236 matches found
GHSA-C96F-X56V-GQ3H find-my-way: DDoS with HTTP2
Impact Remotely triggerable DoS in find-my-way when it is used with Node's HTTP/2 server. The short version is that lookup passes req.method into find, and find indexes this.treesmethod. Since this.trees is a normal object, HTTP/2 method values like constructor, toString, or proto can resolve...
find-my-way: DDoS with HTTP2
Impact Remotely triggerable DoS in find-my-way when it is used with Node's HTTP/2 server. The short version is that lookup passes req.method into find, and find indexes this.treesmethod. Since this.trees is a normal object, HTTP/2 method values like constructor, toString, or proto can resolve...
NPM: find-my-way: DDoS with HTTP2
NPM: find-my-way: DDoS with HTTP2 vulnerability discovered by ? in WordPress Npm find-my-way versions = 9.6.0...
CVE-2025-68640
The Apple Find My backend service through 2025-12-17 allows an attacker in possession of a valid PET Private Endpoint Token to enumerate devices and remove offline devices from an Apple ID account without triggering two-factor authentication or ownership verification. This may result in...
CVE-2025-68640
The Apple Find My backend service through 2025-12-17 allows an attacker in possession of a valid PET Private Endpoint Token to enumerate devices and remove offline devices from an Apple ID account without triggering two-factor authentication or ownership verification. This may result in...
CVE-2025-68640
CVE-2025-68640 affects Apple's Find My backend service (through 2025-12-17). With a valid Private Endpoint Token (PET), an attacker can enumerate devices linked to an Apple ID and remove offline devices without triggering two‑factor authentication or ownership verification, potentially leading to...
A Relay a Day Keeps the AirTag Away: Practical Relay Attacks on Apple's AirTags
Apple AirTags use Apple's Find My network: when nearby iDevices detect a lost tag, they anonymously forward an encrypted location report to Apple, which the tag's owner can then fetch to locate the item. That encryption protects privacy -- neither the finder nor Apple learns the owner's identity ...
Exploit for CVE-2025-36911
WhisperPair-PoC-Tool and Research A deep dive into CVE-2025-3...
CVE-2022-33707
Improper identifier creation logic in Find My Mobile prior to version 7.2.24.12 allows attacker to identify the device...
Stolen iPhones are locked tight, until scammers phish your Apple ID credentials
One of the reassuring things about owning an iPhone was knowing you could lock it if it got lost or stolen. Without your passcode, fingerprint or face to unlock it, it would be useless to anyone else. Now, though, some phone thieves have found a workaround, not by breaking Apple's security, but b...
One stolen iPhone uncovered a network smuggling thousands of devices to China
If you think Apple's 'Find My' feature was just there to help you locate your phone when it slipped down the side of the couch, think again. It turns out this service also helps law enforcement capture criminals. The original "Find My iPhone" was introduced in 2010 as a feature on the iPhone. It...
EUVD-2018-15958
Malware in sbrugna...
EUVD-2010-1796
Malware in sbrugna...
EUVD-2018-19702
Malware in sbrugna...
EUVD-2021-17721
Malware in sbrugna...
EUVD-2014-8184
Malware in sbrugna...
EUVD-2014-4362
Malware in sbrugna...
EUVD-2016-8488
Malware in sbrugna...