Lucene search
+L

1253 matches found

OSSF Malicious Packages
OSSF Malicious Packages
•added 2025/05/22 12:46 p.m.•13 views

Malicious code in hello-user-test-npm-com-test (npm)

--- -= Per source details. Do not edit below this line.=-...

7AI score
SaveExploits0
Github Security Blog
Github Security Blog
•added 2025/05/19 5:55 a.m.•4 views

Malware in say-hello-npm-world

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

5.8AI score
SaveExploits0References1Affected Software1
Citrix
Citrix
•added 2025/05/07 12:00 a.m.•33 views

After installing Single-session OS VDA, Windows Hello for Business cannot be disabled via Intune.

After installing Single-session OS VDA 2209 or 2203 LTSR CU2 or later, Windows Hello for Business can no longer be disabled via Microsoft Intune...

7.1AI score
SaveExploits0
Microsoft KB
Microsoft KB
•added 2025/04/25 12:00 a.m.•13 views

April 25, 2025—KB5055627(OS Build 26100.3915) Preview

None None...

5.8AI score
SaveExploits0
OSSF Malicious Packages
OSSF Malicious Packages
•added 2025/04/17 4:42 a.m.•9 views

Malicious code in fatfingers-hello (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 772fb028e6aa0e6a10ca2ebd43f559a22b08f432b864944aab162648a4e4a0ad Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References3
Github Security Blog
Github Security Blog
•added 2025/04/17 4:42 a.m.•5 views

Malware in fatfingers-hello

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

5.8AI score
SaveExploits0References1Affected Software1
osv_mal
osv_mal
•added 2025/04/17 4:42 a.m.•11 views

MAL-2025-3246 Malicious code in fatfingers-hello (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 772fb028e6aa0e6a10ca2ebd43f559a22b08f432b864944aab162648a4e4a0ad Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2025/04/10 7:51 p.m.•52 views

CVE-2025-26644

Automated recognition mechanism with inadequate detection or handling of adversarial input perturbations in Windows Hello allows an unauthorized attacker to perform spoofing locally...

5.1CVSS6.6AI score0.00549EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2025/04/10 7:49 p.m.•27 views

CVE-2025-26635

Weak authentication in Windows Hello allows an authorized attacker to bypass a security feature over a network...

6.5CVSS7AI score0.01498EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
•added 2025/04/10 12:00 a.m.•21 views

Windows Hello Spoofing

The vulnerability of the biometric authentication function in Windows Hello on Windows operating systems is related to insufficient detection or processing of adversarial input anomalies. Exploiting this vulnerability can allow attackers to perform spoofing attacks...

5.1CVSS7.6AI score0.00549EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2025/04/10 12:00 a.m.•18 views

Windows Hello Biometric Authentication Bypass

The vulnerability of the biometric authentication function in Windows Hello on Windows operating systems is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor to circumvent existing security restrictions remotely...

8.5CVSS7.5AI score0.01498EPSS
SaveExploits0References2
CNVD
CNVD
•added 2025/04/09 12:00 a.m.•54 views

Microsoft Windows Hello Security Feature Bypass Vulnerability (CNVD-2025-07780)

Microsoft Windows Hello is a more personalized and secure way to sign in to your Windows device. A security feature bypass vulnerability exists in Microsoft Windows Hello, which can be exploited by an attacker to bypass certain features...

6.5CVSS8.1AI score0.01498EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2025/04/08 6:15 p.m.•10 views

CVE-2025-26644

Automated recognition mechanism with inadequate detection or handling of adversarial input perturbations in Windows Hello allows an unauthorized attacker to perform spoofing locally...

5.1CVSS7.3AI score0.00549EPSS
SaveExploits0References1
NVD
NVD
•added 2025/04/08 6:15 p.m.•29 views

CVE-2025-26644

Automated recognition mechanism with inadequate detection or handling of adversarial input perturbations in Windows Hello allows an unauthorized attacker to perform spoofing locally...

5.1CVSS0.00549EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2025/04/08 6:15 p.m.•7 views

CVE-2025-26635

Weak authentication in Windows Hello allows an authorized attacker to bypass a security feature over a network...

6.5CVSS7.3AI score0.01498EPSS
SaveExploits0References1
NVD
NVD
•added 2025/04/08 6:15 p.m.•19 views

CVE-2025-26635

Weak authentication in Windows Hello allows an authorized attacker to bypass a security feature over a network...

6.5CVSS0.01498EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/04/08 5:23 p.m.•20 views

CVE-2025-26644 Windows Hello Spoofing Vulnerability

...

5.1CVSS7.2AI score0.00549EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/04/08 5:23 p.m.•46 views

CVE-2025-26644 Windows Hello Spoofing Vulnerability

...

5.1CVSS0.00549EPSS
SaveExploits0References1
CVE
CVE
•added 2025/04/08 5:23 p.m.•171 views

CVE-2025-26644

CVE-2025-26644 affects Windows Hello by allowing local spoofing due to inadequate handling of adversarial input perturbations. Microsoft documents a Windows Hello security fix path via monthly updates (e.g., KB5055528 for Windows 11 22621/22631; KB5055519 for older Windows builds) that enforces v...

5.1CVSS7AI score0.00549EPSS
SaveExploits0References1Affected Software8
Cvelist
Cvelist
•added 2025/04/08 5:23 p.m.•39 views

CVE-2025-26635 Windows Hello Security Feature Bypass Vulnerability

...

6.5CVSS0.01498EPSS
SaveExploits0References1
Rows per page
Query Builder