CVE-2021-30863

This issue was addressed by improving Face ID anti-spoofing models. This issue is fixed in iOS 15 and iPadOS 15. A 3D model constructed to look like the enrolled user may be able to authenticate via Face ID...

PT-2021-18923 · Apple · Ios +1

Name of the Vulnerable Software and Affected Versions: iOS versions prior to 15 iPadOS versions prior to 15 Description: The issue allows a 3D model constructed to look like the enrolled user to authenticate via Face ID. This is due to inadequate anti-spoofing models. The estimated number of...

Using “Master Faces” to Bypass Face-Recognition Authenticating Systems

Fascinating research: "Generating Master Faces for Dictionary Attacks with a Network-Assisted Latent Space Evolution." Abstract: A master face is a face image that passes face-based identity-authentication for a large portion of the population. These faces can be used to impersonate, with a high...

SQL Injection Vulnerability in Hanvon Face Attendance Management System (CNVD-2021-54093)

Hanvon Face Attendance Management System is a new generation of attendance management system with C/S architecture. SQL injection vulnerability exists in Hanvon Face Attendance Management System, which can be exploited by attackers to obtain sensitive information from the database...

SQL Injection Vulnerability in Hanvon Face Recognition Attendance Management System of Hanvon Technology Co.

Ltd. is committed to the research and application of intelligent interaction technology in multiple fields. A SQL injection vulnerability exists in the HANWANG Face Recognition Attendance Management System of HANWANG Technology Co. Ltd, which can be exploited by attackers to obtain sensitive...

What You Should Know About Voilà, the Latest Viral Selfie App

Before you use it to cartoonify your face, consider the risks to your data...

SQL Injection Vulnerability in Hanvon's Face Recognition Attendance Management System

Ltd. is committed to the research and application of intelligent interaction technology in multiple fields. A SQL injection vulnerability exists in Hanvon's face recognition attendance management system. An attacker can exploit the vulnerability to obtain sensitive database information...

Shenzhen Jieshun Technology Industry Co., Ltd. Y10A-T Face Access Control with Logic Flaw Vulnerability

Y10A-T face access control is a face recognition access control product widely used in commercial buildings, parks, communities, equipped with cameras, with face recognition door opening function of the access control system. Shenzhen Jieshun Technology Industry Co., Ltd Y10A-T face access contro...

Unauthorized Access Vulnerability in the Human Evidence Rubik's Cube Management System

Human ID Magic is a citizen's personal information approval software, using advanced face recognition count and fingerprint comparison technology, can be directly in the field to quickly compare the real person with the side of the document information, real-time uploading database, to provide...

SQL Injection Vulnerability in Human Evidence Rubik's Cube Management System

Human ID Magic is a citizen's personal information approval software, using advanced face recognition count and fingerprint comparison technology, can be directly in the field to quickly compare the real person with the side of the document information, real-time uploading database, to provide...

The vulnerability in the implementation of the GenerateFaceMask function of the Camera component in Android operating systems allows a hacker to escalate their privileges.

The vulnerability of the GenerateFaceMask function in the Camera component of Android operating systems lies in the writing of data beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to gain increased privileges...

SQL Injection Vulnerability in Hanvon Face Attendance Management System (CNVD-2021-29069)

Founded in 1998, Hanvon Technology Co., Ltd. is a pioneer in researching, developing, applying and promoting multi-intelligent human-computer interaction technologies and products with the support of key projects such as the Eighth Five-Year Plan, the Ninth Five-Year Plan, the 863 Project, and th...

CVE-2020-28221

A CWE-20: Improper Input Validation vulnerability exists in EcoStruxure™ Operator Terminal Expert and Pro-face BLUE version details in the notification that could cause arbitrary code execution when the Ethernet Download feature is enable on the HMI...

CVE-2020-28221

A CWE-20: Improper Input Validation vulnerability exists in EcoStruxure™ Operator Terminal Expert and Pro-face BLUE version details in the notification that could cause arbitrary code execution when the Ethernet Download feature is enable on the HMI...

Input validation

A CWE-20: Improper Input Validation vulnerability exists in EcoStruxure™ Operator Terminal Expert and Pro-face BLUE version details in the notification that could cause arbitrary code execution when the Ethernet Download feature is enable on the HMI...

CVE-2020-28221

A CWE-20: Improper Input Validation vulnerability exists in EcoStruxure™ Operator Terminal Expert and Pro-face BLUE version details in the notification that could cause arbitrary code execution when the Ethernet Download feature is enable on the HMI...

CVE-2020-28221

CVE-2020-28221 is an improper input validation (CWE-20) vulnerability in EcoStruxure™ Operator Terminal Expert and Pro-face BLUE. The issue could allow arbitrary code execution when the Ethernet Download feature is enabled on the HMI. The provided sources identify the affected products but do not...

A Site Published Every Face From Parler's Capitol Riot Videos

Faces of the Riot used open source software to detect, extract, and deduplicate every face from the 827 videos taken from the insurrection on January 6...

OSV-2018-226 Heap-buffer-overflow in pcf_get_encodings

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=9561 Crash type: Heap-buffer-overflow READ 1 Crash state: pcfgetencodings pcfloadfont PCFFaceInit...

SQL Injection Vulnerability in Hanvon Face Attendance Management System

Ltd. was founded in 1998. As a pioneer in the domestic artificial intelligence industry, Hanvon Technology has been dedicated to the research and application of intelligent interaction technology in multiple fields for more than 20 years. A SQL injection vulnerability exists in Hanvon's Face...