Exploit for Classic Buffer Overflow in Qualcomm Aqt1000_Firmware

BlackBerry KEY2 Research Reverse-engineering, unlock, and Lin...

threat-research-and-intelligence

전체 인텔리전스 블로그 | 블로그 산출물 | 보고서 산출물 | 공개 발표 자료 ℹ️ :: 개요 이 저장소는 BlackBerry Threat Research & Intelligence 팀이 게시한 위협 인텔리전스 보고서의 IOCs, YARA 규칙 및 소스 코드를 배포하기 위한 것입니다. 스크린샷을 포함한 완전한 상세 보고서는 ➡️ 여기를 클릭하세요 관련 IOC가 포함된 간단한 블로그 스타일 보고서는 ➡️ 여기를 클릭하세요 완전한 상세 보고서의 요약 및 IOC는 ➡️ 여기를 클릭하세요 🔍 :: YARA 규칙 YARA 규칙은 사용...

CVE-2019-8997

CVE-2019-8997 BlackBerry AtHoc의 Management System콘솔에서 버전 7.6 HF-567 이전에 존재하는 XML 외부 엔터티 주입XXE 취약점으로 인해, 공격자가 기존 필드에 악의적으로 조작된 XML을 입력하여 애플리케이션 서버의 임의 로컬 파일을 읽거나 네트워크 요청을 보낼 수 있습니다. 보고자 Nolan B. Kennedy nxkennedy 보안 권고 http://support.blackberry.com/kb/articleDetail?articleNumber=000047227...

BlackBerry QNX KEV File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of BlackBerry QNX. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of KEV...

CVE-2026-18247

The CVE-2026-18247 describes a DOM-based XSS in BlackBerry AtHoc Web Portals (AtHoc IWS). Affected versions are earlier than 7.21 HF-734; exploitation could allow an attacker to perform actions in the victim’s session. Remediation is to upgrade to 7.21 HF-734 or later. The available connected doc...

CVE-2026-18247 DOM-Based Cross-Site Scripting in BlackBerry AtHoc Web Portals

A Cross Site Scripting XSS vulnerability in the Web Portals of AtHoc IWS in versions earlier than 7.21 HF-734 could allow an attacker to potentially execute actions in the context of the victim's session...

CVE-2026-18085

An Improper Input Validation in the BlackBerry UEM Management Console of BlackBerry UEM 12.23.0 QF8 and earlier allows Arbitrary File Download and Potential Denial of Service...

CVE-2026-18084

Improper Neutralization of Input During Web Page Generation vulnerability in BlackBerry UEM Management Console of BlackBerry UEM allows Cross-Site Scripting XSS. This issue affects UEM: 12.23.0 QF8 or earlier...

CVE-2026-18084 Cross-Site Scripting (XSS) in Management Console of BlackBerry UEM

Improper Neutralization of Input During Web Page Generation vulnerability in BlackBerry UEM Management Console of BlackBerry UEM allows Cross-Site Scripting XSS. This issue affects UEM: 12.23.0 QF8 or earlier...

EUVD-2026-49898

Improper Neutralization of Input During Web Page Generation vulnerability in BlackBerry UEM Management Console of BlackBerry UEM allows Cross-Site Scripting XSS. This issue affects UEM: 12.23.0 QF8 or earlier...

CVE-2026-18084 Cross-Site Scripting (XSS) in Management Console of BlackBerry UEM

Improper Neutralization of Input During Web Page Generation vulnerability in BlackBerry UEM Management Console of BlackBerry UEM allows Cross-Site Scripting XSS. This issue affects UEM: 12.23.0 QF8 or earlier...

CVE-2026-18084

Improper Neutralization of Input During Web Page Generation vulnerability in BlackBerry UEM Management Console of BlackBerry UEM allows Cross-Site Scripting XSS. This issue affects UEM: 12.23.0 QF8 or earlier...

CVE-2026-18084

CVE-2026-18084 is an XSS vulnerability in the BlackBerry UEM Management Console due to improper neutralization of input during web page generation. Affected: BlackBerry UEM 12.23.0 QF8 or earlier. Impact: cross-site scripting with high potential impact; no exploitation details or remediations pro...

CVE-2026-18085

The vulnerability CVE-2026-18085 affects BlackBerry UEM, specifically the Management Console in BlackBerry UEM 12.23.0 QF8 and earlier. It is caused by improper input validation in the affected console, allowing Arbitrary File Download and potentially Denial of Service. Documents do not provide e...

CVE-2026-18085 Improper Input Validation Leads to Arbitrary File Download and Potential Denial of Service in BlackBerry UEM

An Improper Input Validation in the BlackBerry UEM Management Console of BlackBerry UEM 12.23.0 QF8 and earlier allows Arbitrary File Download and Potential Denial of Service...

CVE-2026-18085

An Improper Input Validation in the BlackBerry UEM Management Console of BlackBerry UEM 12.23.0 QF8 and earlier allows Arbitrary File Download and Potential Denial of Service...

CVE-2026-18085 Improper Input Validation Leads to Arbitrary File Download and Potential Denial of Service in BlackBerry UEM

An Improper Input Validation in the BlackBerry UEM Management Console of BlackBerry UEM 12.23.0 QF8 and earlier allows Arbitrary File Download and Potential Denial of Service...

PT-2026-65531

Name of the Vulnerable Software and Affected Versions BlackBerry UEM versions prior to 12.23.0 QF9 Description Improper input validation in the BlackBerry UEM Management Console allows for arbitrary file download and potential denial of service. This occurs when the system fails to properly verif...

CVE-2026-18085: Improper Neutralization of Special Elements in Output Used by a Downstream Component

An Improper Input Validation in the BlackBerry UEM Management Console of BlackBerry UEM 12.23.0 QF8 and earlier allows Arbitrary File Download and Potential Denial of Service...

PT-2026-65530

Name of the Vulnerable Software and Affected Versions BlackBerry UEM versions prior to 12.23.0 QF9 Description Improper neutralization of input during web page generation in the BlackBerry UEM Management Console allows Cross-Site Scripting XSS, a condition where malicious scripts are injected int...