FMD Android

FMD Android SMS, 인스턴트 메신저 또는 웹 인터페이스FMD Server를 통해 기기를 찾을 수 있습니다. FMD를 이용하면 기기를 분실했을 때 위치 확인, 벨 울리기, 데이터 초기화 및 기타 명령을 실행할 수 있습니다. Google의 내 기기 찾기에 대한 안전한 오픈 소스 대안을 목표로 합니다. 왜? 지난주에 새 휴대폰을 잃어버렸습니다. Google 서비스를 사용했다면 더 쉽게 찾을 수 있었을 텐데요. 왜 아무도 개인정보를 포기하지 않고 분실 기기를 찾을 수 있는 오픈 소스 애플리케이션을 만들지 않았을까요? FMD...

whisperpair-poc-tool

WhisperPair-PoC-Tool と研究 CVE-2025-36911 と Google Fast Pair エコシステムのセキュリティ脆弱性の詳細分析 ブログ記事 エグゼクティブサマリー Google Fast Pair は、Bluetooth ペアリングをシームレスにするために設計されました。通知をタップするだけで接続完了です。しかし、そのシームレスな体験がセキュリティ上の負債になったらどうなるでしょうか？ WhisperPair-PoC-Tool は、何百万もの Bluetooth アクセサリに影響を与える2つの重大な脆弱性クラス（不正なペアリングバイパスと Find My...

ibrute

업데이트 클라우드 저장소 보안에 대해 우려하신다면 내가 클라우드였다면?을 읽고 피드백을 남겨 주세요. 감사합니다. 재미의 끝, Apple이 방금 패치했습니다. 여기 appleID 비밀번호 무차별 대입 p0c가 있습니다. 이것은 p0c일 뿐이므로 다음 기능은 없습니다. MultiThreading멀티스레딩 기능 Save-State-On-Exception예외 시 상태 저장 기능 직접 만들어 보세요. Find My Iphone 서비스 API를 사용하며, 여기에는 무차별 대입 방지 기능이 구현되어 있지 않습니다. 비밀번호 목록은...

openhaystack

OpenHaystack OpenHaystack is a framework for tracking personal Bluetooth devices via Apple's massive Find My network. Use it to create your own tracking tags that you can append to physical objects keyrings, backpacks, ... or integrate it into other Bluetooth-capable devices such as notebooks...

CVE-2026-47219

A flaw was found in find-my-way, a routing module for Node.js. A remote attacker could exploit this vulnerability when find-my-way is used with Node's HTTP/2 server. By sending specially crafted HTTP/2 method values, an attacker can cause the application to crash, leading to a Denial of Service...

CLSA-2026-1785291246 TuxCare security update for find-my-way (1 CVE)

TuxCare rebuilt find-my-way to address 1 CVE. Fixed in 9.6.0-tuxcare.1...

CVE-2026-47219

find-my-way is a framework-independent HTTP router that internally uses a Radix Tree and supports route parameters and wildcards. Versions prior to 9.7.0 are vulnerable to remotely triggerable DoS in find-my-way when it is used with Node's HTTP/2 server. The lookup function passes req.method into...

CVE-2026-47219 find-my-way is Vulnerable to DDoS with HTTP2

find-my-way is a framework-independent HTTP router that internally uses a Radix Tree and supports route parameters and wildcards. Versions prior to 9.7.0 are vulnerable to remotely triggerable DoS in find-my-way when it is used with Node's HTTP/2 server. The lookup function passes req.method into...

CVE-2026-47219 find-my-way is Vulnerable to DDoS with HTTP2

find-my-way is a framework-independent HTTP router that internally uses a Radix Tree and supports route parameters and wildcards. Versions prior to 9.7.0 are vulnerable to remotely triggerable DoS in find-my-way when it is used with Node's HTTP/2 server. The lookup function passes req.method into...

CVE-2026-47219

find-my-way is a framework-independent HTTP router that internally uses a Radix Tree and supports route parameters and wildcards. Versions prior to 9.7.0 are vulnerable to remotely triggerable DoS in find-my-way when it is used with Node's HTTP/2 server. The lookup function passes req.method into...

EUVD-2026-50084

find-my-way is a framework-independent HTTP router that internally uses a Radix Tree and supports route parameters and wildcards. Versions prior to 9.7.0 are vulnerable to remotely triggerable DoS in find-my-way when it is used with Node's HTTP/2 server. The lookup function passes req.method into...

CVE-2026-47219

CVE-2026-47219 : The vulnerability affects the find-my-way HTTP router. Versions before 9.7.0 are susceptible to remotely triggerable DoS when used with Node's HTTP/2 server. The issue arises because lookup() passes req.method to find(), and find() indexes this.trees[method]. Since this.trees is ...

@depup/prisma (7.9.0-depup.0), @depup/prisma__dev (0.24.14-depup.40) +22 more potentially affected by CVE-2026-47219 via find-my-way (>=9.3.0, <=9.6.0)

find-my-way NPM version =9.3.0, =1.0.3-alpha.0b30e6d.0, =11.1.11, =7.8.0-lossless.12, =7.8.0-lossless.16, =0.1.4, =0.2.2, =1.10.0, =11.1.0, =0.7.0, =0.8.0 and more Source cves: CVE-2026-47219 Source advisory: SNYK:JS-FINDMYWAY-18313040...

NPM: find-my-way: DDoS with HTTP2

NPM: find-my-way: DDoS with HTTP2 vulnerability discovered by ? in WordPress Npm find-my-way versions = 9.6.0...

@depup/prisma (7.9.0-depup.0), @depup/prisma__dev (0.24.14-depup.40) +22 more potentially affected by CVE-2026-47219 via find-my-way (>=9.3.0, <=9.6.0)

find-my-way NPM version =9.3.0, =1.0.3-alpha.0b30e6d.0, =11.1.11, =7.8.0-lossless.12, =7.8.0-lossless.16, =0.1.4, =0.2.2, =1.10.0, =11.1.0, =0.7.0, =0.8.0 and more Source cves: CVE-2026-47219 Source advisory: OSV:GHSA-C96F-X56V-GQ3H...

GHSA-C96F-X56V-GQ3H find-my-way: DDoS with HTTP2

Impact Remotely triggerable DoS in find-my-way when it is used with Node's HTTP/2 server. The short version is that lookup passes req.method into find, and find indexes this.treesmethod. Since this.trees is a normal object, HTTP/2 method values like constructor, toString, or proto can resolve...

find-my-way: DDoS with HTTP2

Impact Remotely triggerable DoS in find-my-way when it is used with Node's HTTP/2 server. The short version is that lookup passes req.method into find, and find indexes this.treesmethod. Since this.trees is a normal object, HTTP/2 method values like constructor, toString, or proto can resolve...

PT-2026-64211

Name of the Vulnerable Software and Affected Versions find-my-way versions prior to 9.7.0 Description A remotely triggerable Denial of Service DoS exists when the software is used with Node's HTTP/2 server. The lookup function passes the req.method variable into the find function, which then...

CVE-2025-68640

The Apple Find My backend service through 2025-12-17 allows an attacker in possession of a valid PET Private Endpoint Token to enumerate devices and remove offline devices from an Apple ID account without triggering two-factor authentication or ownership verification. This may result in...

CVE-2025-68640

CVE-2025-68640 affects Apple's Find My backend service (through 2025-12-17). With a valid Private Endpoint Token (PET), an attacker can enumerate devices linked to an Apple ID and remove offline devices without triggering two‑factor authentication or ownership verification, potentially leading to...