Code injection

The Application Store component in Apple iOS before 9 allows remote attackers to cause a denial of service to an enterprise-signed app via a crafted ITMS URL...

CVE-2015-5856

CVE-2015-5856 affects Apple iOS, specifically the Application Store component, where a crafted ITMS URL could cause a denial of service to enterprise-signed apps. The root cause is an installation-verification issue in the ITMS/enterprise signing flow. Impact is denial of service to enterprise-si...

CVE-2015-5856

The Application Store component in Apple iOS before 9 allows remote attackers to cause a denial of service to an enterprise-signed app via a crafted ITMS URL...

Apple iTunes 10.6.1.7 - .pls Title Buffer Overflow

Apple iTunes 10.6.1.7 - .pls Title Buffer Overflow Exploit Title: Apple Itunes PLS title buffer overflow Date: April 26 ,2015 Day of disclosing this exploit code Exploit Author: Fady Mohamed Osman @fadyosman Vendor Homepage: http://www.apple.com Software Link:...

Open redirect

Apple iOS 6.1.3 does not follow redirects during determination of the hostname to display in an iOS Enterprise Deployment installation dialog, which makes it easier for remote attackers to trigger installation of arbitrary applications via a download-manifest itms-services:// URL that leverages a...

Apple iTunes 8.1.1 (ITMS) Multiple Protocol Handler BOF Exploit (meta)

Exploit for macOS platform in category remote exploits ====================================================================== Apple iTunes 8.1.1 ITMS Multiple Protocol Handler BOF Exploit meta ====================================================================== $Id: $ This file is part of the...