Apple Security Advisory 2013-02-01-1 – Multiple vulnerabilities exist in Java 1.6.0_37, the most serious of which may allow an untrusted Java applet to execute arbitrary code outside the Java sandbox. Visiting a web page containing a maliciously crafted untrusted Java applet may lead to arbitrary code execution with the privileges of the current user.
>> CATEGORY: OSX security tools
The Zed Attack Proxy (ZAP) is an easy to use integrated penetration testing tool for finding vulnerabilities in web applications. It is designed to be used by people with a wide range of security experience and as such is ideal for developers and functional testers who are new to penetration testing.
Apple Security Advisory 2013-01-28-2 – Apple TV 5.2 is now available and addresses multiple security vulnerabilities.
Apple Security Advisory 2013-01-28-1 – iOS 6.1 Software Update is now available and addresses multiple security vulnerabilities.
Apple QuickTime Player Windows version 7.7.3 suffers from an out of bounds read vulnerability.
Secunia Security Advisory – Apple has acknowledged a vulnerability in Apple TV, which can be exploited by malicious people to compromise a user’s device.
Secunia Security Advisory – Two security issues and multiple vulnerabilities have been reported in Apple iOS, which can be exploited by malicious people to conduct cross-site scripting attacks, bypass certain security restrictions, and compromise a user’s device.
Zero Day Initiative Advisory 12-191 – This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Apple Safari Webkit.
This Metasploit module abuses the “RunScript” procedure provided by the SOAP interface of Adobe InDesign Server, to execute arbitrary vbscript (Windows) or applescript(OSX). The exploit drops the payload on the server and must be removed manually.
Secunia Security Advisory – Apple has acknowledged two vulnerabilities in Apple TV, which can be exploited by malicious people to disclose certain information and compromise a user’s device.