Lucene search
+L

538 matches found

NVD
NVD
added 2021/10/04 7:15 p.m.36 views

CVE-2021-41094

Wire is an open source secure messenger. Users of Wire by Bund may bypass the mandatory encryption at rest feature by simply disabling their device passcode. Upon launching, the app will attempt to enable encryption at rest by generating encryption keys via the Secure Enclave, however it will fai...

4.6CVSS0.00175EPSS
SaveExploits0References2
Prion
Prion
added 2021/10/04 7:15 p.m.28 views

Design/Logic Flaw

Wire is an open source secure messenger. Users of Wire by Bund may bypass the mandatory encryption at rest feature by simply disabling their device passcode. Upon launching, the app will attempt to enable encryption at rest by generating encryption keys via the Secure Enclave, however it will fai...

2.1CVSS4.8AI score0.00175EPSS
SaveExploits0References2Affected Software1
ATTACKERKB
ATTACKERKB
added 2021/10/04 7:15 p.m.10 views

CVE-2021-41094

Wire is an open source secure messenger. Users of Wire by Bund may bypass the mandatory encryption at rest feature by simply disabling their device passcode. Upon launching, the app will attempt to enable encryption at rest by generating encryption keys via the Secure Enclave, however it will fai...

4.6CVSS5.7AI score0.00175EPSS
SaveExploits0References3Affected Software1
Positive Technologies
Positive Technologies
added 2021/10/04 12:0 a.m.14 views

PT-2021-23083 · Wire · Wire

Name of the Vulnerable Software and Affected Versions: Wire versions prior to 3.70 Description: The issue allows users to bypass the mandatory encryption at rest feature by disabling their device passcode. When the app launches, it attempts to enable encryption at rest by generating encryption ke...

4.6CVSS4.5AI score0.00175EPSS
SaveExploits0References4
Pen Test Partners Blog
Pen Test Partners Blog
added 2021/05/07 6:12 a.m.54 views

EFB Safety Advice for Pilots

As a pilot you will be all too aware of how important an electronic flight bag EFB is to you and your role. It’s probably critical to your takeoff performance calculations, your roster, pax lists and plenty more. It’s one thing if its not working, but have you ever stopped to consider what could...

7.3AI score
SaveExploits0
OSV
OSV
added 2021/02/12 8:15 a.m.9 views

CVE-2021-27204

Telegram before 7.4 212543 Stable on macOS stores the local passcode in cleartext, leading to information disclosure...

5.5CVSS6.1AI score0.00293EPSS
SaveExploits1References2
NVD
NVD
added 2021/02/12 8:15 a.m.27 views

CVE-2021-27204

Telegram before 7.4 212543 Stable on macOS stores the local passcode in cleartext, leading to information disclosure...

5.5CVSS0.00293EPSS
SaveExploits1References2
Prion
Prion
added 2021/02/12 8:15 a.m.22 views

Information disclosure

Telegram before 7.4 212543 Stable on macOS stores the local passcode in cleartext, leading to information disclosure...

2.1CVSS5AI score0.00293EPSS
SaveExploits1References2Affected Software1
ATTACKERKB
ATTACKERKB
added 2021/02/12 8:15 a.m.4 views

CVE-2021-27204

Telegram before 7.4 212543 Stable on macOS stores the local passcode in cleartext, leading to information disclosure...

5.5CVSS5.7AI score0.00293EPSS
SaveExploits1References3
Cvelist
Cvelist
added 2021/02/12 7:48 a.m.30 views

CVE-2021-27204

Telegram before 7.4 212543 Stable on macOS stores the local passcode in cleartext, leading to information disclosure...

5.3AI score0.00293EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2020/12/12 12:0 a.m.11 views

LogMein LastPass Password Manager Authorization Issues Vulnerability

Logmein LogMeIn LastPass is a cross-platform online password management tool from US-based Logmein. LogMein LastPass Password Manager suffers from an authorization issue vulnerability that originates from forcing the authentication result to be true via a runtime operation, which can bypass the P...

5.7CVSS6.3AI score0.0047EPSS
SaveExploits1References3
OSV
OSV
added 2020/10/14 3:15 p.m.26 views

CVE-2020-25824

Telegram Desktop through 2.4.3 does not require passcode entry upon pushing the Export key within the Export Telegram Data wizard. The threat model is a victim who has voluntarily opened Export Wizard but is then distracted. An attacker then approaches the unattended desktop and pushes the Export...

2.4CVSS6.4AI score
SaveExploits0References4
Prion
Prion
added 2020/10/14 3:15 p.m.21 views

Code injection

Telegram Desktop through 2.4.3 does not require passcode entry upon pushing the Export key within the Export Telegram Data wizard. The threat model is a victim who has voluntarily opened Export Wizard but is then distracted. An attacker then approaches the unattended desktop and pushes the Export...

2.1CVSS4.2AI score0.0055EPSS
SaveExploits0References4Affected Software1
Cvelist
Cvelist
added 2020/10/14 2:10 p.m.46 views

CVE-2020-25824

Telegram Desktop through 2.4.3 does not require passcode entry upon pushing the Export key within the Export Telegram Data wizard. The threat model is a victim who has voluntarily opened Export Wizard but is then distracted. An attacker then approaches the unattended desktop and pushes the Export...

5.2AI score0.0055EPSS
SaveExploits0References4
CVE
CVE
added 2020/10/14 2:10 p.m.61 views

CVE-2020-25824

Telegram Desktop up to version 2.4.3 is vulnerable: when a user opens the Export Telegram Data wizard, pressing the Export key on an unattended, distracted desktop allows an attacker to access all chat conversations and media files because no passcode is required. Affected product: Telegram Deskt...

2.4CVSS4.2AI score0.0055EPSS
SaveExploits0References4Affected Software1
Kitploit
Kitploit
added 2020/10/06 8:30 p.m.574 views

Lockphish - The First Tool For Phishing Attacks On The Lock Screen, Designed To Grab Windows Credentials, Android PIN And iPhone Passcode

Lockphish it's the first tool 07/04/2020 for phishing attacks on the lock screen, designed to grab Windows credentials, Android PIN and iPhone Passcode using a https link. LockPhish Tutorial:https://www.kalilinux.in/2020/05/lockphish.html Author: The Linux Choice Who deleted his GitHub repository...

7.2AI score
SaveExploits0References1
zdt
zdt
added 2020/09/16 12:0 a.m.36 views

iOS 12 / 13 / 14 Passcode Bypass 0day Exploit

Attacker can access device SpringBoard, run default iOS apps, run 3rd party iOS apps installed from AppStore, open Photos, Reminders, Notes, Email, and all other iOS apps, make and receive calls / sms, etc. What you receive: The source code of exploit written in TheOS tweak platform...

0.5AI score
SaveExploits0
HackRead
HackRead
added 2020/07/30 8:20 p.m.56 views

Zoom web client flaw could’ve let hackers crack meetings passcode

By Deeba Ahmed The vulnerability, if exploited, would have affected millions of Zoom users worldwide. This is a post from HackRead.com Read the original post: Zoom web client flaw could've let hackers crack meetings passcode...

1.8AI score
SaveExploits0
Wired Threat Level
Wired Threat Level
added 2020/07/05 11:0 a.m.26 views

How to Passcode-Lock Any App on Your Phone

Letting someone see your phone shouldn't also mean letting them snoop on your texts, photos, or emails. Here's how to stop it from happening...

0.5AI score
SaveExploits0
NVD
NVD
added 2020/03/24 2:15 p.m.26 views

CVE-2020-10570

The Telegram application through 5.12 for Android, when Show Popup is enabled, might allow physically proximate attackers to bypass intended restrictions on message reading and message replying. This might be interpreted as a bypass of the passcode feature...

6.1CVSS6.3AI score0.00389EPSS
SaveExploits0References1
Rows per page
Query Builder