CVE-2022-23849

The biometric lock in Devolutions Password Hub for iOS before 2021.3.4 allows attackers to access the application because of authentication bypass. An attacker must rapidly make failed biometric authentication attempts...

CVE-2022-23849

The biometric lock in Devolutions Password Hub for iOS before 2021.3.4 allows attackers to access the application because of authentication bypass. An attacker must rapidly make failed biometric authentication attempts...

CVE-2022-23849

The biometric lock in Devolutions Password Hub for iOS before 2021.3.4 allows attackers to access the application because of authentication bypass. An attacker must rapidly make failed biometric authentication attempts...

Authentication flaw

The biometric lock in Devolutions Password Hub for iOS before 2021.3.4 allows attackers to access the application because of authentication bypass. An attacker must rapidly make failed biometric authentication attempts...

CVE-2022-23849

The biometric lock in Devolutions Password Hub for iOS before 2021.3.4 allows attackers to access the application because of authentication bypass. An attacker must rapidly make failed biometric authentication attempts...

CVE-2022-23849

The CVE-2022-23849 affects Devolutions Password Hub for iOS prior to 2021.3.4. A biometric lock authentication bypass allows an attacker to access the app by rapidly issuing failed biometric attempts. Impact is the ability to access the application with partial confidentiality/ integrity/availabi...

PT-2022-16290 · Devolutions · Devolutions Password Hub

Name of the Vulnerable Software and Affected Versions: Devolutions Password Hub for iOS versions prior to 2021.3.4 Description: The biometric lock in the application allows attackers to access it due to an authentication bypass issue. This can be exploited by rapidly making failed biometric...

IRS: Selfies Now Optional, Biometric Data to Be Deleted

The U.S. Internal Revenue Service IRS said Monday that taxpayers are no longer required to provide facial scans to create an account online at irs.gov. In lieu of providing biometric data, taxpayers can now opt for a live video interview with ID.me, the privately-held Virginia company that runs t...

Facebook sued for siphoning facial recognition data without consent

Ken Paxton, the Attorney General of Texas, recently filed a lawsuit against Facebooks parent company, Meta, for harvesting the facial recognition data of millions of Texan residents—for a decade. Paxton filed the lawsuit on Monday in the states Harrison County District Court. The suit contains...

Facebook Agrees to Pay $90 Million to Settle Decade-Old Privacy Violation Case

Meta Platforms has agreed to pay $90 million to settle a lawsuit over the company's use of cookies to allegedly track Facebook users' internet activity even after they had logged off from the platform. In addition, the social media company will be required to delete all of the data it illegally...

The vulnerability of IDEMIA’s biometric identification systems’ microprogramming software lies in the lack of authentication mechanisms, which allows attackers to bypass the authentication process.

The vulnerability of IDEMIA’s biometric identification systems’ microprogramming software is related to the absence of authentication. Exploiting this vulnerability could allow a malicious actor to bypass authentication and cause service failures...

IRS To Ditch Biometric Requirement for Online Access

The Internal Revenue Service IRS said today it will be transitioning away from requiring biometric data from taxpayers who wish to access their records at the agencys website. The reversal comes as privacy experts and lawmakers have been pushing the IRS and other federal agencies to find less...

Shadow Credentials

Microsoft has introduced Windows Hello for Business WHfB to replace traditional password based authentication with a key based trust model. This implementation uses PIN or… Continue reading - Shadow Credentials...

The vulnerability of IDEMIA’s biometric identification systems’ microprogramming software, related to buffer overflow in the stack, allows a hacker to gain remote access to the device.

The vulnerability of IDEMIA’s biometric identification systems’ microprogramming software is related to buffer overflow in the stack. Exploiting this vulnerability could allow a malicious actor to gain remote access to the device...

The vulnerability of IDEMIA’s biometric identification systems’ microprogramming software, related to buffer overflow in the queue, allows a intruder to gain remote access to the device.

The vulnerability of IDEMIA’s biometric identification systems’ microprogramming software is related to buffer overflow attacks. Exploiting this vulnerability could allow attackers to gain remote access to the device...

The vulnerability of IDEMIA’s biometric identification systems’ microprogramming software lies in the lack of authentication mechanisms, which allows attackers to bypass the authentication process.

The vulnerability of IDEMIA’s biometric identification systems’ microprogramming software is related to the absence of authentication. Exploiting this vulnerability could allow a malicious actor to bypass authentication and cause service failures...

The vulnerability of IDEMIA’s biometric identification systems’ microprogramming software relates to the possibility of it escaping the directory structure. This allows attackers to read/write device files.

The vulnerability of IDEMIA’s biometric identification systems’ microprogramming software relates to the possibility of it escaping from the directory structure. Exploiting this vulnerability could allow a malicious actor to remotely perform file reading/writing operations on the device...

CVE-2021-43849

cordova-plugin-fingerprint-aio is a plugin provides a single and simple interface for accessing fingerprint APIs on both Android 6+ and iOS. In versions prior to 5.0.1 The exported activity de.niklasmerz.cordova.biometric.BiometricActivity can cause the app to crash. This vulnerability occurred...

cordova-plugin-fingerprint-aio 安全漏洞

Cordova-Plugin-Fingerprint-Aio is a Cordova plugin from the German individual developer Niklas Merz. It is used for fingerprint sensors and FaceId. A security vulnerability exists in cordova-plugin-fingerprint-aio, which stems from the plugin's exported activity...

PT-2021-23978 · Unknown · Cordova-Plugin-Fingerprint-Aio

Name of the Vulnerable Software and Affected Versions: cordova-plugin-fingerprint-aio versions prior to 5.0.1 Description: The exported activity de.niklasmerz.cordova.biometric.BiometricActivity can cause the app to crash when requested with invalid or empty data. Any third-party app can constant...