98 matches found
CVE-2022-37730
In ftcms 2.1, there is a Cross Site Request Forgery CSRF vulnerability in the PHP page, which causes the attacker to forge a link to trick him to click on a malicious link or visit a page containing attack code, and send a request to the server corresponding to the identity authentication...
Cross site request forgery (csrf)
In ftcms 2.1, there is a Cross Site Request Forgery CSRF vulnerability in the PHP page, which causes the attacker to forge a link to trick him to click on a malicious link or visit a page containing attack code, and send a request to the server corresponding to the identity authentication...
Cyber Signals: Defending against cyber threats with the latest research, insights, and trends
Weâre excited to introduce Cyber Signals, a cyber threat intelligence brief informed by the latest Microsoft threat data and research. This content, which will be released quarterly, offers an expert perspective into the current threat landscape, discussing trending tactics, techniques, and...
Huawei HarmonyOS Access Control Error Vulnerability (CNVD-2022-08327)
Huawei HarmonyOS is an operating system from Huawei, China. An access control error vulnerability exists in Huawei HarmonyOS, which stems from a component of the product that does not effectively authenticate the user's identity. No details of the vulnerability are currently available...
Dahua Multiple Vulnerabilities (DHCC-SA-202106-001) - Active Check
Multiple Dahua devices and their OEMs are prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
[SECURITY] Fedora 35 Update: freeipa-4.9.7-4.fc35
IPA is an integrated solution to provide centrally managed Identity users, hosts, services, Authentication SSO, 2FA, and Authorization host access control, SELinux user roles, services. The solution provides features for further integration with Linux based clients SUDO, automount and integration...
CVE-2021-33045
The identity authentication bypass vulnerability found in some Dahua products during the login process. Attackers can bypass device identity authentication by constructing malicious data packets...
CVE-2021-33045
The identity authentication bypass vulnerability found in some Dahua products during the login process. Attackers can bypass device identity authentication by constructing malicious data packets...
CVE-2021-33044
The identity authentication bypass vulnerability found in some Dahua products during the login process. Attackers can bypass device identity authentication by constructing malicious data packets...
Authentication flaw
The identity authentication bypass vulnerability found in some Dahua products during the login process. Attackers can bypass device identity authentication by constructing malicious data packets...
CVE-2021-33045
The identity authentication bypass vulnerability found in some Dahua products during the login process. Attackers can bypass device identity authentication by constructing malicious data packets...
CVE-2021-33045
The identity authentication bypass vulnerability found in some Dahua products during the login process. Attackers can bypass device identity authentication by constructing malicious data packets...
CVE-2021-33045
CVE-2021-33045 is an authentication bypass vulnerability in Dahua IP cameras/IPc devices during login. The initial description confirms an identity authentication bypass by constructing malicious data packets. Connected PoC data detail concrete technical aspects: the campaign uses reverse-enginee...
CVE-2021-33044
The identity authentication bypass vulnerability found in some Dahua products during the login process. Attackers can bypass device identity authentication by constructing malicious data packets...
CVE-2021-33044
The identity authentication bypass vulnerability found in some Dahua products during the login process. Attackers can bypass device identity authentication by constructing malicious data packets...
CVE-2021-33044
CVE-2021-33044 is an authentication bypass vulnerability in Dahua IPC/IPCam/VTH/VTO devices that can be triggered during login by crafting malicious data packets, allowing bypass of device identity authentication. Connected sources provide concrete technical context, including PoCs and exploit co...
CVE-2021-33044
The identity authentication bypass vulnerability found in some Dahua products during the login process. Attackers can bypass device identity authentication by constructing malicious data packets. Recent assessments: cbeek-r7 at September 06, 2024 6:03pm UTC reported: On September 5th 2024, CISA...
CVE-2021-33045
The identity authentication bypass vulnerability found in some Dahua products during the login process. Attackers can bypass device identity authentication by constructing malicious data packets. Recent assessments: cbeek-r7 at September 06, 2024 6:04pm UTC reported: On September 5th 2024, CISA...
PT-2021-20027
Name of the Vulnerable Software and Affected Versions Dahua ipc-hum7xxx firmware Dahua ipc-hx3xxx firmware Dahua ipc-hx5xxx firmware Dahua sd1a1 firmware Dahua sd22 firmware Dahua sd49 firmware Dahua sd50 firmware Dahua sd52c firmware Dahua sd6al firmware Dahua tpc-bf1241 firmware Dahua tpc-bf222...
Using âMaster Facesâ to Bypass Face-Recognition Authenticating Systems
Fascinating research: "Generating Master Faces for Dictionary Attacks with a Network-Assisted Latent Space Evolution." Abstract: A master face is a face image that passes face-based identity-authentication for a large portion of the population. These faces can be used to impersonate, with a high...