what you don't know can hurt you

Register | Login

FilesNewsUsersAuthors

Home Files News &[SERVICES_TAB]About Contact Add New

Showing 1 - 3 of 3

Files from Guillaume Ross

Apple Facetime Information Disclosure

Posted Mar 11, 2014

Authored by Guillaume Ross

Facetime allows video calls for iOS. Facetime-Audio, added in iOS 7, allows audio only calls. The audio version uses a vulnerable URL scheme which is not used by Facetime Video. The URL Scheme used for Facetime-Audio allows a website to establish a Facetime-audio call to the attacker's account, revealing the phone number or email address of the user browsing the site. This was fixed in iOS 7.1.

tags | exploit, info disclosure

systems | apple, ios

advisories | CVE-2013-6835

SHA-256 | bebab63f72c50288bcebc313e5246e1fd3c7b31efbc03002eade638bcbfe9eae

Download | Favorite | View

Tweetbot Lack Of User Confirmation

Posted Nov 3, 2013

Authored by Guillaume Ross

Tweetbot fails to prompt for user confirmation prior to taking an action allowing for malicious iframes to trigger actions on Twitter unknowingly.

tags | exploit, info disclosure

advisories | CVE-2013-5726

SHA-256 | 6b18ab34ba20dd7e6914b429689f428091a216d03b4765b0e24745ae40a1fbca

Download | Favorite | View

Byword 2.x File Overwrite

Posted Sep 29, 2013

Authored by Guillaume Ross

Byword versions prior to 2.1 allow for a remote file overwrite attack.

tags | exploit, remote

advisories | CVE-2013-5725

SHA-256 | 31dbff80533d69b46f741347c1aad7f82c471e3bb3fd8097ffceea0cdbad5d0f

Download | Favorite | View