Libgxps Buffer Overflow Vulnerability

libgxps is a library for processing XPS documents based on GObject a C-based framework. A heap buffer overflow vulnerability exists in the 'ftfontfacehash' function of the gxps-fonts.c file in libgxps 0.3.0 and earlier. A remote attacker can exploit this vulnerability with specially crafted input...

UBUNTU-CVE-2018-10733

There is a heap-based buffer over-read in the function ftfontfacehash of gxps-fonts.c in libgxps through 0.3.0. A crafted input will lead to a remote denial of service attack...

DEBIAN-CVE-2018-10733

There is a heap-based buffer over-read in the function ftfontfacehash of gxps-fonts.c in libgxps through 0.3.0. A crafted input will lead to a remote denial of service attack...

DedeCMS system has arbitrary file deletion vulnerability

Weaving dream content management system DedeCms is a PHP open source website management system. An arbitrary file deletion vulnerability exists in the DedeCMS system\member\editface.php file. An attacker can exploit the vulnerability to delete arbitrary files...

Fooling Face Recognition with Infrared Light

Yet another development in the arms race between facial recognition systems and facial-recognition-system foolers. BoingBoing post...

Apple Siri is the aeration privacy vulnerability: lock screen notifications directly read-vulnerability warning-the black bar safety net

! iOS 11, Apple introduced a new way to protect user privacy, the user through the iPhone's lock screen hide notification content, until the use of Touch ID or Face ID to unlock the device. But in fact, even if unable to unlock the phone, or is there a very simple way to read these hidden...

FAQ: Can we disable FaceID as passcode for Secure Hub on iPhone X?

Q: Can we disable FaceID as passcode for Secure Hub on iPhone X? A: Face ID feature uses the same APIs as the Touch ID feature on Apple devices. Currently we have the option to disable FaceID/TouchID for unlocking the devices using restrictions policy. However, we cannot restrict the iCloud or...

Parallel Space - Multiple accounts & Two face - Exported ContentProvider, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Parallel Space - Multiple accounts & Two face published at the 'play' market has multiple vulnerabilities...

SUSE SLES11 Security Update : MozillaFirefox (SUSE-SU-2018:0361-1)

This update for MozillaFirefox to version ESR 52.6 fixes several issues. These security issues were fixed : - CVE-2018-5091: Use-after-free with DTMF timers bsc1077291. - CVE-2018-5095: Integer overflow in Skia library during edge builder allocation bsc1077291. - CVE-2018-5096: Use-after-free whi...

Mozilla: Use-after-free during font face manipulation (MFSA 2018-03)

A use-after-free vulnerability can occur during font face manipulation when a font face is freed while still in use, resulting in a potentially exploitable crash. This vulnerability affects Thunderbird 52.6, Firefox ESR 52.6, and Firefox 58...

CVE-2018-3835

An exploitable out of bounds write vulnerability exists in version 2.2 of the Per Face Texture mapping application known as PTEX. The vulnerability is present in the reading of a file without proper parameter checking. The value read in, is not verified to be valid and its use can lead to a buffe...

CVE-2018-3835

An exploitable out of bounds write vulnerability exists in version 2.2 of the Per Face Texture mapping application known as PTEX. The vulnerability is present in the reading of a file without proper parameter checking. The value read in, is not verified to be valid and its use can lead to a buffe...

PT-2018-16229 · Walt Disney Animation Studios · Ptex

Name of the Vulnerable Software and Affected Versions: Per Face Texture mapping application known as PTEX version 2.2 Description: An out of bounds write issue exists due to improper parameter checking when reading a file. The value read is not verified, potentially leading to a buffer overflow a...

Mozilla: Use-after-free during font face manipulation (MFSA 2018-03)

A use-after-free vulnerability can occur during font face manipulation when a font face is freed while still in use, resulting in a potentially exploitable crash. This vulnerability affects Thunderbird 52.6, Firefox ESR 52.6, and Firefox 58...

UBUNTU-CVE-2018-5104

A use-after-free vulnerability can occur during font face manipulation when a font face is freed while still in use, resulting in a potentially exploitable crash. This vulnerability affects Thunderbird 52.6, Firefox ESR 52.6, and Firefox 58...

10-year-old kid uses his face to unlock mom’s iPhone X with Face ID

By Waqas When iPhone X was launched, Apple claimed its Face ID This is a post from HackRead.com Read the original post: 10-year-old kid uses his face to unlock moms iPhone X with Face ID...

November 14, 2017 – Morning Cyber Coffee Headlines – “Hole Punch” Edition

Good morning! Sit with Carbon Black this morning over a cup of coffee or tea and browse a few industry headlines to get the day started. We’ve got just enough information below to get you through that first cup…enjoy! November 14, 2017 - Headlines Carbon Black in the News: Carbon Black taps...

Apple iPhone X Face ID Fooled by a Mask

Apple’s Face ID technology, the centerpiece biometric authentication mechanism for the iPhone X, has been cracked a little more than a week after it was introduced to the public. Researchers from Vietnamese security company Bkav demonstrated that they could fool the technology to unlock the phone...

Apple iPhone X's Face ID Hacked (Unlocked) Using 3D-Printed Mask

Just a week after Apple released its brand new iPhone X on November 3, a team of hackers has claimed to successfully hack Apple's Face ID facial recognition technology with a mask that costs less than $150. Yes, Apple's "ultra-secure" Face ID security for the iPhone X is not as secure as the...

All it took for researchers was a mask to bypass iPhone X Face ID

By Waqas Apple Inc. introduced Face ID facial recognition system on September This is a post from HackRead.com Read the original post: All it took for researchers was a mask to bypass iPhone X Face ID...