analysis of the new SSL/TLS vulnerability FREAK-vulnerability warning-the black bar safety net

Recently security researchers discovered a new SSL/TLS vulnerability. Expected within ten years, millions of Apple, Android users to access the HTTPS site will likely suffer from the middleman and then the stolen account and password, even if these sites use the encrypted transmission, also to no...

Signal 2.0 — Free iPhone App for Encrypted Calls and Texts

An open source software group, Open Whisper Systems, has announced the release of Signal 2.0 — the second version of its free and open source messaging application for iPhone and iPad users. Signal app is specifically designed to make secure and easy-to-use encrypted voice calling. But that’s wha...

Signal 2.0 Brings Encrypted Messaging to iPhone

The sanctity of Apple iMessage end-to-end encryption has been challenged by white hats who in 2013 reverse engineered the protocol behind it, revealing that Apple controls the key infrastructure and could, in turn, be compelled to turn over messages via government order. CEO Tim Cook denied those...