EIP-2026-101305

This is a detailed writeup describing a directory traversal vulnerability in HTC Windows Mobile devices running OBEX FTP Service over Bluetooth. It explains how an authenticated attacker can traverse directories, read/write arbitrary files, and achieve code execution by uploading files to the Startup folder.