:: Deepquest ::

http://www.kppmu.go.th/images/news/root.html notified by MR.F@RDIN

Secunia Security Advisory – Multiple vulnerabilities have been reported in Apple Safari for Mac OS X, which can be exploited by malicious people to conduct cross-site scripting and spoofing attacks, disclose sensitive information, bypass certain security restrictions, and compromise a user’s system.

Secunia Security Advisory – A weakness and a vulnerability have been reported in Apple Xcode, which can be exploited by malicious people to disclose potentially sensitive information, hijack a user’s session, and bypass certain security restrictions.

http://nlhospital.go.th/ly.txt notified by TOP-TEAM

This is a MobileSubstrate extension to disable certificate validation within NSURLConnection in order to facilitate black-box testing of iOS Apps. Once installed on a jailbroken device, iOS SSL Kill Switch patches NSURLConnection to override and disable the system’s default certificate validation as well as any kind of custom certificate validation (such as certificate pinning).

Apple Security Advisory 2012-07-25-2 – Xcode 4.4 is now available and addresses SSL and keychain access vulnerabilities.

Photodex ProShow Producer 5.0.3256 load File Handling Buffer Overflow

[Hebrew] Digital Whisper Security Magazine #33

CuteFlow v2.11.2 Arbitrary File Upload Vulnerability

Cisco Linksys PlayerPT ActiveX Control Buffer Overflow