986 matches found
CVE-2022-30515
ZKTeco BioTime 8.5.4 is missing authentication on folders containing employee photos, allowing an attacker to view them through filename enumeration...
CVE-2022-30515
ZKTeco BioTime 8.5.4 is missing authentication on folders containing employee photos, allowing an attacker to view them through filename enumeration...
Authentication flaw
ZKTeco BioTime 8.5.4 is missing authentication on folders containing employee photos, allowing an attacker to view them through filename enumeration...
PT-2022-20152 · Zkteco · Zkteco Biotime
Name of the Vulnerable Software and Affected Versions: ZKTeco BioTime version 8.5.4 Description: The issue is related to missing authentication on folders containing employee photos. This allows an attacker to view the photos through filename enumeration. Recommendations: For ZKTeco BioTime versi...
CVE-2022-30515
ZKTeco BioTime 8.5.4 is missing authentication on folders containing employee photos, allowing an attacker to view them through filename enumeration...
ZKTeco ZKBio Time 访问控制错误漏洞
ZKTeco ZKBio Time is a powerful web-based time and attendance management software from the Chinese company ZKTeco. A security vulnerability exists in ZKTeco ZKBio Time version 8.5.4, which stems from a lack of authentication of folders containing employee photos...
CVE-2022-30515
ZKTeco BioTime 8.5.4 is missing authentication on folders containing employee photos, allowing an attacker to view them through filename enumeration...
CVE-2022-30515
ZKTeco BioTime 8.5.4 is affected by an authentication bypass issue where folders containing employee photos are not required to authenticate, enabling an attacker to view photos via filename enumeration. This vulnerability is corroborated by multiple sources in the connected set (including NVD an...
PT-2022-21543 · Apple · Apple Macos
Name of the Vulnerable Software and Affected Versions: macOS versions prior to 13 Description: A logic issue was addressed with improved restrictions. This issue allows a shortcut to potentially view the hidden photos album without authentication. Recommendations: For versions prior to 13, update...
Flickr: IDOR may allow access to non-public photos
The IDOR vulnerability may have allowed access to non-public photos on Flickr. By adding discovered photo IDs for non-public photos uploaded by others to a Flickr group, the attacker could gain access to the third-party photos through their membership in the group...
CVE-2022-41538
Wedding Planner v1.0 was discovered to contain an arbitrary file upload vulnerability in the component /Wedding-Management-PHP/admin/photosadd.php. This vulnerability allows attackers to execute arbitrary code via a crafted PHP file...
Glut of Fake LinkedIn Profiles Pits HR Against the Bots
A recent proliferation of phony executive profiles on LinkedIn is creating something of an identity crisis for the business networking site, and for companies that rely on it to hire and screen prospective employees. The fabricated LinkedIn identities -- which pair AI-generated profile photos wit...
CVE-2022-32872
A logic issue was addressed with improved restrictions. This issue is fixed in iOS 16, iOS 15.7 and iPadOS 15.7. A person with physical access to an iOS device may be able to access photos from the lock screen...
CVE-2022-32872
A logic issue was addressed with improved restrictions. This issue is fixed in iOS 16, iOS 15.7 and iPadOS 15.7. A person with physical access to an iOS device may be able to access photos from the lock screen...
PT-2022-21541
Name of the Vulnerable Software and Affected Versions iOS versions prior to 16 iOS versions prior to 15.7 iPadOS versions prior to 15.7 Description A logic issue was addressed with improved restrictions, allowing a person with physical access to an iOS device to potentially access photos from the...
CVE-2022-32872
A logic issue was addressed with improved restrictions. This issue is fixed in iOS 16, iOS 15.7 and iPadOS 15.7. A person with physical access to an iOS device may be able to access photos from the lock screen...
CVE-2022-32872
CVE-2022-32872 affects the Shortcuts component in iOS/iPadOS. A logic issue with restricted access allowed a person with physical access to an iOS device to view photos from the lock screen. Apple fixed this in iOS 16 and iOS 15.7 / iPadOS 15.7. The patch updates/restrictions close the gap; no ex...
captivatingsportsphotos.net Cross Site Scripting vulnerability OBB-2861428
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
New Amazon Ring Vulnerability Could Have Exposed All Your Camera Recordings
Retail giant Amazon patched a high-severity security issue in its Ring app for Android in May that could have enabled a rogue application installed on a user's device to access sensitive information and camera recordings. The Ring app for Android has over 10 million downloads and enables users to...
