CVE-2019-7386

A Denial of Service issue has been discovered in the Gecko component of KaiOS 2.5 10.05 platform 48.0.a2 on Nokia 8810 4G devices. When a crafted web page is visited with the internal browser, the Gecko process crashes with a segfault. Successful exploitation could lead to the remote code executi...

CVE-2019-7386

CVE-2019-7386 concerns KaiOS 2.5 / Nokia 8810 4G, where the Gecko component may crash (segfault) in the internal browser when loading a crafted page. This can lead to remote code execution on the device, as described in multiple sources referencing KaiOS 2.5 10.05 with platform 48.0.a2. Public de...

KaiOS Gecko Component Denial of Service Vulnerability in Nokia 8810 4G Devices

The Nokia 8810 4G is a generation of banana model phones. A security vulnerability exists in the Gecko component of KaiOS version 2.5 10.05 on Nokia 8810 4G devices. The vulnerability can be exploited by an attacker to execute code or cause a denial of service with the help of a specially crafted...

Nokia 8810 Denial Of Service Exploit

A denial of service issue has been discovered in the Gecko component of KaiOS 2.5 10.05 platform 48.0.a2 on Nokia 8810 4G devices. When a crafted web page is visited with the internal browser, the Gecko process crashes with a segfault. Successful exploitation could lead to the remote code executi...

Nokia 8810 Denial Of Service

===================================================== DoS and gecko reboot in the nokia 8810 4G handset ===================================================== . contents:: Table Of Content Overview ======== Title:- DoS and gecko reboot in the nokia 8810 4G handset Author: Kaustubh G. Padwad CVE ID...

Command execution vulnerability in Bell Optical Cat backend dd***.cgi file

Nokia Bell Shanghai is a company that provides end-to-end information and communication solutions and high-quality services to carrier and non-carrier customers. A command execution vulnerability exists in the dd.cgi file in the background of Bell Fiber Optic Cats, which can be exploited by...

Nokia exposes passwords & secret access keys to its internal systems

By Waqas Another day, another data breach - This time, multinational tech giant Nokia has been caught exposing highly sensitive data of industrial nature that would have put its internal security at risk. The data was discovered by the director of the cyber risk research team at Hacken and...

DEBIAN-CVE-2018-5816

An integer overflow error within the "identify" function internal/dcrawcommon.cpp in LibRaw versions prior to 0.18.12 can be exploited to trigger a division by zero via specially crafted NOKIARAW file Note: This vulnerability is caused due to an incomplete fix of CVE-2018-5804...

RHEL 6 : kernel (RHSA-2018:2390)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2018:2390 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: Modern operating systems implement...

CentOS 6 : kernel (CESA-2018:2390) (Foreshadow)

An update for kernel is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...

platform.innovation.nokia.com XSS vulnerability

Open Bug Bounty ID: OBB-649210 Description| Value ---|--- Affected Website:| platform.innovation.nokia.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

nokia-tuning.net XSS vulnerability

Open Bug Bounty ID: OBB-634730 Description| Value ---|--- Affected Website:| nokia-tuning.net Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

apportal.nokia.com Open Redirect vulnerability

Open Bug Bounty ID: OBB-624192 Description| Value ---|--- Affected Website:| apportal.nokia.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| Open Redirect / CWE-601 CVSSv3 Score:| 3.4...

Nokia VitalQIP Web Client Detection

Binary data vitalqipwebclientdetect.nbin...

Nokia VitalQIP Web Client Default Credentials

The remote device appears to be a Nokia VitalQIP which contains a web interface with default credentials enabled. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid106719; scriptversion"$Revision: 1.1 $"; scriptcvsdate"$Date: 2018/02/09 21:55:16 $";...

search.networks.nokia.com XSS vulnerability

Open Bug Bounty ID: OBB-504006 Description| Value ---|--- Affected Website:| search.networks.nokia.com Open Bug Bounty Program:| Not created yet Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

rctool.ext.net.nokia.com XSS vulnerability

Open Bug Bounty ID: OBB-265890 Description| Value ---|--- Affected Website:| rctool.ext.net.nokia.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

siemens-samsung-nokia.bank-information.info XSS vulnerability

Vulnerable URL: http://siemens-samsung-nokia.bank-information.info/b.php?b=%22%3E%3Cimg%20src=x%20onerror=prompt/OPENBUGBOUNTY/%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank|...

kaufda.de XSS vulnerability

Vulnerable URL: http://www.kaufda.de/Nokia?alert'XSSPOSED'...

Nokia Solutions And Networks Cross-Site Scripting Vulnerability

Nokia Solutions and Networks is a suite of solutions to help mobile networks run multiple services. A cross-site scripting vulnerability exists in Nokia Solutions And Networks, which could be exploited by remote attackers to inject malicious script or HTML code that, when viewed with malicious...