Lucene search
+L

8203 matches found

OSV
OSV
added 2020/12/07 1:15 p.m.9 views

CVE-2020-5799

The Eat Spray Love mobile app for both iOS and Android contains a backdoor account that, when modified, allowed privileged access to restricted functionality and to other users' data...

9.8CVSS7.3AI score0.01234EPSS
SaveExploits1References1
NVD
NVD
added 2020/12/07 1:15 p.m.21 views

CVE-2020-5799

The Eat Spray Love mobile app for both iOS and Android contains a backdoor account that, when modified, allowed privileged access to restricted functionality and to other users' data...

9.8CVSS8.8AI score0.01234EPSS
SaveExploits1References1
Prion
Prion
added 2020/12/07 1:15 p.m.18 views

Design/Logic Flaw

The Eat Spray Love mobile app for both iOS and Android contains a backdoor account that, when modified, allowed privileged access to restricted functionality and to other users' data...

7.5CVSS8.5AI score0.01234EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
added 2020/12/07 12:40 p.m.32 views

CVE-2020-5799

The Eat Spray Love mobile app for both iOS and Android contains a backdoor account that, when modified, allowed privileged access to restricted functionality and to other users' data...

8.9AI score0.01234EPSS
SaveExploits1References1
CVE
CVE
added 2020/12/07 12:40 p.m.55 views

CVE-2020-5799

The CVE-2020-5799 entry concerns the Eat Spray Love mobile app for iOS and Android, where a backdoor account could be modified to grant privileged access to restricted functionality and to other users’ data. The issue is described consistently across sources as a backdoor account weakness, not a ...

9.8CVSS8.6AI score0.01234EPSS
SaveExploits1References1Affected Software1
CNNVD
CNNVD
added 2020/12/07 12:00 a.m.15 views

Mark Goldstein Eat Spray Love Security Breach

Mark Goldstein Eat Spray Love is a mobile app about fitness by Mark Goldstein personal developer. A security vulnerability exists in the Eat Spray Love mobile app, which stems from the inclusion of a backdoor account that, when modified, could allow a user privileged access to restricted features...

9.8CVSS7.3AI score0.01234EPSS
SaveExploits1References2
The Hacker News
The Hacker News
added 2020/12/04 8:06 a.m.43 views

Hackers-For-Hire Group Develops New 'PowerPepper' In-Memory Malware

Cybersecurity researchers on Thursday disclosed details of a previously undiscovered in-memory Windows backdoor developed by a hacker-for-hire operation that can execute remotely malicious code and steal sensitive information from its targets in Asia, Europe, and the US. Dubbed "PowerPepper" by...

0.7AI score
SaveExploits0
The Hacker News
The Hacker News
added 2020/12/04 8:06 a.m.9 views

Hackers-For-Hire Group Develops New 'PowerPepper' In-Memory Malware

Cybersecurity researchers on Thursday disclosed details of a previously undiscovered in-memory Windows backdoor developed by a hacker-for-hire operation that can execute remotely malicious code and steal sensitive information from its targets in Asia, Europe, and the US. Dubbed "PowerPepper" by...

5.8AI score
SaveExploits0
ThreatPost
ThreatPost
added 2020/12/03 5:20 p.m.86 views

DeathStalker APT Spices Things Up with PowerPepper Malware

The DeathStalker advanced persistent threat APT group has a hot new weapon: A highly stealthy backdoor that researchers have dubbed PowerPepper, used to spy on targeted systems. DeathStalker offers mercenary, espionage-for-hire services targeting the financial and legal sectors, according to...

7.8AI score
SaveExploits0References5
ThreatPost
ThreatPost
added 2020/12/02 6:06 p.m.51 views

Turla's 'Crutch' Backdoor Leverages Dropbox in Espionage Attacks

Researchers have discovered a previously undocumented backdoor and document stealer, which they have linked to the Russian-speaking Turla advanced persistent threat APT espionage group. The malware, which researchers call “Crutch,” is able to bypass security measures by abusing legitimate tools –...

7.4AI score
SaveExploits0References10
The Hacker News
The Hacker News
added 2020/12/02 12:08 p.m.44 views

Experts Uncover 'Crutch' Russian Malware Used in APT Attacks for 5 Years

Cybersecurity researchers today took the wraps off a previously undocumented backdoor and document stealer that has been deployed against specific targets from 2015 to early 2020. Codenamed "Crutch" by ESET researchers, the malware has been attributed to Turla aka Venomous Bear or Snake, a...

7.3AI score
SaveExploits0
The Hacker News
The Hacker News
added 2020/12/02 12:08 p.m.9 views

Experts Uncover 'Crutch' Russian Malware Used in APT Attacks for 5 Years

Cybersecurity researchers today took the wraps off a previously undocumented backdoor and document stealer that has been deployed against specific targets from 2015 to early 2020. Codenamed "Crutch" by ESET researchers, the malware has been attributed to Turla aka Venomous Bear or Snake, a...

5.8AI score
SaveExploits0
VulnCheck KEV
VulnCheck KEV
added 2020/12/01 12:00 a.m.15 views

VulnCheck KEV: CVE-2017-8224

Wireless IP Camera P2P WIFICAM devices have a backdoor root account that can be accessed with TELNET...

10CVSS7.3AI score0.08655EPSS
SaveExploits4References1
NVD
NVD
added 2020/11/30 6:15 p.m.21 views

CVE-2020-29392

The Estil Hill Lock Password Manager Safe app 2.3 for iOS has a 06 backdoor password. An attacker with physical access can unlock the password manager without knowing the master password set by the user...

4.6CVSS4.5AI score0.00414EPSS
SaveExploits1References1
OSV
OSV
added 2020/11/30 6:15 p.m.7 views

CVE-2020-29392

The Estil Hill Lock Password Manager Safe app 2.3 for iOS has a 06 backdoor password. An attacker with physical access can unlock the password manager without knowing the master password set by the user...

4.6CVSS5.8AI score0.00414EPSS
SaveExploits1References1
Prion
Prion
added 2020/11/30 6:15 p.m.24 views

Default credentials

The Estil Hill Lock Password Manager Safe app 2.3 for iOS has a 06 backdoor password. An attacker with physical access can unlock the password manager without knowing the master password set by the user...

2.1CVSS4.5AI score0.00414EPSS
SaveExploits1References1Affected Software1
CVE
CVE
added 2020/11/30 5:58 p.m.49 views

CVE-2020-29392

CVE-2020-29392 affects the Estil Hill Lock Password Manager Safe app 2.3 for iOS. A #06# backdoor password allows an attacker with physical access to unlock the password manager without the user’s master password. The connected Red Hat/NVD records repeat the same description; no explicit remediat...

4.6CVSS4.4AI score0.00414EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
added 2020/11/30 5:58 p.m.35 views

CVE-2020-29392

The Estil Hill Lock Password Manager Safe app 2.3 for iOS has a 06 backdoor password. An attacker with physical access can unlock the password manager without knowing the master password set by the user...

4.5AI score0.00414EPSS
SaveExploits1References1
ThreatPost
ThreatPost
added 2020/11/30 5:52 p.m.138 views

MacOS Users Targeted By OceanLotus Backdoor

A macOS backdoor variant has been uncovered that relies of multi-stage payloads and various updated anti-detection techniques. Researchers linked it to the OceanLotus advanced persistent threat APT group. The Vietnam-backed OceanLotus also known as APT 32 has been around since at least 2013, and...

0.2AI score
SaveExploits0References9
CNNVD
CNNVD
added 2020/11/30 12:00 a.m.15 views

Estil Hill Lock Password Manager Safe app Security Breach

Estil Hill Lock Password Manager Safe App For IOS is a software for centralized security management of device application passwords from the individual developer Estill Hill. A security vulnerability exists in the Estil Hill Lock Password Manager Safe app version 2.3 for ios, which stems from the...

4.6CVSS5.8AI score0.00414EPSS
SaveExploits1References2
Rows per page
Query Builder