1006 matches found
howdy
Howdy provides Windows Hello™ style authentication for Linux. Use your built-in IR emitters and camera in combination with facial recognition to prove who you are. Using the central authentication system PAM, this works everywhere you would otherwise need your password: Login, lock screen, sudo,...
ft9201-libfprint
ft9201-libfprint Linux fingerprint support for the Focal-systems FT9201 USB reader 2808:93a9, sold as a standalone Windows Hello dongle, as a libfprint driver. The sensor is a tiny 96×96 optical reader. libfprint's built-in matcher does a poor job on an image that small, so this driver instead...
Shwmae
Shwmae Shwmae（シュー・マイ）は、DEF CON 32 で「Abusing Windows Hello Without a Severed Hand」というトークの一環として公開された Windows Hello 悪用ツールです。このツールの目的は、特権ユーザーコンテキストから Windows Hello を悪用することです。 root@kitploit: Shwmae Copyright C 2024 Shwmae enum Default Verb Enumerate Windows Hello protectors, keys and credentials sign...
CVE-2017-1000117
CVE-2017-1000117 でサーバーを立ち上げるやつ 次のコマンドを叩いてから、Webブラウザーを立ち上げて http://localhost:8088 にアクセスしてみよう！ root@kitploit: $ git clone --recursive https://github.com/0gawa/CVE-2017-1000117 Hello World と表示されたなら、gitをアップデートしよう！脆弱だ。...
CVE-2024-9224
CVE-2024-9224 Hello World = 2.1.1 - 認証済み（Subscriber+）任意ファイル読み取り 説明 WordPress 用 Hello World プラグインは、バージョン 2.1.1 以前のすべてのバージョンにおいて、helloworldlyric 関数を介して任意ファイル読み取りの脆弱性の影響を受けます。これにより、Subscriber レベルのアクセス権以上を持つ認証済みの攻撃者が、サーバー上の任意のファイルの内容を読み取ることが可能になり、そのファイルには機密情報が含まれる可能性があります。 情報 root@kitploit: Published...
Next.js-CVE-2025-29927
Demo Docker con Next.js Una semplice applicazione Hello World realizzata con Next.js 12.2 e Docker. Prerequisiti Docker installato sul tuo sistema Node.js 16 o successivo per sviluppo locale Creazione dell'immagine Docker Per creare l'immagine Docker, esegui: root@kitploit: docker build -t...
Vulnerable-Lab-NextJS-CVE-2025-29927
تطبيق Hello World باستخدام Next.js و Docker تطبيق Hello World بسيط باستخدام Next.js 12.2 و Docker. المتطلبات الأساسية Docker بناء التطبيق وتشغيله 1. قم ببناء صورة Docker: root@kitploit: docker build -t nextjs-docker-hello . 2. قم بتشغيل الحاوية: root@kitploit: docker run -p 3000:3000...
Astra Linux – Vulnerability in Linux 5.15
A issue was discovered in the net/ceph/messengerv2.c file within the Linux kernel before version 6.4.5. There is an integer signedness error, which leads to a buffer overflow and remote code execution via the HELLO command or one of the AUTH frames. This occurs due to an untrusted length value...
CVE-2026-74044 Wazuh 4.0.0 < 4.14.6 Path Traversal Arbitrary Directory Deletion via Cluster Hello
Wazuh 4.0.0 before 4.14.6 contains a path traversal vulnerability that allows authenticated cluster peers to delete arbitrary directory contents by supplying a traversal-shaped node name in the cluster hello payload without validation. Attackers holding a valid cluster Fernet key can craft a...
EUVD-2026-61076
Wazuh 4.0.0 before 4.14.6 contains a path traversal vulnerability that allows authenticated cluster peers to delete arbitrary directory contents by supplying a traversal-shaped node name in the cluster hello payload without validation. Attackers holding a valid cluster Fernet key can craft a...
CVE-2026-74044
Wazuh versions 4.0.0 through 4.14.5 are vulnerable: an authenticated cluster peer with a valid Fernet key can supply a path-traversal-shaped node name in the cluster hello payload; on disconnect, the master's peer cleanup routine deletes arbitrary directory contents within the wazuh user's writab...
CVE-2026-74044 Wazuh 4.0.0 < 4.14.6 Path Traversal Arbitrary Directory Deletion via Cluster Hello
Wazuh 4.0.0 before 4.14.6 contains a path traversal vulnerability that allows authenticated cluster peers to delete arbitrary directory contents by supplying a traversal-shaped node name in the cluster hello payload without validation. Attackers holding a valid cluster Fernet key can craft a...
CVE-2026-61928
Cleartext storage of sensitive information in Windows Hello allows an authorized attacker to perform tampering locally...
CVE-2026-61928 Windows Hello Tampering Vulnerability
...
EUVD-2026-56333
Cleartext storage of sensitive information in Windows Hello allows an authorized attacker to perform tampering locally...
CVE-2026-61928 Windows Hello Tampering Vulnerability
...
CVE-2026-61928
An issue affecting Windows Hello : sensitive information is stored in cleartext, allowing an authorized local attacker to tamper with the system. The CVSSv3.1 vector indicates a local, low-complexity attack requiring low privileges with a high integrity impact (I:H). Base score 5.5 (Medium). No e...
Windows Hello Tampering Vulnerability
Cleartext storage of sensitive information in Windows Hello allows an authorized attacker to perform tampering locally...
PT-2026-70447
Name of the Vulnerable Software and Affected Versions Windows Hello affected versions not specified Description Sensitive information is stored in cleartext, which allows an authorized attacker to perform local tampering to affect the system. Recommendations At the moment, there is no information...
New Passkey Attacks Can Recover Synced Private Keys or Bypass Phishing-Resistant MFA
Three separate research efforts last week demonstrated ways to defeat passkey protections without breaking the cryptography they rest on. Passkeys are designed to replace reusable passwords and resist phishing. The attacks instead reused signed authentication material that Windows had exposed,...