CVE-2010-4549

IBM Lotus Notes Traveler before 8.5.1.3 on the Nokia s60 device successfully performs a Replace Data operation for a prohibited application, which allows remote authenticated users to bypass intended access restrictions via this operation...

CVE-2009-5035

The Nokia client in IBM Lotus Notes Traveler before 8.5.0.2 does not properly handle multiple outgoing e-mail messages between sync operations, which might allow remote attackers to read communications intended for other recipients by examining appended messages...

CVE-2009-5035

The Nokia client in IBM Lotus Notes Traveler before 8.5.0.2 does not properly handle multiple outgoing e-mail messages between sync operations, which might allow remote attackers to read communications intended for other recipients by examining appended messages...

Design/Logic Flaw

IBM Lotus Notes Traveler before 8.5.1.3 on the Nokia s60 device successfully performs a Replace Data operation for a prohibited application, which allows remote authenticated users to bypass intended access restrictions via this operation...

Design/Logic Flaw

The Nokia client in IBM Lotus Notes Traveler before 8.5.0.2 does not properly handle multiple outgoing e-mail messages between sync operations, which might allow remote attackers to read communications intended for other recipients by examining appended messages...

CVE-2009-5035

The Nokia client in IBM Lotus Notes Traveler before 8.5.0.2 does not properly handle multiple outgoing e-mail messages between sync operations, which might allow remote attackers to read communications intended for other recipients by examining appended messages...

CVE-2010-4549

IBM Lotus Notes Traveler before 8.5.1.3 on the Nokia s60 device successfully performs a Replace Data operation for a prohibited application, which allows remote authenticated users to bypass intended access restrictions via this operation...

CVE-2010-4549

CVE-2010-4549 affects IBM Lotus Notes Traveler prior to version 8.5.1.3 on Nokia S60 devices. The issue is a logic/authorization problem where a Replace Data operation can target a prohibited application, enabling remote authenticated users to bypass intended access restrictions. Public exploitat...

Injecting Fake Updates: Evilgrade

Evilgrade is a modular framework that allows the user to take advantage of poor upgrade implementations by injecting fake updates. It comes with pre-made binaries agents, a working default configuration for fast pentests, and has it’s own WebServer and DNSServer modules. Easy to set up new...

Nokia Content Copier 3.0 Hijacking Exploit

Exploit for windows platform in category local exploits ========================================== Nokia Content Copier 3.0 Hijacking Exploit ========================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\...

Nokia Text Message Editor Dll Hijacking Exploit

Exploit for windows platform in category local exploits =============================================== Nokia Text Message Editor Dll Hijacking Exploit =============================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ ...

Nokia Pc Duite 6.81.13.0 Dll Hijacking Exploit

Exploit for windows platform in category local exploits ============================================== Nokia Pc Duite 6.81.13.0 Dll Hijacking Exploit ============================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0...

Nokia Music Manager Dll Hijacking Exploit

Exploit for windows platform in category local exploits ========================================= Nokia Music Manager Dll Hijacking Exploit ========================================= 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ ...

Zeus Variant Targets Mobile Online Banking Apps

Researchers have discovered a variant of the Zeus bot malware that specifically targets users who perform online-banking operations from the mobile phones, playing on the increasingly common use of SMS-based one-time passwords in order to dupe users into loading the malware. The attack begins wit...

Nokia E72 smartphone protection bypass

Keyboard is not locked during password validation...

[DCA-00016 - Nokia E72 Keyboard Password bypass]

DCA-00016 - Nokia E72 Keyboard Password bypass Software/Hardware - Nokia E72 Vendor Product Description - Nokia E72 is a high-performance device tailor-made for seamless business and personal communication. Bug Description - The Nokia E72 keyboard lock have a delay to validate the password and on...

QtWeb Browser version 3.3 build 043 Insecure DLL Hijacking Vulnerability (wintab32.dll)

OVERVIEW The QtWeb Browser application is vulnerable to Insecure DLL Hijacking Vulnerability. Similar terms that describe this vulnerability have been come up with Remote Binary Planting, and Insecure DLL Loading/Injection/Hijacking/Preloading. 2. PRODUCT DESCRIPTION QtWeb Browser is a...

Fedora 12 : qt-4.6.3-8.fc12 (2010-11020)

This is an update to the latest stable bugfix qt release, including several security fixes related to qtwebkit. For details, see also: http://qt.nokia.com/about/news/nokia-releases-qt-4.6.3 http://qt.nokia.com/developer/changes/changes-4.6.3 Note that Tenable Network Security has extracted the...

Nokia Multimedia Player 1.1 (.npl) Local Stack Overflow POC

Exploit for unknown platform in category local exploits =========================================================== Nokia Multimedia Player 1.1 .npl Local Stack Overflow POC ===========================================================...

CanSecWest Pwn2Own Hacker Contest Targets Smartphones

The organizers of this year’s CanSecWest Pwn2Own have painted a big bulls-eye on mobile devices, offering up an whopping $60,000 in prizes to entice hackers to exploit vulnerabilities on iPhones, Android, Nokia and BlackBerry smartphones. At Pwn2Own 2010, which takes place in Vancouver on March 2...