Apple Safari iPhone 2.2.1/3.x (Mobile) Crash & Reboot Exploit (loop)

Exploit for unknown platform in category dos / poc ========================================== Apple iPhone MobileSafari Crash & Reboot ========================================== Apple iPhone MobileSafari Crash & Reboot TheLeader, GSOG st0p hotmail sp4m com Shoutz: hacking.org.il nullbyte.org.il...

Apple iPhone 2.2.13.x - MobileSafari Crash + Reboot (Denial of Service)

Apple iPhone 2.2.13.x - MobileSafari Crash + Reboot Denial of Service Apple iPhone MobileSafari Crash & Reboot TheLeader, GSOG st0p hotmail sp4m com Shoutz: hacking.org.il nullbyte.org.il Tested on iPod Touch 2G, OS 2.2.1 Launch MobileSafari, enter the page and MobileSafari will freeze. Wait for...

CVE-2009-2199

Removed by vendor...

PT-2009-4648 · Apple · Ios +1

Name of the Vulnerable Software and Affected Versions: Apple Safari versions prior to 4.0.3 iPhone OS versions prior to 3.1 iPhone OS versions prior to 3.1.1 for iPod touch Description: The issue allows remote attackers to spoof domain names in URLs, and possibly conduct phishing attacks, via...

CVE-2009-0151

The screen saver in Dock in Apple Mac OS X 10.5 before 10.5.8 does not prevent four-finger Multi-Touch gestures, which allows physically proximate attackers to bypass locking and "manage applications or use Expose" via unspecified vectors...

Design/Logic Flaw

The screen saver in Dock in Apple Mac OS X 10.5 before 10.5.8 does not prevent four-finger Multi-Touch gestures, which allows physically proximate attackers to bypass locking and "manage applications or use Expose" via unspecified vectors...

CVE-2009-0151

The screen saver in Dock in Apple Mac OS X 10.5 before 10.5.8 does not prevent four-finger Multi-Touch gestures, which allows physically proximate attackers to bypass locking and "manage applications or use Expose" via unspecified vectors...

CVE-2009-0151: Undefined Security Weakness

The screen saver in Dock in Apple Mac OS X 10.5 before 10.5.8 does not prevent four-finger Multi-Touch gestures, which allows physically proximate attackers to bypass locking and "manage applications or use Expose" via unspecified vectors...

HTC Touch 3G Windows Mobile/Open Handset Alliance Android SMS远程拒绝服务漏洞

HTC Touch 3G Windows Mobile是一款使用Windows Mobile操作系统的智能手机。Open Handset Alliance Android是一款超过30家科技与移动电话公司所组成的团体开发的免费的移动电话平台。 HTC Touch 3G Windows Mobile/Open Handset Alliance Android不正确处理特殊构建的SMS消息，远程攻击者可以利用漏洞关闭设备的用户接口，使设备从网络中断开，导致拒绝服务攻击。 Microsoft Windows Mobile Professional 6.1 Microsoft Windows...

Cross site scripting

Cross-site scripting XSS vulnerability in WebKit in Apple Safari before 4.0.2, as used on iPhone OS before 3.1, iPhone OS before 3.1.1 for iPod touch, and other platforms, allows remote attackers to inject arbitrary web script or HTML via vectors related to parent and top objects...

PT-2009-4198 · Apple · Ios +1

Name of the Vulnerable Software and Affected Versions: Apple Safari versions prior to 4.0.2 iPhone OS versions prior to 3.1 iPhone OS versions prior to 3.1.1 for iPod touch Description: A cross-site scripting XSS issue exists, allowing remote attackers to inject arbitrary web script or HTML via...

Input validation

The MPEG-4 video codec in Apple iPhone OS 1.0 through 2.2.1 and iPhone OS for iPod touch 1.1 through 2.2.1 allows remote attackers to cause a denial of service device reset via a crafted MPEG-4 video file that triggers an "input validation issue."...

CVE-2009-0959

The MPEG-4 video codec in Apple iPhone OS 1.0 through 2.2.1 and iPhone OS for iPod touch 1.1 through 2.2.1 allows remote attackers to cause a denial of service device reset via a crafted MPEG-4 video file that triggers an "input validation issue."...

CVE-2009-1679

The Profiles component in Apple iPhone OS 1.0 through 2.2.1 and iPhone OS for iPod touch 1.1 through 2.2.1, when installing a configuration profile, can replace the password policy from Exchange ActiveSync with a weaker password policy, which allows physically proximate attackers to bypass the...

Design/Logic Flaw

The Telephony component in Apple iPhone OS 1.0 through 2.2.1 and iPhone OS for iPod touch 1.1 through 2.2.1 allows remote attackers to cause a denial of service device reset via a crafted ICMP echo request, which triggers an assertion error related to a "logic issue."...

Information disclosure

Apple iPhone OS 1.0 through 2.2.1 and iPhone OS for iPod touch 1.1 through 2.2.1 stores an exception for a hostname when the user accepts an untrusted Exchange server certificate, which causes it to be accepted without prompting in future usage and allows remote Exchange servers to obtain sensiti...

CVE-2009-1679

The CVE covers Apple iPhone OS 1.0–2.2.1 and iPhone OS for iPod touch 1.1–2.2.1. The Profiles component, when installing a configuration profile, can replace ActiveSync’s password policy with a weaker one, allowing physically proximate attackers to bypass the policy. Impact: bypass of password po...

CVE-2009-1683

The CVE-2009-1683 issue affects Apple iPhone OS 1.0–2.2.1 and iPhone OS for iPod touch 1.1–2.2.1, where a remote attacker can trigger a denial of service (device reset) via a crafted ICMP echo request. The root cause is described as a logic issue in the Telephony component, leading to an assertio...

CVE-2009-0958

Apple iPhone OS 1.0–2.2.1 and iPhone OS for iPod touch 1.1–2.2.1 store an exception for a hostname after the user accepts an untrusted Exchange certificate, causing the certificate to be accepted in future use and enabling remote Exchange servers to obtain sensitive information such as credential...

CVE-2009-0959

CVE-2009-0959 affects Apple iPhone OS 1.0–2.2.1 and iPhone OS for iPod touch 1.1–2.2.1. The vulnerability is in the MPEG-4 video codec and is caused by an input validation issue in a crafted MPEG-4 video file, leading to a denial of service (device reset). Exploitation details are not provided in...