AppLock - Fingerprint - Customized SSL, Dangerous filesystem permissions, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application AppLock - Fingerprint published at the 'play' market has multiple vulnerabilities...

On the Dangers of Skyping and Typing, Fingerprint Warrants, and More

Mike Mimoso and Chris Brook briefly talk about the Dyn DDoS attack and the Linux bug Dirty Cow before discussing the dangers of Skyping and typing, the fingerprint warrant story, hiding credit card numbers in images, and more. Show notes: Dyn Confirms DDoS Attack Affecting Twitter, Github, Many...

Android Fingerprint Login Feature Vulnerable

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA. There is a security vulnerability in the Android fingerprint login feature. An attacker in close physical proximity can exploit the vulnerability to authorize as an arbitrary user...

CVE-2016-3917

The fingerprint login feature in Android 6.0.1 before 2016-10-01 and 7.0 before 2016-10-01 does not track the user account during the authentication process, which allows physically proximate attackers to authenticate as an arbitrary user by leveraging lockscreen access, aka internal bug 30744668...

CVE-2016-3917

The fingerprint login feature in Android 6.0.1 before 2016-10-01 and 7.0 before 2016-10-01 does not track the user account during the authentication process, which allows physically proximate attackers to authenticate as an arbitrary user by leveraging lockscreen access, aka internal bug 30744668...

Authentication flaw

The fingerprint login feature in Android 6.0.1 before 2016-10-01 and 7.0 before 2016-10-01 does not track the user account during the authentication process, which allows physically proximate attackers to authenticate as an arbitrary user by leveraging lockscreen access, aka internal bug 30744668...

CVE-2016-3917

The fingerprint login feature in Android 6.0.1 before 2016-10-01 and 7.0 before 2016-10-01 does not track the user account during the authentication process, which allows physically proximate attackers to authenticate as an arbitrary user by leveraging lockscreen access, aka internal bug 30744668...

UBUNTU-CVE-2016-3917

The fingerprint login feature in Android 6.0.1 before 2016-10-01 and 7.0 before 2016-10-01 does not track the user account during the authentication process, which allows physically proximate attackers to authenticate as an arbitrary user by leveraging lockscreen access, aka internal bug 30744668...

CVE-2016-3917

CVE-2016-3917 affects Android fingerprint login on 6.0.1 and 7.0 before 2016-10-01. The root cause is that the fingerprint authentication process does not track the active user, allowing a physically proximate attacker with lockscreen access to authenticate as another user. Exploitation is local;...

CVE-2016-3917

The fingerprint login feature in Android 6.0.1 before 2016-10-01 and 7.0 before 2016-10-01 does not track the user account during the authentication process, which allows physically proximate attackers to authenticate as an arbitrary user by leveraging lockscreen access, aka internal bug 30744668...

CVE-2016-7142

The msasl module in InspIRCd before 2.0.23, when used with a service that supports SASLEXTERNAL authentication, allows remote attackers to spoof certificate fingerprints and consequently log in as another user via a crafted SASL message...

Hmap Web-Server Fingerprint Tool

A reconnaissance tool is designed to gather information from servers. Such scans might indicate an attempt to disclose sensitive information. Remote attackers can use Hmap web application fingerprint tool to detect vulnerabilities on a target server...

Fingerprint Validity Driver and Synaptics Fingerprint Driver Information Disclosure

Lenovo Security Advisory: LEN-4281 Potential Impact: Disclosure of biometric data Severity: Low Summary Description: A vulnerability has been identified in two drivers associated with biometric fingerprint scanners used on some Lenovo systems that could allow an attacker with local administrative...

Lenovo Fingerprint Manager - Lenovo Support US

No description provided...

Lenovo Fingerprint Manager and Lenovo Touch Fingerprint Software Privilege Escalation

Mitigation Strategy for Customers what you should do to protect yourself: There are several ways you can protect yourself. Lenovo recommends that you take one of the following steps: • Starting from March 18, 2016, run Lenovo System Update and install the recommended Fingerprint Manager or Lenovo...

Lenovo Fingerprint Manager and Lenovo Touch Fingerprint Software Privilege Escalation - Lenovo Support US

No description provided...

Onion Services Security Scan: OnionScan

OnionScan is a free and open source tool for investigating the Dark Web. For all the amazing technological innovations in the anonymity and privacy space, there is always a constant threat that has no effective technological patch – human error. Whether it is operational security leaks or softwar...

Lenovo Fingerprint Manager and Touch Fingerprint Privilege Gain Vulnerability

Lenovo Fingerprint Manager and Touch Fingerprint are both products of the Chinese company Lenovo. The former is a set of fingerprint sensor drivers developed for the Thinkpad series; the latter is a set of drivers for acquiring recognized fingerprints. A privilege-acquisition vulnerability exists...

CVE-2016-2393

Lenovo Fingerprint Manager before 8.01.57 and Touch Fingerprint before 1.00.08 use weak ACLs for unspecified 1 services and 2 files, which allows local users to gain privileges by invalidating local checks...

CVE-2016-2393

Lenovo Fingerprint Manager before 8.01.57 and Touch Fingerprint before 1.00.08 use weak ACLs for unspecified 1 services and 2 files, which allows local users to gain privileges by invalidating local checks...