Apple Security Advisory 2014-02-25-2 – Safari 6.1.2 and Safari 7.0.2 is now available and addresses an issue where visiting a maliciously crafted website may lead to an unexpected application termination or arbitrary code execution.

Apple Security Advisory 2014-02-25-3 – QuickTime 7.7.5 is now available and addresses multiple security issues related to denial of service and arbitrary code execution.

Apple Security Advisory 2014-02-21-3 – Apple TV 6.0.2 is now available and addresses a security issue. Secure Transport failed to validate the authenticity of the connection. This issue was addressed by restoring missing validation steps.

Apple Security Advisory 2014-02-21-1 – iOS 6.1.6 is now available and addresses a security issue. Secure Transport failed to validate the authenticity of the connection. This issue was addressed by restoring missing validation steps.

Apple Security Advisory 2014-02-21-2 – iOS 7.0.6 is now available and addresses a security issue. Secure Transport failed to validate the authenticity of the connection. This issue was addressed by restoring missing validation steps.

Apple Security Advisory 2014-02-11-1 – Boot Camp 5.1 addresses a security issue. A bounds checking issue existed in the AppleMNT.sys driver’s parsing of Portable Executable files. If a Portable Executable file with a malformed header is loaded, this could cause a Boot Camp driver to corrupt kernel memory. The issue was addressed through improved bounds […]

Apple Security Advisory 2014-01-22-1 – iTunes 11.1.4 is now available and addresses multiple security issues related to content control, code execution, and more. libxml and libxslt have also been updated to address memory corruption and code execution issues.

Vega is a GUI-based, multi-platform, free and open source web security scanner that can be used to find instances of SQL injection, cross-site scripting (XSS), and other vulnerabilities in your web applications. Vega also includes an intercepting proxy for interactive web application debugging that can also do active scanning (NEW in 1.0). Vega attack modules […]

Vega is a GUI-based, multi-platform, free and open source web security scanner that can be used to find instances of SQL injection, cross-site scripting (XSS), and other vulnerabilities in your web applications. Vega also includes an intercepting proxy for interactive web application debugging that can also do active scanning (NEW in 1.0). Vega attack modules […]

Apple Security Advisory 2013-12-19-1 – An integer overflow existed in the handling of .motn files which led to an out of bounds memory access. This issue was addressed through improved bounds checking.