ipa: Insufficient permission check in certprofile-mod

It was found that IdM's certprofile-mod command did not properly check the user's permissions while modifying certificate profiles. An authenticated, unprivileged attacker could use this flaw to modify profiles to issue certificates with arbitrary naming or key usage information and subsequently...

Wifi-Dumper - Tool To Dump The Wifi Profiles And Cleartext Passwords Of The Connected Access Points On The Windows Machine

This is an open source tool to dump the wifi profiles and cleartext passwords of the connected access points on the Windows machine. This tool will help you in a Wifi testing. Furthermore, it is useful while performing red team or an internal infrastructure engagements. Features Option 1: Shows t...

Apple iOS < 10.2 Multiple Vulnerabilities

Binary data appleios102check.nbin...

Apple TV < 10.0.1 Multiple Vulnerabilities

Binary data 9757.prm...

Apple iOS < 10.1 Multiple Vulnerabilities

Binary data 9756.prm...

Apple iOS < 10.1 Multiple Vulnerabilities

Binary data appleios101check.nbin...

Apple TV < 10.0.1 Multiple Vulnerabilities

According to its banner, the version of Apple TV on the remote device is prior to 10.0.1. It is, therefore, affected by multiple vulnerabilities : - A flaw exists in WebKit when handling the location attribute that allows an unauthenticated, remote attacker to bypass the cross-origin policies and...

Sandbox Profiles component information disclosure vulnerability in Apple iOS/tvOS/WatchOS (CNVD-2016-10387)

Apple iOS, tvOS, and watchOS are products of Apple Inc. Apple iOS is an operating system for mobile devices; tvOS is a smart TV operating system; and watchOS is a smart watch operating system. sandbox Profiles is one of the sandbox components. Sandbox Profiles is one of the sandbox components. An...

Sandbox Profiles Component Information Disclosure Vulnerability in Apple iOS/tvOS/WatchOS

Apple iOS, tvOS, and watchOS are products of Apple Inc. Apple iOS is an operating system for mobile devices; tvOS is a smart TV operating system; and watchOS is a smart watch operating system. sandbox Profiles is one of the sandbox components. Sandbox Profiles is one of the sandbox components. An...

Warning! Your iPhone Can Get Hacked Just by Opening a JPEG Image, PDF or Font File

What's worse than knowing that innocent looking JPEGs, PDFs and font files can hijack your iPhone, iPad, and iPod. Yes, attackers can take over your vulnerable Apple's iOS device remotely – all they have to do is trick you to view a maliciously-crafted JPEG graphic or PDF file through a website o...

About the security content of tvOS 10.0.1

About the security content of tvOS 10.0.1 This document describes the security content of tvOS 10.0.1. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available...

About the security content of watchOS 3.1

About the security content of watchOS 3.1 This document describes the security content of watchOS 3.1. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available...

F5 BIG-IP - TMM vulnerability CVE-2016-5023

An unauthenticated remote attacker may be able to disrupt services on the BIG-IP with maliciously crafted network traffic. This vulnerability affects virtual servers associated with TCP profiles. The management interface is not affected by this vulnerability. SPDX-FileCopyrightText: 2016 Greenbon...

Profiles Are Not Written Back to User Store on Logoff

Under certain circumstances User Profiles are not written back to the UPM User Store during log off...

SOL13167034 - OpenSSL vulnerability CVE-2016-2183

Vulnerability Recommended Actions If you are running a version listed in the Versions known to be vulnerable column, you can eliminate this vulnerability by upgrading to a version listed in the Versions known to be not vulnerable column. If the table lists only an older version than what you are...

Apple iOS < 10.0 Multiple Vulnerabilities

Binary data 9619.prm...

CVE-2016-4620

The Sandbox Profiles component in Apple iOS before 10 does not properly restrict access to directory metadata for SMS draft directories, which allows attackers to discover text-message recipients via a crafted app...

CVE-2016-4620

The Sandbox Profiles component in Apple iOS before 10 does not properly restrict access to directory metadata for SMS draft directories, which allows attackers to discover text-message recipients via a crafted app...

Design/Logic Flaw

The Sandbox Profiles component in Apple iOS before 10 does not properly restrict access to directory metadata for SMS draft directories, which allows attackers to discover text-message recipients via a crafted app...

CVE-2016-4620

CVE-2016-4620 affects Apple iOS prior to 10, in the Sandbox Profiles component. The issue is an access control flaw in SMS draft directories that allowed a crafted app to discover text-message recipients by stat-ing these directories. Apple’s remediation tightened directory access so apps cannot ...