9 matches found
CVE-2026-78236 Insecure PIN derivation mechanism in Admin By Request (ABR)
An insecure PIN derivation mechanism in ABR allows a low-privileged user to escalate privileges to administrator by communicating over Cross-Process Communication XPC while masquerading as an Apple-signed process...
CVE-2026-78236
CVE-2026-78236 affects Admin By Request (ABR) , a macOS privilege-escalation utility. The root cause is an insecure PIN derivation mechanism that allows a low-privileged user to escalate to administrator by communicating over Cross-Process Communication (XPC) while masquerading as an Apple-signed...
EUVD-2013-4954
Malware in sbrugna...
CVE-2013-5112
Evernote before 5.5.1 has insecure PIN storage...
CVE-2013-5113
LastPass prior to 2.5.1 has an insecure PIN implementation...
Authentication flaw
The Online-Ausweis-Funktion eID scheme in the German National Identity card through 2024-02-15 allows authentication bypass by spoofing. A man-in-the-middle attacker can assume a victim's identify for access to government, medical, and financial resources, and can also extract personal data from...
CVE-2024-23674: Authentication Bypass by Spoofing
The Online-Ausweis-Funktion eID scheme in the German National Identity card through 2024-02-15 allows authentication bypass by spoofing. A man-in-the-middle attacker can assume a victim's identify for access to government, medical, and financial resources, and can also extract personal data from...
PT-2024-20011 · Unknown · Online-Ausweis-Funktion Eid
Name of the Vulnerable Software and Affected Versions: Online-Ausweis-Funktion eID scheme in the German National Identity card through 2024-02-15 Description: The issue allows authentication bypass by spoofing, enabling a man-in-the-middle attacker to assume a victim's identity and access...