Important: Red Hat Security Advisory: kernel-rt security and bug fix update

An update for kernel-rt is now available for Red Hat Enterprise Linux 9.0 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available f...

z10-berkheim.de Cross Site Scripting vulnerability OBB-3038389

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Important: Red Hat Security Advisory: kernel-rt security and bug fix update

An update for kernel-rt is now available for Red Hat Enterprise Linux 8.4 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available f...

BlackBerry Z10 authentication bypass

Authentication bypass via SMB...

CVE-2014-2388

The Storage and Access service in BlackBerry OS 10.x before 10.2.1.1925 on Q5, Q10, Z10, and Z30 devices does not enforce the password requirement for SMB filesystem access, which allows context-dependent attackers to read arbitrary files via 1 a session over a Wi-Fi network or 2 a session over a...

BlackBerry Z10 Authentication Bypass Vulnerability

BlackBerry Z10 suffers from a storage and access file-exchange authentication bypass vulnerability. BlackBerry Z10 Authentication Bypass Vulnerability --------------------------------------------------------------------- --------------------------------------------------------------------- 1...

Authentication Bypass Bug Fixed in BlackBerry Z10

There’s a remotely exploitable authentication bypass vulnerability in the BlackBerry Z10 phone that affects the service that lets users share files with machines on a wireless network. The bug could allow an attacker to steal users’ personal data or hit them with targeted malware. The Z10 is one ...

BlackBerry Updates Products Affected by Heartbleed

BlackBerry issued an advisory today that updates are available for all of its products affected by the Heartbleed OpenSSL vulnerability. The mobile device maker said that it is not aware of any exploits targeting BlackBerry products. BlackBerry Messenger BBM for Android and iPhone, as well as...

Blackberry Z10 buffer overflow

qconndoor service buffer overflow...

BlackBerry Z 10 - Buffer Overflow in qconnDoor [MZ-13-05]

--------------------------------------------------------------------- modzero Security Advisory: BlackBerry Z 10 - Buffer Overflow in qconnDoor MZ-13-05 --------------------------------------------------------------------- --------------------------------------------------------------------- 1...

CVE-2014-2389

Stack-based buffer overflow in a certain decryption function in qconnDoor on BlackBerry Z10 devices with software 10.1.0.2312, when developer-mode has been previously enabled, allows remote attackers to execute arbitrary code via a crafted packet in a TCP session on a wireless network...

Stack overflow

Stack-based buffer overflow in a certain decryption function in qconnDoor on BlackBerry Z10 devices with software 10.1.0.2312, when developer-mode has been previously enabled, allows remote attackers to execute arbitrary code via a crafted packet in a TCP session on a wireless network...

CVE-2014-2389

Stack-based buffer overflow in a certain decryption function in qconnDoor on BlackBerry Z10 devices with software 10.1.0.2312, when developer-mode has been previously enabled, allows remote attackers to execute arbitrary code via a crafted packet in a TCP session on a wireless network...

CVE-2014-2389

CVE-2014-2389 affects the BlackBerry Z10 qconnDoor service. A stack-based buffer overflow in the AES decryption path can be triggered by a crafted AES payload in certain qconnDoor messages, allowing a remote attacker to potentially execute arbitrary code via a crafted packet in a wireless TCP ses...

BlackBerry Z10 qconnDoor服务报文AES加密处理远程缓冲区溢出漏洞

CVE ID:CVE-2014-2389 BlackBerry Z10是黑莓智能手机运行的操作系统。 BlackBerry Z10 qconnDoor服务存在溢出漏洞，当用户提交的特制报文中，包含对数据负载进行AES加密的命令代码时，通过指定非法的加解密负载长度时可触发该漏洞，允许攻击者利用漏洞使应用程序崩溃或可执行任意代码。 0 BlackBerry Z10 10.1.0.2312 目前厂商已经发布了升级补丁以修复漏洞，请下载使用： http://www.blackberry.com/btsc/KB35816...

BlackBerry Z 10 Buffer Overflow Vulnerability

BlackBerry Z 10 suffers from a remotely exploitable buffer overflow in qconnDoor. BlackBerry Z 10 Buffer Overflow Vulnerability 1. Timeline --------------------------------------------------------------------- 2013-06-23: Vendor has been contacted. 2013-06-24: Vendor response. 2013-06-27: Vendor...

BlackBerry Releases Security Advisory

BlackBerry has released a security advisory that addresses Adobe® Flash® remote code execution vulnerabilities that affect BlackBerry® Z10, BlackBerry® Q10 smartphone and BlackBerry® PlayBook™ tablet customers. These vulnerabilities could potentially allow an attacker to execute code with the...

BlackBerry Patches Security Flaws in Z10, Q10, PlayBook

BlackBerry climbed aboard the Patch Tuesday bandwagon today with four advisories patching vulnerabilities in Adobe Flash, Webkit and libexif on the company’s mobile devices. Adrian Stone, director of BlackBerry’s security incident response and threat analysis, said the company is not aware of any...

CVE-2013-3692

BlackBerry 10 OS before 10.0.10.648 on BlackBerry Z10 smartphones uses weak permissions for a BlackBerry Protect object, which allows physically proximate attackers to bypass intended access restrictions by leveraging a user's BlackBerry Protect password-reset request and a user's installation of...

CVE-2013-3692

BlackBerry 10 OS before 10.0.10.648 on BlackBerry Z10 smartphones uses weak permissions for a BlackBerry Protect object, which allows physically proximate attackers to bypass intended access restrictions by leveraging a user's BlackBerry Protect password-reset request and a user's installation of...