XSS and Content Injection in HTC Windows Mobile SMS Preview PopUp

------------------------------------------------------------------ XSS and Content Injection in HTC Windows Mobile SMS Preview PopUp Date: 22.04.2010 ------------------------------------------------------------------- - Description Windows Mobile shows message previews if configured to do so. Due...

WAP Push SI Impersonation

Security Advisory: Multiple Smartphones SMS Sender Obfuscation via WAP Push SI ------------------------------------------------------------------------------ Discovered by: Michael Mueller a.k.a. c0rnholio Contact: c0rnholio on domain netcologne.de Advisory Homepage:...

MMS Notification Obfuscation

Security Advisory: Multiple Smartphones MMS Notification Sender Obfuscation --------------------------------------------------------------------------- Discovered by: Michael Mueller a.k.a. c0rnholio Contact: c0rnholio on domain netcologne.de Advisory Homepage:...

HTC Touch 3G Windows Mobile/Open Handset Alliance Android SMS远程拒绝服务漏洞

HTC Touch 3G Windows Mobile是一款使用Windows Mobile操作系统的智能手机。Open Handset Alliance Android是一款超过30家科技与移动电话公司所组成的团体开发的免费的移动电话平台。 HTC Touch 3G Windows Mobile/Open Handset Alliance Android不正确处理特殊构建的SMS消息，远程攻击者可以利用漏洞关闭设备的用户接口，使设备从网络中断开，导致拒绝服务攻击。 Microsoft Windows Mobile Professional 6.1 Microsoft Windows...

How to Plan for Smartphone Security in the Enterprise

From eWEEK Chris De Herrera One of the major challenges CIOs face is the deployment and security of smartphones in the enterprise. It’s important for CIOs to assess how their organization should secure the smartphones employees use to access corporate resources. Here, Knowledge Center contributor...

HTC Windows Mobile OBEX FTP Service - Directory Traversal

HTC Windows Mobile OBEX FTP Service - Directory Traversal I shall complete the information related to Bugtraq ID: 33359 Title: HTC / Windows Mobile OBEX FTP Service Directory Traversal Author: Alberto Moreno Tablado Vendor: HTC Vulnerable Products: - HTC devices running Windows Mobile 6 - HTC...

HTC / Windows Mobile OBEX FTP Service - Directory Traversal

I shall complete the information related to Bugtraq ID: 33359 Title: HTC / Windows Mobile OBEX FTP Service Directory Traversal Author: Alberto Moreno Tablado Vendor: HTC Vulnerable Products: - HTC devices running Windows Mobile 6 - HTC devices running Windows Mobile 6.1 Non vulnerable products: -...

HTC / Windows Mobile OBEX FTP Service Directory Traversal Vuln

Exploit for hardware platform in category remote exploits ============================================================== HTC / Windows Mobile OBEX FTP Service Directory Traversal Vuln ============================================================== I shall complete the information related to Bugtra...

HTC / Windows Mobile OBEX FTP Service Directory Traversal Vuln

No description provided by source. I shall complete the information related to Bugtraq ID: 33359 Title: HTC / Windows Mobile OBEX FTP Service Directory Traversal Author: Alberto Moreno Tablado Vendor: HTC Vulnerable Products: - HTC devices running Windows Mobile 6 - HTC devices running Windows...

HTC / Windows Mobile OBEX FTP Traversal

I shall complete the information related to Bugtraq ID: 33359 Title: HTC / Windows Mobile OBEX FTP Service Directory Traversal Author: Alberto Moreno Tablado Vendor: HTC Vulnerable Products: - HTC devices running Windows Mobile 6 - HTC devices running Windows Mobile 6.1 Non vulnerable products: -...

Pwn2Own hacker: Safari is 'easy pickings'

Charlie Miller right, the security researcher who won last year’s Pwn2Own hacker contest, is predicting that Apple’s Safari browser will be the easiest target this year. In a note posted on the popular Daily Dave mailing list, Miller describes Safari as “easy pickin’s” and forecasts that at least...

Pwn2Own 2009: Browsers and smart phones are targets

TippingPoint’s Zero Day Initiative has released the rules for this year’s CanSecWest PWN2OWN contest, which will target unpatched flaws in Web browsers and mobile devices. Among the target list this year: Microsoft’s Internet Explorer 8, Apple’s Safari, Google’s Chrome, Windows Mobile, Google...

Fedora Update for odccm FEDORA-2008-0680

Check for the Version of odccm OpenVAS Vulnerability Test Fedora Update for odccm FEDORA-2008-0680 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms ...

Microsoft Windows Mobile OBEX FTP服务目录遍历漏洞

BUGTRAQ ID: 33359 Windows Mobile是微软开发的用于手机等移动设备的操作系统。 大多数Windows Mobile操作系统都捆绑的Microsoft蓝牙栈，OBEX FTP是蓝牙栈中最常见的服务。 可使用OBEX FTP蓝牙服务通过蓝牙共享文件。通常该服务配置为仅共享特定的目录，用户可在该目录放置所有希望共享的文件。默认的目录为My Device\My Documents\Bluetooth Share。 OBEX...

CVE-2009-0244

Directory traversal vulnerability in the OBEX FTP Service in the Microsoft Bluetooth stack in Windows Mobile 6 Professional, and probably Windows Mobile 5.0 for Pocket PC and 5.0 for Pocket PC Phone Edition, allows remote authenticated users to list arbitrary directories, and create or read...

CVE-2009-0244

Directory traversal vulnerability in the OBEX FTP Service in the Microsoft Bluetooth stack in Windows Mobile 6 Professional, and probably Windows Mobile 5.0 for Pocket PC and 5.0 for Pocket PC Phone Edition, allows remote authenticated users to list arbitrary directories, and create or read...

Directory traversal

Directory traversal vulnerability in the OBEX FTP Service in the Microsoft Bluetooth stack in Windows Mobile 6 Professional, and probably Windows Mobile 5.0 for Pocket PC and 5.0 for Pocket PC Phone Edition, allows remote authenticated users to list arbitrary directories, and create or read...

CVE-2009-0244

CVE-2009-0244 affects the OBEX FTP Service in the Microsoft Bluetooth stack on Windows Mobile 6 Professional, with probable impact on Windows Mobile 5.0 for Pocket PC and related editions. The vulnerability is a directory traversal via the ".." path segment that lets remote authenticated users li...

CVE-2009-0244

Directory traversal vulnerability in the OBEX FTP Service in the Microsoft Bluetooth stack in Windows Mobile 6 Professional, and probably Windows Mobile 5.0 for Pocket PC and 5.0 for Pocket PC Phone Edition, allows remote authenticated users to list arbitrary directories, and create or read...

Microsoft Bluetooth Directory Traversal

Title: Microsoft Bluetooth Stack OBEX Directory Traversal Author: Alberto Moreno Tablado Vendor: Microsoft Vulnerable Products: Windows Mobile 6 Professional Probably Windows Mobile 5.0 for Pocket PC Probably Windows Mobile 6 Classic Probably Windows Mobile 5.0 for Pocket PC Phone Edition Probabl...