CVE-2010-4549

CVE-2010-4549 affects IBM Lotus Notes Traveler prior to version 8.5.1.3 on Nokia S60 devices. The issue is a logic/authorization problem where a Replace Data operation can target a prohibited application, enabling remote authenticated users to bypass intended access restrictions. Public exploitat...

Injecting Fake Updates: Evilgrade

Evilgrade is a modular framework that allows the user to take advantage of poor upgrade implementations by injecting fake updates. It comes with pre-made binaries agents, a working default configuration for fast pentests, and has it’s own WebServer and DNSServer modules. Easy to set up new...

Nokia Content Copier 3.0 Hijacking Exploit

Exploit for windows platform in category local exploits ========================================== Nokia Content Copier 3.0 Hijacking Exploit ========================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\...

Nokia Pc Duite 6.81.13.0 Dll Hijacking Exploit

Exploit for windows platform in category local exploits ============================================== Nokia Pc Duite 6.81.13.0 Dll Hijacking Exploit ============================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0...

Nokia Text Message Editor Dll Hijacking Exploit

Exploit for windows platform in category local exploits =============================================== Nokia Text Message Editor Dll Hijacking Exploit =============================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ ...

Nokia Music Manager Dll Hijacking Exploit

Exploit for windows platform in category local exploits ========================================= Nokia Music Manager Dll Hijacking Exploit ========================================= 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ ...

Zeus Variant Targets Mobile Online Banking Apps

Researchers have discovered a variant of the Zeus bot malware that specifically targets users who perform online-banking operations from the mobile phones, playing on the increasingly common use of SMS-based one-time passwords in order to dupe users into loading the malware. The attack begins wit...

[DCA-00016 - Nokia E72 Keyboard Password bypass]

DCA-00016 - Nokia E72 Keyboard Password bypass Software/Hardware - Nokia E72 Vendor Product Description - Nokia E72 is a high-performance device tailor-made for seamless business and personal communication. Bug Description - The Nokia E72 keyboard lock have a delay to validate the password and on...

Nokia E72 smartphone protection bypass

Keyboard is not locked during password validation...

QtWeb Browser version 3.3 build 043 Insecure DLL Hijacking Vulnerability (wintab32.dll)

OVERVIEW The QtWeb Browser application is vulnerable to Insecure DLL Hijacking Vulnerability. Similar terms that describe this vulnerability have been come up with Remote Binary Planting, and Insecure DLL Loading/Injection/Hijacking/Preloading. 2. PRODUCT DESCRIPTION QtWeb Browser is a...

Fedora 12 : qt-4.6.3-8.fc12 (2010-11020)

This is an update to the latest stable bugfix qt release, including several security fixes related to qtwebkit. For details, see also: http://qt.nokia.com/about/news/nokia-releases-qt-4.6.3 http://qt.nokia.com/developer/changes/changes-4.6.3 Note that Tenable Network Security has extracted the...

Nokia Multimedia Player 1.1 (.npl) Local Stack Overflow POC

Exploit for unknown platform in category local exploits =========================================================== Nokia Multimedia Player 1.1 .npl Local Stack Overflow POC ===========================================================...

CanSecWest Pwn2Own Hacker Contest Targets Smartphones

The organizers of this year’s CanSecWest Pwn2Own have painted a big bulls-eye on mobile devices, offering up an whopping $60,000 in prizes to entice hackers to exploit vulnerabilities on iPhones, Android, Nokia and BlackBerry smartphones. At Pwn2Own 2010, which takes place in Vancouver on March 2...

Nokia Symbian OS 3rd Edition - Multiple Web Browser Vulnerabilities

Nokia Symbian OS 3rd Edition - Multiple Web Browser Vulnerabilities My name is Nishant Das Patnaik, an independent security researcher from India. I have discovered multiple vulnerabilities in the Web Browser of the high end smartphones manufactured by Nokia running Symbian OS 3rd Edition. The...

Nokia Symbian OS 3rd Edition - Multiple Web Browser Vulnerabilities

My name is Nishant Das Patnaik, an independent security researcher from India. I have discovered multiple vulnerabilities in the Web Browser of the high end smartphones manufactured by Nokia running Symbian OS 3rd Edition. The detailed vulnerability disclosures along with tested PoCs have been...

Nokia Symbian S60v3 web browser DoS Exploits

Exploit for unknown platform in category dos / poc ============================================ Nokia Symbian S60v3 web browser DoS Exploits ============================================ This archive has six denial of service exploits that affect the Nokia Symbian S60v3 web browser. Exploits:...

Multiple Web Browser Vulnerabilities in Nokia Symbian OS 3rd Edition

Exploit for unknown platform in category dos / poc ==================================================================== Multiple Web Browser Vulnerabilities in Nokia Symbian OS 3rd Edition ==================================================================== My name is Nishant Das Patnaik, an...

Nokia Application Installer 6.81.13.0 DLL Hijacking Exploit

Exploit for windows platform in category local exploits =========================================================== Nokia Application Installer 6.81.13.0 DLL Hijacking Exploit ===========================================================...

iPhone, Android, Others Get Man in the Middle Treatment

Security researchers have released a paper detailing successful man-in-the-middle attacks against several smartphones. The SSL enabled log in sessions on the tested, Nokia N95, HTC Tilt, Android G1 and iPhone 3GS devices was sniffed using the publicly available SSLstrip tool, with the attack taki...

Mandrake Security Advisory MDVSA-2009:225 (qt4)

The remote host is missing an update to qt4 announced via advisory MDVSA-2009:225. OpenVAS Vulnerability Test $Id: mdksa2009225.nasl 6573 2017-07-06 13:10:50Z cfischer $ Description: Auto-generated from advisory MDVSA-2009:225 qt4 Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...