AirKeyboard iOS App 1.0.5 – Remote Input Injection
# Exploit Title: AirKeyboard iOS App 1.0.5 - Remote Input Injection
ios
ios 相关平台内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
Owlfiles File Manager 12.0.1 – Multiple Vulnerabilities
# Exploit Title: Owlfiles File Manager 12.0.1 - Multiple Vulnerabilities
Wifi HD Wireless Disk Drive 11 – Local File Inclusion
# Exploit Title: Wifi HD Wireless Disk Drive 11 - Local File Inclusion
Notex the best notes 6.4 – Denial of Service (PoC)
# Exploit Title: Notex the best notes 6.4 - Denial of Service (PoC)
Post-it 5.0.1 – Denial of Service (PoC)
# Exploit Title: Post-it 5.0.1 - Denial of Service (PoC)
Secure Notepad Private Notes 3.0.3 – Denial of Service (PoC)
# Exploit Title: Secure Notepad Private Notes 3.0.3 - Denial of Service (PoC)
n+otes 1.6.2 – Denial of Service (PoC)
# Exploit Title: n+otes 1.6.2 - Denial of Service (PoC)
Sticky Notes Widget Version 3.0.6 – Denial of Service (PoC)
# Exploit Title: Sticky Notes Widget Version 3.0.6 - Denial of Service (PoC)
memono Notepad Version 4.2 – Denial of Service (PoC)
# Exploit Title: memono Notepad Version 4.2 - Denial of Service (PoC)
Sticky Notes & Color Widgets 1.4.2 – Denial of Service (PoC)
# Exploit Title: Sticky Notes & Color Widgets 1.4.2 - Denial of Service (PoC)
My Notes Safe 5.3 – Denial of Service (PoC)
# Exploit Title: My Notes Safe 5.3 - Denial of Service (PoC)
Macaron Notes great notebook 5.5 – Denial of Service (PoC)
# Exploit Title: Macaron Notes great notebook 5.5 - Denial of Service (PoC)
Color Notes 1.4 – Denial of Service (PoC)
# Exploit Title: Color Notes 1.4 - Denial of Service (PoC)
WebSSH for iOS 14.16.10 – ‘mashREPL’ Denial of Service (PoC)
# Exploit Title: WebSSH for iOS 14.16.10 - 'mashREPL' Denial of Service (PoC)
Mini Mouse 9.3.0 – Local File inclusion
# Exploit Title: Mini Mouse 9.3.0 - Local File inclusion / Path Traversal
HardDrive 2.1 for iOS – Arbitrary File Upload
# Title: HardDrive 2.1 for iOS - Arbitrary File Upload
Super Backup 2.0.5 for iOS – Directory Traversal
# Title: Super Backup 2.0.5 for iOS - Directory Traversal
Easy Transfer 1.7 for iOS – Directory Traversal
# Title: Easy Transfer 1.7 for iOS - Directory Traversal
Sky File 2.1.0 iOS – Directory Traversal
# Title: Sky File 2.1.0 iOS - Directory Traversal
Playable 9.18 iOS – Persistent Cross-Site Scripting
# Title: Playable 9.18 iOS - Persistent Cross-Site Scripting
File Transfer iFamily 2.1 – Directory Traversal
# Title: File Transfer iFamily 2.1 - Directory Traversal
SuperBackup 2.0.5 for iOS – Persistent Cross-Site Scripting
# Title: SuperBackup 2.0.5 for iOS - Persistent Cross-Site Scripting
AirDisk Pro 5.5.3 for iOS – Persistent Cross-Site Scripting
# Title: AirDisk Pro 5.5.3 for iOS - Persistent Cross-Site Scripting
ProficySCADA for iOS 5.0.25920 – ‘Password’ Denial of Service (PoC)
# Exploit Title: ProficySCADA for iOS 5.0.25920 - 'Password' Denial of Service (PoC)
P2PWIFICAM2 for iOS 10.4.1 – ‘Camera ID’ Denial of Service (PoC)
# Exploit Title: P2PWIFICAM2 for iOS 10.4.1 - 'Camera ID' Denial of Service (PoC)
GHIA CamIP 1.2 for iOS – ‘Password’ Denial of Service (PoC)
# Exploit Title: GHIA CamIP 1.2 for iOS - 'Password' Denial of Service (PoC)
iNetTools for iOS 8.20 – ‘Whois’ Denial of Service (PoC)
# Exploit Title: iNetTools for iOS 8.20 - 'Whois' Denial of Service (PoC)
iOS 12.4 – Sandbox Escape due to Integer Overflow in mediaserverd
mediaserverd has various media parsing responsibilities; its reachable from various sandboxes
scadaApp for iOS 1.1.4.0 – ‘Servername’ Denial of Service (PoC)
# Exploit Title: scadaApp for iOS 1.1.4.0 - 'Servername' Denial of Service (PoC)
Open Proficy HMI-SCADA 5.0.0.25920 – ‘Password’ Denial of Service (PoC)
# Exploit Title: Open Proficy HMI-SCADA 5.0.0.25920 - 'Password' Denial of Service (PoC)
iOS IOUSBDeviceFamily 12.4.1 – ‘IOInterruptEventSource’ Heap Corruption (PoC)
# Exploit Title: iOS IOUSBDeviceFamily 12.4.1 - 'IOInterruptEventSource' Heap Corruption (PoC)
iMessage – Decoding NSSharedKeyDictionary Can Read Object Out of Bounds
When an NSKeyedUnarchiver decodes an object, it first allocates the object using allocWithZone, and then puts the obj...
iOS < 12.4.1 - 'Jailbreak' Local Privilege Escalation
Exploit Title: SockPuppet 3
Visual Voicemail for iPhone – IMAP NAMESPACE Processing Use-After-Free
Visual Voicemail (VVM) is a feature of mobile devices that allows voicemail to be read in an email-like format. Carri...
iOS 12.1.3 – ‘cfprefsd’ Memory Corruption
// (c) 2019 ZecOps, Inc. - https://www.zecops.com - Find Attackers' Mistakes
FaceTime – RTP Video Processing Heap Corruption
There is a memory corruption issue when processing a malformed RTP video stream in FaceTime that leads to a kernel pa...
Apple iOS Kernel – Use-After-Free due to bad Error Handling in Personas
There was recently some cleanup in the persona code to fix some race conditions there, I don't think it was sufficient:
Apple iOS – Kernel Stack Memory Disclosure due to Failure to Check copyin Return Value
Here's a code snippet from sleh.c with the second level exception handler for undefined instruction exceptions:
Trend Micro Virtual Mobile Infrastructure 5.5.1336 – ‘Server address’ Denial of Service (PoC)
# Exploit Title: Trend Micro Virtual Mobile Infrastructure 5.5.1336 - 'Server address' Denial of Service (PoC)
Symantec Mobile Encryption for iPhone 2.1.0 – ‘Server’ Denial of Service (PoC)
# Exploit Title: Symantec Mobile Encryption for iPhone 2.1.0 - 'Server' Denial of Service (PoC)
Cisco AnyConnect Secure Mobility Client 4.6.01099 – ‘Introducir URL’ Denial of Service (PoC)
# Exploit Title: Cisco AnyConnect Secure Mobility Client 4.6.01099 - 'Introducir URL' Denial of Service (PoC)
Trend Micro Enterprise Mobile Security 2.0.0.1700 – ‘Servidor’ Denial of Service (PoC)
# Exploit Title: Trend Micro Enterprise Mobile Security 2.0.0.1700 - 'Servidor' Denial of Service (PoC)
WhatsApp 2.18.31 – Memory Corruption
#!/usr/bin/env python
Photos in Wifi 1.0.1 – Path Traversal
Document Title:
iOS < 11.1 / tvOS < 11.1 / watchOS < 4.1 - Denial of Service
# Exploit Title: TpwnT - iOS Denail of Service POC
WhatsApp 2.17.52 – Memory Corruption
#!/usr/bin/env python
Apple iOS 10.2 (14C92) – Remote Code Execution
Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1317#c3
Apple iOS 10.2 – Broadcom Out-of-Bounds Write when Handling 802.11k Neighbor Report Response
Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1289
Apple iOS < 10.3.1 - Kernel
Sources: