AIM Detection

An AIM Python library is installed on the remote host. Note that Nessus has relied upon on the application's self-reported version number. %NASLMINLEVEL 80900 C Tenable, Inc. include'xcompat.inc'; if description scriptid208127; scriptversion"1.5";...

io.jenkins.plugins:postgresql-fingerprint-storage (>=187.v17a_cb_a_f9e24a, <=199.v418d2b_8039e0), io.jenkins.plugins:testkube-cli (>=70.v22942b_4b_46a_e, <=97.va_4b_ca_24f8306) +3 more potentially affected by CVE-2024-47805 via org.jenkins-ci.plugins:credentials (1309.v8835d63eb_d8a)

org.jenkins-ci.plugins:credentials MAVEN version 1309.v8835d63ebd8a is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:credentials and may be impacted: - io.jenkins.plugins:postgresql-fingerprint-storage =187.v17acbaf9e24a,...

FIDO2 redirection in Chrome and Edge doesn't work

https://docs.citrix.com/en-us/citrix-virtual-apps-desktops/secure/fido2.htmllocal-authorization-and-virtual-authentication-using-fido2-and-webauthn was followed. However devices which use Fido2 such as fingerprint readers and YubiKey devices are not detected in the browser,...

TeamViewer 15.51 < 15.54 Improper Fingerprint Validation (tv-2024-1004)

The version of TeamViewer Client installed on the remote MacOS host is between 15.51 and 15.53. It is, therefore, affected by an improper fingerprint validation vulnerability. It could allow a local attacker with administrative user rights to further elevate privileges e.g. to root via executable...

TeamViewer 15.48 < 15.54 Improper Fingerprint Validation (tv-2024-1004)

The version of TeamViewer Client installed on the remote Windows host is between 15.48 and 15.53. It is, therefore, affected by an improper fingerprint validation vulnerability. It could allow a local attacker with administrative user rights to further elevate privileges e.g. to SYSTEM via...

CVE-2024-37770

14Finger v1.1 was discovered to contain a remote command execution RCE vulnerability in the fingerprint function. This vulnerability allows attackers to execute arbitrary commands via a crafted payload...

CVE-2024-37770

14Finger v1.1 was discovered to contain a remote command execution RCE vulnerability in the fingerprint function. This vulnerability allows attackers to execute arbitrary commands via a crafted payload...

CVE-2024-37770

The 14Finger digital fingerprint collection utility (v1.1) contains a Remote Command Execution (RCE) vulnerability within its fingerprint function. The root cause is improper code generation where the application concatenates a URL into a CMD string and passes it to the Python subprocess module f...

CVE-2024-37770: Improper Control of Generation of Code

14Finger v1.1 was discovered to contain a remote command execution RCE vulnerability in the fingerprint function. This vulnerability allows attackers to execute arbitrary commands via a crafted payload...

CVE-2024-37770

14Finger v1.1 was discovered to contain a remote command execution RCE vulnerability in the fingerprint function. This vulnerability allows attackers to execute arbitrary commands via a crafted payload...

14Finger Security Vulnerability

14Finger is a full-featured Web fingerprint recognition and sharing platform by b1ackc4t individual developers. A security vulnerability exists in version 1.1 of 14Finger, which stems from a vulnerability that allows an attacker to elevate privileges from a regular user to an administrator via a...

PT-2024-27742 · 14Finger · 14Finger

Name of the Vulnerable Software and Affected Versions: 14Finger version 1.1 Description: The issue is related to a remote command execution RCE vulnerability in the fingerprint function. This vulnerability allows attackers to execute arbitrary commands via a crafted payload. Recommendations: For...

14Finger Security Vulnerability

14Finger is a full-featured Web fingerprint recognition and sharing platform by b1ackc4t individual developers. A security vulnerability exists in 14Finger version 1.1, which stems from the /api/admin/user component that allows an attacker to access all user information via a crafted GET request...

Malicious code in gen-agent-fingerprint (PyPI)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-5171 Malicious code in gen-agent-fingerprint (PyPI)

--- -= Per source details. Do not edit below this line.=-...

UBUNTU-CVE-2024-27850

This issue was addressed with improvements to the noise injection algorithm. This issue is fixed in Safari 17.5, iOS 17.5 and iPadOS 17.5, macOS Sonoma 14.5, visionOS 1.2. A maliciously crafted webpage may be able to fingerprint the user...

Apple iOS and iPadOS Security Vulnerabilities

Apple iOS and Apple iPadOS are products of Apple Inc. Apple iOS is an operating system developed for mobile devices, and Apple iPadOS is an operating system for the iPad tablet computer. A security vulnerability exists in Apple iOS version 17.5 and iPadOS version 17.5, which originates from a...

Apple iOS and iPadOS Security Vulnerabilities

Apple iOS and Apple iPadOS are products of Apple Inc. Apple iOS is an operating system developed for mobile devices, and Apple iPadOS is an operating system for the iPad tablet computer. A security vulnerability exists in Apple iOS version 17.5 and iPadOS version 17.5, which originates from a...

fprintd Security Vulnerabilities

fprintd is a D-Bus service access fingerprint reader open-sourced by libfprint. A security vulnerability exists in fprintd version 1.94.3 and earlier versions, which stems from the lack of a security attention mechanism...

CVE-2024-31682

Incorrect access control in the fingerprint authentication mechanism of Phone Cleaner: Boost & Clean v2.2.0 allows attackers to bypass fingerprint authentication due to the use of a deprecated API...