SMA-DB 0.3.13 - Multiple Remote File Inclusions

SMA-DB 0.3.13 Multiple Remote File Inclusion Vulnerabilities bug found by Jose Luis Gongora Fernandez a.k.a JosS contact: sys-projectathotmail.com website: http://www.hack0wn.com/ - download: http://bluevirus.ch/media/downloads/SMA-DBv0.3.13.zip - about SMA-DB: Written in PHP4: SMA-DB is a Databa...

[SECURITY] Fedora 8 Update: synce-kpm-0.11-3.fc8

SynCE-KPM stands for SynCE KDE PDA Manager and aims to be an application to manage WM5/WM6 PDA devices from Linux...

CVE-2007-2592: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in Nokia Intellisync Mobile Suite 6.4.31.2, 6.6.0.107, and 6.6.2.2, possibly involving Novell Groupwise Mobile Server and Nokia Intellisync Wireless Email Express, allow remote attackers to inject arbitrary web script or HTML via the 1 username...

CRYPTOCard CRYPTO-Server本地信息泄露漏洞

CryptoCard是一款允许在PDA上存储敏感信息的应用程序。 CryptoCard存在设计错误，本地攻击者可以利用漏洞获得敏感信息。 目前没有详细漏洞细节提供。 CRYPTOCard CRYPTO-Server 6.4 CRYPTOCard CRYPTO-Server 6.3 升级到CRYPTOCard 6.4.56版本： http://www.cryptocard.com/...

CVE-2005-4771: Undefined Security Weakness

Trusted Mobility Agent PC Policy in Trust Digital Trusted Mobility Suite provides a cancel button that bypasses the domain-authentication prompt, which allows local users to sync a handheld PDA device despite a policy setting that sync is unauthorized...

CVE-2005-4152

Soti Pocket Controller-Professional 5.0 allows remote attackers to turn off, reboot, or hard reset a PDA via a series of initialization, command, and reset packets sent to port 5492...

CVE-2005-4152

Soti Pocket Controller-Professional 5.0 allows remote attackers to turn off, reboot, or hard reset a PDA via a series of initialization, command, and reset packets sent to port 5492...

CVE-2005-4152

CVE-2005-4152 affects Soti Pocket Controller-Professional 5.0. Remote attackers could turn off, reboot, or hard reset a PDA by sending initialization/command/reset packets to TCP port 5492. Impact is denial of service and potential device unavailability. Root cause involves handling of specific p...

Pocket Controller PDA control utility unauthorized access

It's possible to perform all actions, including hard reset without authentication...

Trusted Mobility Suite PDA access protection bypass

It's possible to synchronize with device regradless of warnings...

CVE-2002-1975

The CVE-2002-1975 entry applies to Sharp Zaurus PDA models SL-5000D and SL-5500. The vulnerability arises from using a fixed salt value "A0" to encrypt the screen-locking password stored in Security.conf, which enables local attackers to more easily brute-force the password. Reported details from...

CVE-2002-1975

Sharp Zaurus PDA SL-5000D and SL-5500 uses a salt of "A0" to encrypt the screen-locking password as stored in the Security.conf file, which makes it easier for local users to guess the password via brute force methods...

CVE-2002-1975: Inadequate Encryption Strength

Sharp Zaurus PDA SL-5000D and SL-5500 uses a salt of "A0" to encrypt the screen-locking password as stored in the Security.conf file, which makes it easier for local users to guess the password via brute force methods...

NotifyLink contains multiple SQL injection vulnerabilities

Overview There are multiple vulnerabilities in NotifyLink that allow unauthenticated remote users to view or modify the contents of the NotifyLink SQL database. Possible modifications include the addition of unauthorized user and administrator accounts. Description Notify Technology NotifyLink...

NotifyLink server provides inadequate protection for cryptographic key material

Overview The NotifyLink key exchange protocol contains a vulnerability that significantly reduces the strength of cryptographic keys used to encrypt mail messages. Description Notify Technology NotifyLink Enterprise Server allows users to synchronize e-mail between a PDA and a mail server. The...

Zaurus PDA FTP Server Unpassworded root Account

The remote Zaurus FTP server can be accessed as the user 'root' with no password. An attacker may use this flaw to steal or modify the content of your PDA, including but not limited to your address book, personal files, and list of appointments. C Tenable Network Security, Inc. Script audit and...

CVE-2001-1005

CVE-2001-1005 affects Starfish Truesync Desktop 2.0b used on the REX 5000 PDA. The underlying issue is weak encryption used to store the user password in a registry key, enabling an attacker with registry access to decrypt the password and gain privileges. NVD lists CVSSv2 base score 7.5 (HIGH) w...

CVE-2001-1007

CVE-2001-1007 affects Starfish Truesync Desktop 2.0b as used on the REX 5000 PDA. The vulnerability arises from a small keyspace for device keys and the absence of a delay on incorrect keys, enabling faster brute-force guessing of the key. The NVD entry lists a MEDIUM base score (5.0/10) with net...

CVE-2001-1006

Starfish Truesync Desktop 2.0b on the REX 5000 PDA stores sensitive files unencrypted and relies solely on password protection, enabling read access via another application. The CVE-2001-1006 entry notes lack of encryption with partial confidentiality impact, network‑level access, and no integrit...

CVE-2001-1007

Starfish Truesync Desktop 2.0b as used on the REX 5000 PDA uses a small keyspace for device keys and does not impose a delay when an incorrect key is entered, which allows attackers to more quickly guess the key via a brute force attack...