Aggregator

A vulnerability labeled as problematic has been found in Apple iOS 6.0/6.1/7.0.5. This vulnerability affects unknown code of the component CoreCapture. Such manipulation as part of IOKit API Call leads to improper input validation. This vulnerability is traded as CVE-2014-1271. An attack has to be approached locally. There is no exploit available. The affected component should be upgraded.

A vulnerability marked as problematic has been reported in Apple iOS 6.0/6.1/7.0.5. This issue affects some unknown processing of the component CrashHouseKeeping. Performing a manipulation results in link following. This vulnerability is known as CVE-2014-1272. Attacking locally is a requirement. No exploit is available. It is suggested to upgrade the affected component.

A vulnerability described as problematic has been identified in Apple iOS 6.0/6.1/7.0.5. Impacted is an unknown function of the component dyld. Executing a manipulation can lead to improper input validation. This vulnerability is handled as CVE-2014-1273. It is possible to launch the attack on the local host. There is not any exploit available. Upgrading the affected component is recommended.

A vulnerability classified as critical has been found in Apple iOS 6.0/6.1/7.0.5. The affected element is an unknown function of the component JPEG2000 File Handler. The manipulation leads to memory corruption. This vulnerability is uniquely identified as CVE-2014-1275. The attack is possible to be carried out remotely. No exploit exists. It is recommended to upgrade the affected component.

A vulnerability classified as critical was found in Apple iOS 6.0/6.1/7.0.5 on ARM. The impacted element is the function ptmx_get_ioctl. The manipulation results in memory corruption. This vulnerability was named CVE-2014-1278. The attack needs to be approached locally. There is no available exploit. Upgrading the affected component is advised.

A vulnerability, which was classified as problematic, has been found in Apple iOS 6.0/6.1/7.0.5. This affects an unknown function of the component MPEG-4 Handler. This manipulation causes null pointer dereference. The identification of this vulnerability is CVE-2014-1280. The attack can only be executed locally. There is no exploit available. It is advisable to upgrade the affected component.

A vulnerability has been found in Apple iOS 6.0/6.1/7.0.5 and classified as critical. Affected is an unknown function of the component USB Message Handler. Performing a manipulation results in memory corruption. This vulnerability is identified as CVE-2014-1278. The attack is only possible with local access. Additionally, an exploit exists. The affected component should be upgraded.

A vulnerability was found in Apple iOS 6.1/7.0.5. It has been classified as problematic. Affected by this issue is some unknown functionality of the component Facetime. The manipulation as part of facetime-audio:/ Scheme leads to information disclosure. This vulnerability is listed as CVE-2014-1274. The attack must be carried out locally. There is no available exploit. Upgrading the affected component is recommended.

A vulnerability was found in Apple iOS 6.1/7.0.5. It has been declared as problematic. This affects an unknown part of the component IOKit HID Event Handler. The manipulation results in improper access controls. This vulnerability is cataloged as CVE-2014-1276. The attack may be launched remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability categorized as problematic has been discovered in Apple iOS 6.1/7.0.5. This issue affects some unknown processing of the component Photos Backend. Such manipulation leads to improper access controls. This vulnerability is documented as CVE-2014-1281. The attack needs to be performed locally. There is not any exploit available. It is advisable to upgrade the affected component.

环境异常 当前环境异常，完成验证后即可继续访问。 去验证

本文分析了在 No RELRO 和 Partial RELRO 保护下，通过栈溢出漏洞伪造_DYNAMIC、重定位表及符号表实现 ret2dlresolve 攻击的方法。文章详细阐述了修改字符串表地址与构造虚假重定位项两种利用链，成功绕过限制执行 system 函数获取 Shell。

文章详细分析了钓鱼样本执行从上线到维权，最后拿到CS的shellcode，文末有彩蛋

有关于两个linux常见终端文本编辑器的漏洞分析....

本文介绍利用 WireGuard 组建加密隧道并结合 Caddy 实现应用层 TLS 卸载的流量重定向架构。通过配置反向代理规则将特定路径流量转发至内网 C2 服务器，有效隐藏真实 IP 并伪装业务流量特征。该方法相比传输层透传更能规避防火墙对非标准加密流量的检测。

2026阿里白帽大会 - Agent安全(智能体时代的攻防新范式)

Spring AI SpEL 注入 RCE

Google 发布 Fitbit Air5 月 7 日，谷歌正式发布 Fitbit Air，这是一款无屏幕、无实体按键的极简健身手环，主打无感健康监测。Fitbit Air 机身重量为 5.2 克，搭