What You Should Know About Voilà, the Latest Viral Selfie App

Before you use it to cartoonify your face, consider the risks to your data...

SQL Injection Vulnerability in Hanvon's Face Recognition Attendance Management System

Ltd. is committed to the research and application of intelligent interaction technology in multiple fields. A SQL injection vulnerability exists in Hanvon's face recognition attendance management system. An attacker can exploit the vulnerability to obtain sensitive database information...

Shenzhen Jieshun Technology Industry Co., Ltd. Y10A-T Face Access Control with Logic Flaw Vulnerability

Y10A-T face access control is a face recognition access control product widely used in commercial buildings, parks, communities, equipped with cameras, with face recognition door opening function of the access control system. Shenzhen Jieshun Technology Industry Co., Ltd Y10A-T face access contro...

Unauthorized Access Vulnerability in the Human Evidence Rubik's Cube Management System

Human ID Magic is a citizen's personal information approval software, using advanced face recognition count and fingerprint comparison technology, can be directly in the field to quickly compare the real person with the side of the document information, real-time uploading database, to provide...

SQL Injection Vulnerability in Human Evidence Rubik's Cube Management System

Human ID Magic is a citizen's personal information approval software, using advanced face recognition count and fingerprint comparison technology, can be directly in the field to quickly compare the real person with the side of the document information, real-time uploading database, to provide...

The vulnerability in the implementation of the GenerateFaceMask function of the Camera component in Android operating systems allows a hacker to escalate their privileges.

The vulnerability of the GenerateFaceMask function in the Camera component of Android operating systems lies in the writing of data beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to gain increased privileges...

SQL Injection Vulnerability in Hanvon Face Attendance Management System (CNVD-2021-29069)

Founded in 1998, Hanvon Technology Co., Ltd. is a pioneer in researching, developing, applying and promoting multi-intelligent human-computer interaction technologies and products with the support of key projects such as the Eighth Five-Year Plan, the Ninth Five-Year Plan, the 863 Project, and th...

CVE-2021-0465

In GenerateFaceMask of face.cc, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroi...

CVE-2020-28221

A CWE-20: Improper Input Validation vulnerability exists in EcoStruxure™ Operator Terminal Expert and Pro-face BLUE version details in the notification that could cause arbitrary code execution when the Ethernet Download feature is enable on the HMI...

CVE-2020-28221

A CWE-20: Improper Input Validation vulnerability exists in EcoStruxure™ Operator Terminal Expert and Pro-face BLUE version details in the notification that could cause arbitrary code execution when the Ethernet Download feature is enable on the HMI...

Input validation

A CWE-20: Improper Input Validation vulnerability exists in EcoStruxure™ Operator Terminal Expert and Pro-face BLUE version details in the notification that could cause arbitrary code execution when the Ethernet Download feature is enable on the HMI...

CVE-2020-28221

CVE-2020-28221 is an improper input validation (CWE-20) vulnerability in EcoStruxure™ Operator Terminal Expert and Pro-face BLUE. The issue could allow arbitrary code execution when the Ethernet Download feature is enabled on the HMI. The provided sources identify the affected products but do not...

CVE-2020-28221

A CWE-20: Improper Input Validation vulnerability exists in EcoStruxure™ Operator Terminal Expert and Pro-face BLUE version details in the notification that could cause arbitrary code execution when the Ethernet Download feature is enable on the HMI...

CVE-2020-28221: Improper Input Validation

A CWE-20: Improper Input Validation vulnerability exists in EcoStruxure™ Operator Terminal Expert and Pro-face BLUE version details in the notification that could cause arbitrary code execution when the Ethernet Download feature is enable on the HMI...

A Site Published Every Face From Parler's Capitol Riot Videos

Faces of the Riot used open source software to detect, extract, and deduplicate every face from the 827 videos taken from the insurrection on January 6...

OSV-2018-226 Heap-buffer-overflow in pcf_get_encodings

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=9561 Crash type: Heap-buffer-overflow READ 1 Crash state: pcfgetencodings pcfloadfont PCFFaceInit...

SQL Injection Vulnerability in Hanvon Face Attendance Management System

Ltd. was founded in 1998. As a pioneer in the domestic artificial intelligence industry, Hanvon Technology has been dedicated to the research and application of intelligent interaction technology in multiple fields for more than 20 years. A SQL injection vulnerability exists in Hanvon's Face...

Credential-Stuffing Attack Hits The North Face

The North Face has reset its customers’ passwords after attackers launched a credential-stuffing attack against the popular outdoor outfitter’s website. In a recent data-breach notification, the company told customers that it was alerted to “unusual activity involving its website,”...

Fitbit Spyware Steals Personal Data via Watch Face

A wide-open app-building API would allow an attacker to build a malicious application that could access Fitbit user data, and send it to any server. Kev Breen, director of cyber threat research for Immersive Labs, created a proof-of-concept for just that scenario, after realizing that Fitbit...

face-h.eu Cross Site Scripting vulnerability OBB-1349605

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...