792 matches found
CVE-2010-1040
The "IP address range limitation" function in OpenPNE 1.6 through 1.8, 2.0 through 2.8, 2.10 through 2.14, and 3.0 through 3.4, when mobile device support is enabled, allows remote attackers to bypass the "simple login" functionality via unknown vectors related to spoofing...
CVE-2010-1040
OpenPNE contains an authentication bypass vulnerability related to the IP address range limitation function when mobile device support is enabled. The flaw in the IP address range limitation may allow remote attackers to bypass the simple login feature, potentially enabling access to or modificat...
Pwn2Own Predictions: Apple iPhone Will Fall
Hackers at this year’s CanSecWest Pwn2Own contest will definitely break into an Apple iPhone by exploiting a remote code execution vulnerability. That’s the prediction from Charlie Miller and Aaron Portnoy, two security researchers who are monitoring events leading to next week’s hacker challenge...
Palm Pre WebOS <=1.1 Remote File Access Vulnerability
I. Description The Palm Pre WebOS =1.1 suffers from a JavaScript injection attack that allows a malicious attacker to access any file on the mobile device. Palm has patched this vulnerability and all users are recommended to upgrade to WebOS version 1.2+. Palm WebOS 1.2 patch information can be...
Palm Pre WebOS <=1.1 Remote File Access Vulnerability
I. Description The Palm Pre WebOS =1.1 suffers from a JavaScript injection attack that allows a malicious attacker to access any file on the mobile device. Palm has patched this vulnerability and all users are recommended to upgrade to WebOS version 1.2+. Palm WebOS 1.2 patch information can be...
Palm Pre WebOS <=1.1 Remote File Access Vulnerability
Exploit for unknown platform in category remote exploits ===================================================== Palm Pre WebOS =1.1 Remote File Access Vulnerability ===================================================== Title: Palm Pre WebOS =1.1 Remote File Access Vulnerability CVE-ID: OSVDB-ID:...
New Security Standards for Mobile Payments Coming
From SC Magazine Angela Moscaritolo A financial services technology group is developing standards for making secure mobile payment transactions. The goal of the project, an effort of the Financial Services Technology Consortium FSTC, is to develop standards and processes so that banking customers...
Opentaps ERP + CRM service detection
The remote host is running Opentaps ERP + CRM. opentaps is a full-featured ERP + CRM suite which incorporates several open source projects, including Apache Geronimo, Tomcat, and OFBiz for the data model and transaction framework; Pentaho and JasperReports for business intelligence; Funambol for...
Opentaps ERP + CRM Detection
The remote host is running Opentaps ERP + CRM. Opentaps is a full-featured ERP + CRM suite which incorporates several open source projects, including: - Apache Geronimo, Tomcat, and OFBiz for the data model and transaction framework - Pentaho and JasperReports for business intelligence - Funambol...
Mobile security can no longer be ignored
By Paul F. Roberts, The 451 Group Starting this week at the annual CanSecWest conference in Vancouver, British Columbia, some of the world’s best hackers will crack their knuckles and get to work on a different kind of problem: hacking mobile devices including Apple’s über popular iPhone. The...
SYMSA-2007-012: Microsoft Windows CE IGMP Denial of Service
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Symantec Vulnerability Research http://www.symantec.com/research Security Advisory Advisory ID: SYMSA-2007-012 Advisory Title: Microsoft Windows CE IGMP Denial of Service Author: Ollie Whitehouse / [email protected] Release Date: 22-10-2007...
