Lucene search
+L

2131 matches found

The Hacker News
The Hacker News
•added 2015/04/17 1:18 a.m.•20 views

Lost Your Phone? Google Search 'Find My Phone' To Locate It

How many of you have an issue to forget your mobile phones? I guess, most of us. Sometimes in our homes, sometimes in our offices, sometimes in our cars and sometimes we even don’t remember the exact place where we left our phones. Now, Finding your phone is as simple as searching something on...

6.7AI score
SaveExploits0
n0where
n0where
•added 2015/01/30 5:49 p.m.•36 views

Nscan: Fast internet-wide scanner

Nscan: Fast internet-wide scanner Nscan is a fast Network scanner optimized for internet-wide scanning purposes and inspired by Masscan and Zmap. It has it’s own tiny TCP/IP stack and uses Raw sockets to send TCP SYN probes. It doesn’t need to set SYN Cookies so it doesn’t wastes time checking if...

6.8AI score
SaveExploits0References1
ThreatPost
ThreatPost
•added 2014/11/05 2:00 p.m.•52 views

Samsung Insists Find My Mobile Service Safe

Samsung this week tried to quell recent reports that its Find My Mobile service is vulnerable to hacking, firing back at NIST National Institute of Standards and Technology who warned last month that the feature could be exploited. In a blog post on the company’s global blog Tuesday, Samsung...

7.8CVSS0.1AI score0.0169EPSS
SaveExploits1References6
myhack58
myhack58
•added 2014/10/29 12:00 a.m.•46 views

The Samsung“find mobile phone Find My Mobile”function the presence of 0Day vulnerabilities-vulnerability warning-the black bar safety net

! The U.S. National Institute of standards and Technology(NIST)to the majority of users warned: Samsung mobile phone“to retrieve mobile phone Find my mobile”function the presence of 0Day vulnerabilities. About the Find My Mobile The Samsung company after modification, to get back phone the Find m...

0.9AI score
SaveExploits0
The Hacker News
The Hacker News
•added 2014/10/27 2:00 a.m.•55 views

Samsung 'Find My Mobile' Flaw Allows Hacker to Remotely Lock Your Device

The National Institute of Standards and Technology NIST is warning users of a newly discovered Zero-Day flaw in the Samsung Find My Mobile service, which fails to validate the sender of a lock-code data received over a network. The Find My Mobile feature implemented by Samsung in their devices is...

7.8CVSS6.9AI score0.0169EPSS
SaveExploits1
Prion
Prion
•added 2014/10/24 10:55 a.m.•27 views

Design/Logic Flaw

The Remote Controls feature on Samsung mobile devices does not validate the source of lock-code data received over a network, which makes it easier for remote attackers to cause a denial of service screen locking with an arbitrary code by triggering unexpected Find My Mobile network traffic...

7.8CVSS7.6AI score0.0169EPSS
SaveExploits1References2
Cvelist
Cvelist
•added 2014/10/24 10:00 a.m.•37 views

CVE-2014-8346

The Remote Controls feature on Samsung mobile devices does not validate the source of lock-code data received over a network, which makes it easier for remote attackers to cause a denial of service screen locking with an arbitrary code by triggering unexpected Find My Mobile network traffic...

7AI score0.0169EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2014/10/24 12:00 a.m.•4 views

CVE-2014-8346: Improper Control of Generation of Code

The Remote Controls feature on Samsung mobile devices does not validate the source of lock-code data received over a network, which makes it easier for remote attackers to cause a denial of service screen locking with an arbitrary code by triggering unexpected Find My Mobile network traffic...

7.8CVSS6AI score0.0169EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
•added 2014/10/20 12:00 a.m.•23 views

Mac OS X < 10.10 Multiple Vulnerabilities (APPLE-SA-2014-10-16-1 OS X Yosemite v10.10)

Binary data 8555.prm...

7.8CVSS7.3AI score0.02871EPSS
SaveExploits6References23
NVD
NVD
•added 2014/10/18 1:55 a.m.•30 views

CVE-2014-4435

The "iCloud Find My Mac" feature in Apple OS X before 10.10 does not properly enforce rate limiting of lost-mode PIN entry, which makes it easier for physically proximate attackers to obtain access via a brute-force attack involving a series of reboots...

4.4CVSS5.8AI score0.00328EPSS
SaveExploits0References5
Prion
Prion
•added 2014/10/18 1:55 a.m.•22 views

Design/Logic Flaw

The "iCloud Find My Mac" feature in Apple OS X before 10.10 does not properly enforce rate limiting of lost-mode PIN entry, which makes it easier for physically proximate attackers to obtain access via a brute-force attack involving a series of reboots...

4.4CVSS6.3AI score0.00328EPSS
SaveExploits0References5Affected Software1
Cvelist
Cvelist
•added 2014/10/18 1:00 a.m.•38 views

CVE-2014-4435

The "iCloud Find My Mac" feature in Apple OS X before 10.10 does not properly enforce rate limiting of lost-mode PIN entry, which makes it easier for physically proximate attackers to obtain access via a brute-force attack involving a series of reboots...

8.4AI score0.00328EPSS
SaveExploits0References5
CVE
CVE
•added 2014/10/18 1:00 a.m.•70 views

CVE-2014-4435

The CVE-2014-4435 entry concerns iCloud Find My Mac on macOS prior to 10.10, where rate limiting on the Lost Mode PIN was not properly enforced, enabling brute‑force access via a series of reboots for users in proximity. Connected sources corroborate that the issue affects macOS OS X pre-10.10 an...

4.4CVSS8.1AI score0.00328EPSS
SaveExploits0References5Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2014/10/18 12:00 a.m.•8 views

CVE-2014-4435: Improper Authentication

The "iCloud Find My Mac" feature in Apple OS X before 10.10 does not properly enforce rate limiting of lost-mode PIN entry, which makes it easier for physically proximate attackers to obtain access via a brute-force attack involving a series of reboots...

4.4CVSS5.7AI score0.00328EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2014/10/17 12:00 a.m.•227 views

Mac OS X < 10.10 Multiple Vulnerabilities (POODLE) (Shellshock)

The remote host is running a version of Mac OS X is prior to version 10.10. This update contains several security-related fixes for the following components : - 802.1X - AFP File Server - apache - App Sandbox - Bash - Bluetooth - Certificate Trust Policy - CFPreferences - CoreStorage - CUPS - Doc...

10CVSS7.6AI score0.99999EPSS
SaveExploits169References54
Prion
Prion
•added 2014/10/16 7:55 p.m.•21 views

Design/Logic Flaw

The Find Color aka com.chudong.color application 1.1.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

5.4CVSS6.4AI score0.00266EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
•added 2014/10/16 7:00 p.m.•33 views

CVE-2014-7023

The Find Color aka com.chudong.color application 1.1.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

5.9AI score0.00266EPSS
SaveExploits0References3
CVE
CVE
•added 2014/10/16 7:00 p.m.•58 views

CVE-2014-7023

CVE-2014-7023 concerns the Android app “Find Color” (package com.chudong.color) version 1.1.1. The vulnerability is that the app does not verify X.509 certificates from SSL servers, which can allow man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certifi...

5.4CVSS6AI score0.00266EPSS
SaveExploits0References3Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2014/10/16 12:00 a.m.•5 views

CVE-2014-7023: Undefined Security Weakness

The Find Color aka com.chudong.color application 1.1.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

5.4CVSS5.8AI score0.00266EPSS
SaveExploits0References2
CVE
CVE
•added 2014/09/23 10:00 a.m.•55 views

CVE-2014-6658

CVE-2014-6658 affects the Apploi Job Search – Find Jobs Android app (v4.19). The issue is failure to verify X.509 certificates from SSL servers, enabling MITM attacks to spoof servers and access sensitive data via crafted certificates. CVSS-derived impact indicates partial confidentiality/integri...

5.4CVSS6AI score0.00271EPSS
SaveExploits0References3Affected Software1
Rows per page
Query Builder