Lucene search
+L

2341 matches found

n0where
n0where
•added 2015/01/30 5:49 p.m.•36 views

Nscan: Fast internet-wide scanner

Nscan: Fast internet-wide scanner Nscan is a fast Network scanner optimized for internet-wide scanning purposes and inspired by Masscan and Zmap. It has it’s own tiny TCP/IP stack and uses Raw sockets to send TCP SYN probes. It doesn’t need to set SYN Cookies so it doesn’t wastes time checking if...

6.8AI score
SaveExploits0References1
ThreatPost
ThreatPost
•added 2014/11/05 2:00 p.m.•52 views

Samsung Insists Find My Mobile Service Safe

Samsung this week tried to quell recent reports that its Find My Mobile service is vulnerable to hacking, firing back at NIST National Institute of Standards and Technology who warned last month that the feature could be exploited. In a blog post on the company’s global blog Tuesday, Samsung...

7.8CVSS0.1AI score0.0169EPSS
SaveExploits1References6
myhack58
myhack58
•added 2014/10/29 12:00 a.m.•46 views

The Samsung“find mobile phone Find My Mobile”function the presence of 0Day vulnerabilities-vulnerability warning-the black bar safety net

! The U.S. National Institute of standards and Technology(NIST)to the majority of users warned: Samsung mobile phone“to retrieve mobile phone Find my mobile”function the presence of 0Day vulnerabilities. About the Find My Mobile The Samsung company after modification, to get back phone the Find m...

0.9AI score
SaveExploits0
The Hacker News
The Hacker News
•added 2014/10/27 2:00 a.m.•56 views

Samsung 'Find My Mobile' Flaw Allows Hacker to Remotely Lock Your Device

The National Institute of Standards and Technology NIST is warning users of a newly discovered Zero-Day flaw in the Samsung Find My Mobile service, which fails to validate the sender of a lock-code data received over a network. The Find My Mobile feature implemented by Samsung in their devices is...

7.8CVSS6.9AI score0.0169EPSS
SaveExploits1
Prion
Prion
•added 2014/10/24 10:55 a.m.•27 views

Design/Logic Flaw

The Remote Controls feature on Samsung mobile devices does not validate the source of lock-code data received over a network, which makes it easier for remote attackers to cause a denial of service screen locking with an arbitrary code by triggering unexpected Find My Mobile network traffic...

7.8CVSS7.6AI score0.0169EPSS
SaveExploits1References2
Cvelist
Cvelist
•added 2014/10/24 10:00 a.m.•37 views

CVE-2014-8346

The Remote Controls feature on Samsung mobile devices does not validate the source of lock-code data received over a network, which makes it easier for remote attackers to cause a denial of service screen locking with an arbitrary code by triggering unexpected Find My Mobile network traffic...

7AI score0.0169EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2014/10/24 12:00 a.m.•2 views

PT-2014-8480

Name of the Vulnerable Software and Affected Versions Samsung mobile devices affected versions not specified Description The issue concerns the Remote Controls feature on Samsung mobile devices, which fails to validate the source of lock-code data received over a network. This makes it easier for...

7.8CVSS0.0169EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2014/10/24 12:00 a.m.•4 views

CVE-2014-8346: Improper Control of Generation of Code

The Remote Controls feature on Samsung mobile devices does not validate the source of lock-code data received over a network, which makes it easier for remote attackers to cause a denial of service screen locking with an arbitrary code by triggering unexpected Find My Mobile network traffic...

7.8CVSS6AI score0.0169EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
•added 2014/10/20 12:00 a.m.•23 views

Mac OS X < 10.10 Multiple Vulnerabilities (APPLE-SA-2014-10-16-1 OS X Yosemite v10.10)

Binary data 8555.prm...

7.8CVSS7.3AI score0.02871EPSS
SaveExploits6References23
NVD
NVD
•added 2014/10/18 1:55 a.m.•30 views

CVE-2014-4435

The "iCloud Find My Mac" feature in Apple OS X before 10.10 does not properly enforce rate limiting of lost-mode PIN entry, which makes it easier for physically proximate attackers to obtain access via a brute-force attack involving a series of reboots...

4.4CVSS5.8AI score0.00328EPSS
SaveExploits0References5
Prion
Prion
•added 2014/10/18 1:55 a.m.•22 views

Design/Logic Flaw

The "iCloud Find My Mac" feature in Apple OS X before 10.10 does not properly enforce rate limiting of lost-mode PIN entry, which makes it easier for physically proximate attackers to obtain access via a brute-force attack involving a series of reboots...

4.4CVSS6.3AI score0.00328EPSS
SaveExploits0References5Affected Software1
Cvelist
Cvelist
•added 2014/10/18 1:00 a.m.•38 views

CVE-2014-4435

The "iCloud Find My Mac" feature in Apple OS X before 10.10 does not properly enforce rate limiting of lost-mode PIN entry, which makes it easier for physically proximate attackers to obtain access via a brute-force attack involving a series of reboots...

8.4AI score0.00328EPSS
SaveExploits0References5
CVE
CVE
•added 2014/10/18 1:00 a.m.•71 views

CVE-2014-4435

The CVE-2014-4435 entry concerns iCloud Find My Mac on macOS prior to 10.10, where rate limiting on the Lost Mode PIN was not properly enforced, enabling brute‑force access via a series of reboots for users in proximity. Connected sources corroborate that the issue affects macOS OS X pre-10.10 an...

4.4CVSS8.1AI score0.00328EPSS
SaveExploits0References5Affected Software1
Positive Technologies
Positive Technologies
•added 2014/10/18 12:00 a.m.•6 views

PT-2014-5898

Name of the Vulnerable Software and Affected Versions Apple OS X versions prior to 10.10 Description The issue concerns the "iCloud Find My Mac" feature, which does not properly enforce rate limiting of lost-mode PIN entry. This makes it easier for physically proximate attackers to obtain access...

4.4CVSS0.00328EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2014/10/18 12:00 a.m.•10 views

CVE-2014-4435: Improper Authentication

The "iCloud Find My Mac" feature in Apple OS X before 10.10 does not properly enforce rate limiting of lost-mode PIN entry, which makes it easier for physically proximate attackers to obtain access via a brute-force attack involving a series of reboots...

4.4CVSS5.7AI score0.00328EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2014/10/17 12:00 a.m.•227 views

Mac OS X < 10.10 Multiple Vulnerabilities (POODLE) (Shellshock)

The remote host is running a version of Mac OS X is prior to version 10.10. This update contains several security-related fixes for the following components : - 802.1X - AFP File Server - apache - App Sandbox - Bash - Bluetooth - Certificate Trust Policy - CFPreferences - CoreStorage - CUPS - Doc...

10CVSS7.6AI score0.99999EPSS
SaveExploits170References54
Prion
Prion
•added 2014/10/16 7:55 p.m.•21 views

Design/Logic Flaw

The Find Color aka com.chudong.color application 1.1.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

5.4CVSS6.4AI score0.00266EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
•added 2014/10/16 7:00 p.m.•33 views

CVE-2014-7023

The Find Color aka com.chudong.color application 1.1.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

5.9AI score0.00266EPSS
SaveExploits0References3
CVE
CVE
•added 2014/10/16 7:00 p.m.•58 views

CVE-2014-7023

CVE-2014-7023 concerns the Android app “Find Color” (package com.chudong.color) version 1.1.1. The vulnerability is that the app does not verify X.509 certificates from SSL servers, which can allow man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certifi...

5.4CVSS6AI score0.00266EPSS
SaveExploits0References3Affected Software1
Positive Technologies
Positive Technologies
•added 2014/10/16 12:00 a.m.•3 views

PT-2014-7698

Name of the Vulnerable Software and Affected Versions Find Color aka com.chudong.color application version 1.1.1 Description The issue allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate because the application does not verify X.509...

5.4CVSS0.00266EPSS
SaveExploits0References4
Rows per page
Query Builder