iOS 7 - Kernel Mode Memory Corruption

...................................... Vulnerability Summary ...................................... Title iOS 7 arbitrary code execution in kernel mode Release Date 14 March 2014 Reference NGS00596 Discoverer Andy Davis Vendor Apple Vendor Reference 600217059 Systems Affected iPhone 4 and later,...

iOS 7 Arbitrary Code Execution

...................................... Vulnerability Summary ...................................... Title iOS 7 arbitrary code execution in kernel mode Release Date 14 March 2014 Reference NGS00596 Discoverer Andy Davis Vendor Apple Vendor Reference 600217059 Systems Affected iPhone 4 and later,...

Apple iOS 多个内存破坏漏洞

BUGTRAQ ID: 66087 CVECAN ID: CVE-2013-5133,CVE-2014-1274,CVE-2013-6835,CVE-2014-1276,CVE-2014-1277,CVE-2014-1281,CVE-2014-1284,CVE-2014-1285,CVE-2014-1286 iOS是由苹果公司为移动设备所开发的操作系统，支持的设备包括iPhone、iPod touch、iPad、Apple TV。 iOS 7.1之前版本在实现上存在多个安全漏洞，攻击者可利用这些漏洞执行中间人攻击、访问任意文件、获取未授权访问权限、绕过安全限制、执行其他攻击。 0 App...

APPLE-SA-2014-02-21-1 iOS 6.1.6

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 APPLE-SA-2014-02-21-1 iOS 6.1.6 iOS 6.1.6 is now available and addresses the following: Data Security Available for: iPhone 3GS, iPod touch 4th generation Impact: An attacker with a privileged network position may capture or modify data in sessions...

APPLE-SA-2014-02-21-2 iOS 7.0.6

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 APPLE-SA-2014-02-21-1 iOS 6.1.6 iOS 6.1.6 is now available and addresses the following: Data Security Available for: iPhone 3GS, iPod touch 4th generation Impact: An attacker with a privileged network position may capture or modify data in sessions...

jDisk (stickto) v2.0.3 iOS - Multiple Vulnerabilities

Exploit for hardware platform in category web applications Document Title: =============== jDisk stickto v2.0.3 iOS - Multiple Web Vulnerabilities Product & Service Introduction: =============================== jDisk turns your iPhoneiPadiPod into a flash drive / disk. jDisk provides a purely...

[evasi0n7] iOS 7.x Jailbreak

Evasi0n Jailbreaking tools available for Apple iOS 7 users. This jailbreak utility/tool made by Evad3rs team after 3 months of iOS 7 launched. evasi0n is available for Mac and Windows, and is untethered. Here are the requirements posted on the evasi0n website: A computer, running Windows XP...

iOS 7 Untethered Jailbreak released for iPhone, iPad, and iPod devices

None...

APPLE-SA-2013-11-14-1 iOS 7.0.4

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 APPLE-SA-2013-11-14-1 iOS 7.0.4 iOS 7.0.4 is now available and addresses the following: App Store Available for: iPhone 4 and later, iPod touch 5th generation and later, iPad 2 and later Impact: App and In-App purchases may be completed with...

Apple iOS 7.0.4 update released to patch Apple Store purchase vulnerability

Apple has released the latest version of its mobile platform i.e. iOS 7.0.4 includes bug fixes, security patches with some new features. The update is available for iPhone, iPad and iPod touch, identified as "build 11B554a." Most importantly Apple has patched a critical security flaw that allowed...

Apple iOS 7.0.4 update released to patch Apple Store purchase vulnerability

Apple has released the latest version of its mobile platform i.e. iOS 7.0.4 includes bug fixes, security patches with some new features. The update is available for iPhone, iPad and iPod touch, identified as "build 11B554a." Most importantly Apple has patched a critical security flaw that allowed...

withU Music Share 1.3.7 Command Injection

Title: ====== withU Music Share v1.3.7 iOS - Command Inject Vulnerability Date: ===== 2013-08-03 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1040 VL-ID: ===== 1040 Common Vulnerability Scoring System: ==================================== 6.1 Introduction:...

FTP Sprite 1.2.1 iOS - Persistent Cross-Site Scripting

Title: ====== FTP Sprite v1.2.1 iOS - Persistent Web Vulnerability Date: ===== 2013-07-12 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1007 VL-ID: ===== 1007 Common Vulnerability Scoring System: ==================================== 3.7 Introduction: ============= FTP...

Apple iPhone/iPad/iPod touch iOS 6.1.3之前版本本地安全绕过漏洞(CVE-2013-0979)

BUGTRAQ ID: 58588 CVECAN ID: CVE-2013-0979 Apple iOS是由苹果公司开发的手持设备操作系统。 iPhone, iPod touch, iPad上使用的Apple iOS 6.1.3之前版本在从备份恢复时，lockdownd更改了某些文件的权限，即使这些文件的路径包含了符号链接，本地攻击者可利用此漏洞更改任意文件的权限。 0 Apple iOS = 6.1.3 厂商补丁： Apple ----- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://support.apple.com/...

Apple iPhone/iPad/iPod touch iOS 6.1.3之前版本本地任意内核代码执行漏洞(CVE-2013-0981)

BUGTRAQ ID: 58589 CVECAN ID: CVE-2013-0981 Apple iOS是由苹果公司开发的手持设备操作系统。 iPhone, iPod touch, iPad上使用的Apple iOS 6.1.3之前版本，IOUSBDeviceFamily驱动程序使用了来自于用户空间的pipe对象指针，本地用户可利用此漏洞在内核中执行任意代码。 0 Apple iOS = 6.1.3 厂商补丁： Apple ----- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://support.apple.com/...

Apple Releases iOS 6.1.3

Apple has released iOS 6.1.3 for the iPhone 3GS or later, iPod touch 4th generation or later, and iPad 2 or later to address multiple vulnerabilities. These vulnerabilities may allow an attacker to operate with elevated privileges, bypass security features or execute arbitrary code. US-CERT...

Apple iOS 6.1.3 Fixes Evasion Jailbreak Bug, WebKit Flaw

Apple has patched a handful of security vulnerabilities in iOS, including a bug that was used for the latest iPhone jailbreak tool, called Evasion. Apple iOS 6.1.3 has patches for six vulnerabilities, including the screen lock bypass bug and a flaw in WebKit that can be used to execute arbitrary...

How to bypass iOS 6.1.2 Screen Lock, another Exploit Exposed

After a series of security issues, it appears that Apple still has not been able to resolve all the issue in iOS. Last week, Apple rolled out its iOS 6.1.2 update to owners of the iPhone, iPad and iPod touch in an effort to fixing the 3G connectivity and an Exchange calendar bugs. Hackers found a...

Apple iPhone/iPad/iPod touch iOS 6.1之前版本安全绕过漏洞

BUGTRAQ ID: 57598 CVECAN ID: CVE-2013-0963 Apple iOS是由苹果公司开发的操作系统。 Apple iOS内身份认证服务中存在错误处理。当用户的AppleID证书验证失败时，用户的AppleID会被假定为空字符串。当有多个属于不同用户的系统进入这种状态时，依靠该认证方式的应用程序就会产生认证错误。 0 Apple iPhone 4.x Apple iPhone 3.x Apple iOS 3.x Apple iOS 2.x Apple Apple TV 5.x Apple Apple TV 4.x 厂商补丁： Apple -----...

Broadcom BCM4325 / BCM4329 Denial Of Service

Exploit Author: CoreLabs Core Security Technologies fue descubierta por el investigador argentino Andrés Blanco, Vendor Homepage: Software Link: download link if available Version: 1.0 Tested on: Apple iPhone 3GS Apple iPod 2G HTC Touch Pro 2 HTC Droid Incredible Samsung Spica Acer Liquid Motorol...