:: Deepquest ::

YingZhi Python version 1.9 application for iOS allows for arbitrary file uploads to the root WWW directory and also has a ftp server directory traversal vulnerability that forces no authentication.

Secunia Security Advisory – Apple has acknowledged multiple vulnerabilities in Apple TV, which can be exploited by malicious people to disclose certain information, cause a DoS (Denial of Service), and compromise a user’s device.

Apple Security Advisory 2012-09-24-1 – Apple TV 5.1 is now available and addresses issues relating to malicious media loading, memory corruption, and more.

Apple Security Advisory 2012-09-19-3 – Safari 6.0.1 is now available and addresses multiple vulnerabilities in itself and WebKit.

Apple Security Advisory 2012-09-19-2 – OS X Mountain Lion v10.8.2, OS X Lion v10.7.5 and Security Update 2012-004 are now available and address Apache, BIND, CoreText, Data Security, and many other vulnerabilities.

Apple Security Advisory 2012-09-19-1 – iOS 6 is now available and addresses CFNetwork, CoreGraphics, CoreMedia, DHCP, and many other vulnerabilities.

Secunia Security Advisory – Apple has issued a security update for Mac OS X, which fixes multiple vulnerabilities.

Secunia Security Advisory – Multiple vulnerabilities have been reported in Apple iOS, which can be exploited by malicious, local users to disclose system information and gain escalated privileges, by malicious people to disclose potentially sensitive information, conducts spoofing attacks, and compromise a user’s device, and by malicious people with physical access to disclose potentially sensitive information and bypass certain security restrictions.

Apple Security Advisory 2012-09-17-1 – Apple Remote Desktop 3.5.3 is now available and addresses an information disclosure vulnerability.

[Turkish] XSS Exploitation via CHEF