453 matches found
CVE-2020-25769
GOG Galaxy 로컬 권한 상승 - CVE-2020-25769 GOG Galaxy 2.0은 CD Project가 개발한 플랫폼으로, 스토어프론트, 소프트웨어 배포, 소셜 네트워크 및 통합 게임 런처로 설계되었습니다. Windows에서 클라이언트는 권한 있는 작업을 처리하기 위해 GalaxyClientService 구성 요소에 의존합니다. 이 애플리케이션은 권한 있는 작업을 요청하는 사람의 신원을 제대로 확인하지 않습니다. 이 상황은 로컬 권한 상승 취약점을 얻기 위해 악용될 수 있습니다. 요약 제목: GOG Galaxy의 ...
openwifipass
OpenWifiPass Apple의 Wi-Fi 비밀번호 공유 프로토콜에서 grantor 역할의 오픈 소스 구현입니다. 면책 조항 OpenWifiPass는 실험적인 소프트웨어이며 Open Wireless Link 프로젝트의 리버스 엔지니어링 노력의 결과입니다. 이 코드는 오직 문서화 및 교육 목적으로 제공됩니다. 테스트되지 않았고 불완전 합니다. 예를 들어, 이 코드는 요청자의 신원을 확인하지 않습니다. 따라서 민감한 Wi-Fi 자격 증명과 함께 이 구현을 사용하지 마십시오. OpenWifiPass는 Apple Inc.와 제휴하...
The Hitchhikers Guide to Online Anonymity
The comprehensive guide for online anonymity and OpSec. Welcome. The purpose: providing an introduction to various online tracking techniques, online ID verification techniques, and detailed guidance to creating and maintaining truly anonymous online identities. It is written with hope for...
dot
딥페이크 공격 도구 키트 dot딥페이크 공격 도구 키트는 가상 카메라 주입을 통해 실시간으로 제어 가능한 딥페이크를 생성합니다. dot 은 보안 분석가, 레드 팀 구성원, 생체 인식 연구자들이 신원 확인 및 화상 회의 시스템 등에 대한 침투 테스트를 수행할 수 있도록 설계되었습니다. 업계에서 dot 이 딥페이크를 이용한 침투 테스트에 어떻게 활용되는지 더 알고 싶다면 The Verge 및 Biometric Update의 기사를 참조하세요. dot은 연구 및 데모 목적으로 개발되었습니다. 최종 사용자는 이 프로그램을 사용할 때 ...
CVE-2021-38666-poc
CVE-2021-38666-poc 신원을 확인하고 승인을 받아야 합니다...
SecureCivic
SecureCivic SecureCivic은 시민 주도의 오픈소스 신원 확인 플랫폼으로, 미국 사회보장청SSA이 현대적이고 프라이버시 우선의 검증 시스템을 도입할 수 있도록 설계되었습니다. 강력한 암호화 보호, 사기 탐지, 시민 통제형 신원 보안 도구를 통해 실시간 신원 확인을 안전하게 수행하며, 민간 데이터 중개업체와 중간자에 대한 의존을 제거합니다. SecureCivic은 AGPL-3.0+ 라이선스 하에 오픈소스 협업을 통해 완전히 투명하고 감사 가능하며 지속적으로 개선되도록 설계되었습니다. 비전 다음과 같은 공공 디지털 ...
CVE-2026-102128
An identity-verification weakness in Kiteworks Email Protection Gateway allowed the gateway to act on the Kiteworks platform on behalf of a user it had not authenticated, and to provision a platform account for an identity it did not already know. A remote, unauthenticated sender could potentiall...
CVE-2026-102128: Improper Authentication
An identity-verification weakness in Kiteworks Email Protection Gateway allowed the gateway to act on the Kiteworks platform on behalf of a user it had not authenticated, and to provision a platform account for an identity it did not already know. A remote, unauthenticated sender could potentiall...
PT-2026-103561
Name of the Vulnerable Software and Affected Versions Kiteworks Email Protection Gateway affected versions not specified Description An identity-verification weakness allows the gateway to act on the Kiteworks platform on behalf of an unauthenticated user and provision a platform account for an...
CVE-2026-100835
Contrast before 1.16.0 is susceptible to remote attestation relay attacks. Contrast accepted any TEE attestation report that verified correctly and contained the expected firmware patch levels and software measurements, regardless of which machine produced it, so attestation was not bound to...
CVE-2026-100835 Contrast before 1.16.0 Remote Attestation Relay Attack
Contrast before 1.16.0 is susceptible to remote attestation relay attacks. Contrast accepted any TEE attestation report that verified correctly and contained the expected firmware patch levels and software measurements, regardless of which machine produced it, so attestation was not bound to...
CVE-2026-100835
Contrast versions prior to 1.16.0 are vulnerable to a remote attestation relay attack . The root cause is that the software accepts any valid TEE attestation report containing the correct firmware patch levels and software measurements without binding the attestation to specific, physically trust...
CVE-2026-100835 Contrast before 1.16.0 Remote Attestation Relay Attack
Contrast before 1.16.0 is susceptible to remote attestation relay attacks. Contrast accepted any TEE attestation report that verified correctly and contained the expected firmware patch levels and software measurements, regardless of which machine produced it, so attestation was not bound to...
EUVD-2026-87851
Contrast before 1.16.0 is susceptible to remote attestation relay attacks. Contrast accepted any TEE attestation report that verified correctly and contained the expected firmware patch levels and software measurements, regardless of which machine produced it, so attestation was not bound to...
CVE-2026-100835: Improper Certificate Validation
Contrast before 1.16.0 is susceptible to remote attestation relay attacks. Contrast accepted any TEE attestation report that verified correctly and contained the expected firmware patch levels and software measurements, regardless of which machine produced it, so attestation was not bound to...
LinkedIn adds new checks for fake profiles and work histories
LinkedIn is adding trust and verification features aimed at making fake professional identities, invented work histories, and company impersonation harder to pull off. The company is responding to an environment in which generative AI enables imposters to create an entirely made-up professional...
CVE-2026-86837
The Bookly WordPress plugin before 28.3 does not properly verify a customer's identity before updating their stored details, allowing unauthenticated attackers who know a customer's primary identifier to overwrite that customer's stored personal information such as name, email and address...
CVE-2026-86837
The Bookly WordPress plugin versions prior to 28.3 contains a vulnerability where it fails to properly verify a customer's identity during personal information updates. An unauthenticated attacker who possesses a customer's primary identifier can exploit this verification bypass to overwrite sens...
