CVE-2023-48050: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in Cams Biometrics Zkteco, eSSL, Cams Biometrics Integration Module with HR Attendance aka odoo-biometric-attendance v. 13.0 through 16.0.1 allows a remote attacker to execute arbitrary code and to gain privileges via the db parameter in the controllers/controllers.py...

ZKTeco ZKBio Time Security Vulnerability

ZKTeco ZKBio Time is a powerful web-based time and attendance management software from China-based ZKTeco. Cams Biometrics Zkteco, eSSL, Cams Biometrics Integration Module with HR Attendance A security vulnerability exists in versions 13.0 through 16.0.1, which stems from an SQL injection...

CVE-2023-48050

CVE-2023-48050 affects Cams Biometrics Zkteco, eSSL, and the odoo-biometric-attendance integration module (HR Attendance) versions 13.0–16.0.1. The vulnerability is a SQL injection in controllers/controllers.py accessed via the db parameter, enabling remote code execution and privilege gain. Root...

CVE-2023-48050

SQL injection vulnerability in Cams Biometrics Zkteco, eSSL, Cams Biometrics Integration Module with HR Attendance aka odoo-biometric-attendance v. 13.0 through 16.0.1 allows a remote attacker to execute arbitrary code and to gain privileges via the db parameter in the controllers/controllers.py...

PT-2023-30680 · Unknown +1 · Cams Biometrics Zkteco +3

Name of the Vulnerable Software and Affected Versions: Cams Biometrics Zkteco, eSSL, Cams Biometrics Integration Module with HR Attendance aka odoo-biometric-attendance versions 13.0 through 16.0.1 Description: The issue allows a remote attacker to execute arbitrary code and gain privileges via t...

Google Introduces Passwordless Secure Sign-In with Passkeys for Google Accounts

Almost five months after Google added support for passkeys to its Chrome browser, the tech giant has begun rolling out the passwordless solution across Google Accounts on all platforms. Passkeys, backed by the FIDO Alliance, are a more secure way to sign in to apps and websites without having to...

SAMSUNG Pass 安全漏洞

SAMSUNG Pass is a secure and easy way to log in to websites and applications on cell phones using biometrics from Samsung South Korea. A security vulnerability exists in SAMSUNG Pass versions prior to 4.0.06.7, which stems from incorrect access control. An attacker could exploit the vulnerability...

SAMSUNG Pass 安全漏洞

SAMSUNG Pass is a secure and easy way to log in to websites and applications on cell phones using biometrics from Samsung South Korea. A security vulnerability exists in SAMSUNG Pass versions prior to 4.0.06.1, which stems from improper checking and handling of exceptions. An attacker could explo...

Adobe Acrobat DC (Continuous) Security Update (APSB21-29) - Windows

Adobe Acrobat DC Continuous Track is prone to multiple vulnerabilities. Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free...

CVE-2021-3718

A denial of service vulnerability was reported in some ThinkPad models that could cause a system to crash when the Enhanced Biometrics setting is enabled in BIOS...

CVE-2021-3718

A denial of service vulnerability was reported in some ThinkPad models that could cause a system to crash when the Enhanced Biometrics setting is enabled in BIOS...

Denial of service

A denial of service vulnerability was reported in some ThinkPad models that could cause a system to crash when the Enhanced Biometrics setting is enabled in BIOS...

CVE-2021-3718

A denial of service vulnerability was reported in some ThinkPad models that could cause a system to crash when the Enhanced Biometrics setting is enabled in BIOS...

CVE-2021-3718

CVE-2021-3718 describes a denial-of-service issue in some ThinkPad systems where enabling the Enhanced Biometrics BIOS setting can cause the machine to crash. Public details indicate the impact is availability (system crash) with a physical attack vector and no user interaction required per NVD m...

CVE-2021-3718

A denial of service vulnerability was reported in some ThinkPad models that could cause a system to crash when the Enhanced Biometrics setting is enabled in BIOS...

CVE-2021-3718: Improper Handling of Undefined Values

A denial of service vulnerability was reported in some ThinkPad models that could cause a system to crash when the Enhanced Biometrics setting is enabled in BIOS...

Lenovo ThinkPad 安全漏洞

Lenovo ThinkPad is a portable computer from Lenovo, a Chinese company. The ThinkPad suffers from a security vulnerability that stems from the fact that when the Enhanced Biometrics setting is enabled in the BIOS, the vulnerability could cause the system to crash...

Facebook to Shut Down Facial Recognition System and Delete Billions of Records

Facebook's newly-rebranded parent company Meta on Tuesday announced plans to discontinue its decade-old "Face Recognition" system and delete a massive trove of more than a billion users' facial recognition templates as part of a wider initiative to limit the use of the technology across its...

The vulnerability of the “ASSaD-ID” biometrics system’s software lies in the improper restriction on XML links to external objects, which allows a perpetrator to carry out an SSRF attack.

The vulnerability of the “ASSaD-ID” biometrics system’s software is related to incorrect restrictions on XML links to external objects. Exploiting this vulnerability allows a malicious actor to execute an SSRF attack and execute arbitrary code within the system...

Securing mobile devices. A timely reminder

While home working might now be the norm for some, more and more people are going back to their place of work on a more regular basis. If you’re commuting again or if you’re responsible for securing your people’s devices it’s a good idea to revisit and review your security admin for mobile device...