IOSSecuritySuite

⭐️ 인증된 iOS 애플리케이션 보안 엔지니어가 되고 싶으신가요? ⭐️ 실용적이고 완전 온라인 강좌를 확인하세요: https://courses.securing.pl/courses/iase ISS 설명 작성자: @r3ggi 🌏 iOS Security Suite는 순수 Swift로 작성된 고급스럽고 사용하기 쉬운 플랫폼 보안 및 변조 방지 라이브러리입니다! iOS 개발을 하고 있고 OWASP MASVS 표준의 v8장에 따라 앱을 보호하려는 경우, 이 라이브러리가 많은 시간을 절약해 줄 수 있습니다. 🚀 ISS가 탐지하는 것: 탈옥 🧨...

swift-nio-ssh

SwiftNIO SSH このプロジェクトは、SwiftNIO を使用したSSHサポートを含んでいます。 SwiftNIO SSHとは？ SwiftNIO SSHは、SSHのプログラムによる実装です。つまり、プログラマがSSHを話すエンドポイントを実装できるようにするAPIのコレクションです。重要なのは、これはopensshというよりlibssh2に近いということです。SwiftNIO SSHは本番環境ですぐ使えるSSHクライアントやサーバを提供するのではなく、そのようなクライアントとサーバを構築するための構成要素を提供します。...

SwiftyInsta

SwiftyInsta 레거시 SwiftyInsta 는 더 이상 활발히 유지 관리되지 않습니다. 자세한 내용은 244를 참조하세요. 최신 대안을 찾고 계신다면 Swiftagram을 확인해보세요. Instagram 은 개발자에게 두 종류의 API를 제공합니다. Instagram API Platform 기능이 매우 제한적이며 곧 중단될 예정과, 비즈니스 및 크리에이터 계정 전용인 Instagram Graph API입니다. 그러나 Instagram 앱은 세 번째 유형의 API , 소위 Private API 또는 비공식 API에 의존하...

Use of Weak Hash

Overview ms-swift is a Swift: Scalable lightWeight Infrastructure for Fine-Tuning Affected versions of this package are vulnerable to Use of Weak Hash in the Template.savepilimage function in swift/template/base.py. An attacker can exploit a weakness in cache key integrity to tamper with the...

jose-swift has JWT Signature Verification Bypass via None Algorithm

Summary An authentication bypass vulnerability allows any unauthenticated attacker to forge arbitrary JWT tokens by setting "alg": "none" in the token header. The library's verification functions immediately return true for such tokens without performing any cryptographic verification, enabling...

AWS SDK for Swift adopted defense in depth enhancement for region parameter value

CVSSv3.1 Rating: 3.7 LOW Summary This notification is related to the use of specific values for the region input field when calling AWS services. An actor with access to the environment in which the SDK is used could set the region input field to an invalid value. A defense-in-depth enhancement h...

AWS SDK for Swift adopted defense in depth enhancement for region parameter value

CVSSv3.1 Rating: 3.7 LOW Summary This notification is related to the use of specific values for the region input field when calling AWS services. An actor with access to the environment in which the SDK is used could set the region input field to an invalid value. A defense-in-depth enhancement h...

Asymmetric Resource Consumption (Amplification)

Overview apple/swift-nio-http2 is a HTTP/2 support for SwiftNIO. Affected versions of this package are vulnerable to Asymmetric Resource Consumption Amplification due to the handling of HTTP/2 connections. An attacker can cause resource exhaustion by interleaving malicious traffic with legitimate...

Improper Handling of Syntactically Invalid Structure

Overview Affected versions of this package are vulnerable to Improper Handling of Syntactically Invalid Structure due to the parsing process. An attacker can cause the application to crash by sending specially crafted BER/DER data. Remediation Upgrade swift-asn1 to version 1.3.1 or higher...

grpc 安全漏洞

grpc is a Cloud Native Computing Foundation codebase for rpc connectivity applications. A security vulnerability exists in grpc-swift versions prior to 1.7.2, which stems from incorrect logic when handling GOAWAY frames...