533 matches found
CVE-2023-3897
CVE-2023-3897 Username enumeration is possible through Bypassing CAPTCHA in On-premise SureMDM Solution on Windows deployment allows attacker to enumerate local user information via error message. This issue affects SureMDM On-premise: 6.31 and below version...
AudioCaptchaBypass-CVE-2008-2019
Exploit for CVE-2008-2019 - Simple Machines Form SMF 1.1.4 and below. SMF uses an audio captcha made up of a woman's voice saying each letter of the alphabet. The user, who could be blind needs to type in these letters in order to pass the challenge response. The vulnerability identified by...
ai-captcha-bypass
AI搭載のCAPTCHAソルバー このプロジェクトは、OpenAIのGPT-4oやGoogleのGeminiなどの大規模マルチモーダルモデル(LMM)を使用して、さまざまな種類のCAPTCHAを自動的に解決するPythonベースのコマンドラインツールです。SeleniumによるWebブラウザ自動化を活用してWebページと対話し、CAPTCHAをリアルタイムで解決します。 解決に成功すると、successfulsolvesディレクトリにGIFとして記録されます。 詳細なブログ記事 :...
GoogleRecaptchaBypass
Google Recaptcha Solver 私たちはボットが大好きです ❤️、しかしGoogleはそうではありません。 そこで、Google reCAPTCHAをバイパスするソリューションをご用意しました。 Google reCAPTCHAを5秒以内に解決! 🚀 これはDrissionPageライブラリを使用してGoogle reCAPTCHAを解決するPythonスクリプトです。 Selenium実装は近日追加予定です。 最近のアップデート 朗報です!Selenium実装が追加されました。貢献してくれた@obasklyに感謝します。詳細はseleniumブランチをご覧ください。...
CVE-2019-17525
CVE-2019-17525 D-LINK ROUTER "MODEL NO: DIR-615" with "FIRMWARE VERSION:20.10" & "HARDWARE VERSION:T1 A vulnerability found on login-in page of D-LINK ROUTER "DIR-615" with "FIRMWARE VERSION:20.10" & "HARDWARE VERSION:T1" which allows attackers to easily bypass CAPTCHA on login page by...
TOTOLINK/Realtek Routers - CAPTCHA Bypass
On certain TOTOLINK Realtek SDK based routers, the CAPTCHA text can be retrieved via a POST request to the boafrm/formLogin URI with the JSON payload "topicurl":"setting/getSanvas". This allows an unauthenticated attacker to bypass CAPTCHA verification, gaining unauthorized access to restricted...
goop
goop Google Search Scraper Note: It no longer works. Google team told me it's not a legitimate issue when I reported it to them but now they just silently fixed it. Contents Introduction How it works? Usage Installation Example Legal Introduction goop can perform google searches without being...
goop
goop Google 검색 스크래퍼 참고: 더 이상 작동하지 않습니다. Google 팀이 제가 보고했을 때 합법적인 문제가 아니라고 말했지만, 이제는 조용히 수정했습니다. 목차 소개 작동 방식? 사용법 설치 예제 법적 고지 및 면책 소개 goop은 CAPTCHA에 차단되거나 속도 제한에 걸리지 않고 Google 검색을 수행할 수 있습니다. 작동 방식? Facebook은 자체 스크래퍼를 위한 디버거 도구를 제공합니다. 흥미롭게도 Google은 이 디버거가 만드는 요청을 제한하지 않으므로화이트리스트?, CAPTCHA에 차단되지 않...
anti-anti-automation
Anti-Anti-Automation Framework A framework for techniques to bypass common anti-automation security controls. Common Anti-Automation Controls Email Verification CAPTCHA SMS/Phone Credit Card WASC-21: Insufficient Anti-automation...
CVE-2026-37603
Improper Restriction of Excessive Authentication Attempts in the administration login of pH7Software pH7Builder pH7 Social Dating CMS through 19.2.0. The CAPTCHA escalation flag is stored in the PHP session as captchaadminenabled and the CAPTCHA form element is only built when that flag is presen...
WordPress Clean Login plugin < 1.19 - Unauthenticated CAPTCHA Bypass vulnerability
Unauthenticated CAPTCHA Bypass vulnerability discovered by Arthur Morgan in WordPress Plugin Clean Login versions 1.19...
CVE-2026-90977
The Clean Login WordPress plugin before 1.19 does not verify its registration CAPTCHA when the stored session value is empty, allowing unauthenticated users to bypass the anti-automation control on the registration form and create accounts without solving it...
CVE-2026-90977 Clean Login < 1.19 - Unauthenticated CAPTCHA Bypass via Empty Session Comparison
The Clean Login WordPress plugin before 1.19 does not verify its registration CAPTCHA when the stored session value is empty, allowing unauthenticated users to bypass the anti-automation control on the registration form and create accounts without solving it...
CVE-2026-90977
The Clean Login WordPress plugin prior to version 1.19 fails to verify the registration CAPTCHA when the stored session value is empty. This allows unauthenticated users to bypass the anti-automation control on the registration form and create accounts without solving the CAPTCHA. The vulnerabili...
EUVD-2026-82689
The Clean Login WordPress plugin before 1.19 does not verify its registration CAPTCHA when the stored session value is empty, allowing unauthenticated users to bypass the anti-automation control on the registration form and create accounts without solving it...
CVE-2026-90977 Clean Login < 1.19 - Unauthenticated CAPTCHA Bypass via Empty Session Comparison
The Clean Login WordPress plugin before 1.19 does not verify its registration CAPTCHA when the stored session value is empty, allowing unauthenticated users to bypass the anti-automation control on the registration form and create accounts without solving it...
PT-2026-95263
Name of the Vulnerable Software and Affected Versions Clean Login WordPress plugin versions prior to 1.19 Description The plugin fails to verify the registration CAPTCHA when the stored session value is empty. This allows unauthenticated users to bypass anti-automation controls on the registratio...
CVE-2026-79701
Joomla Extension - joomshaper.com - Unauthenticated CAPTCHA Bypass in Module Context in the Contact, Opt-in and Form Builder Addons in SP Page Builder Pro 3.2.6 - 6.9.0 - In the ajaxcontact, optinform and formbuilder addons, the result returned by the CAPTCHA plugin's onCheckAnswer event was...
CVE-2026-79700
Joomla Extension - joomshaper.com - Unauthenticated CAPTCHA Bypass via Request-Controlled CAPTCHA Configuration in SP Page Builder Pro 5.1.4 - 6.9.0 - The optinform addon read the CAPTCHA type, the expected answer and the enabled flag from the request rather than from the stored addon...
CVE-2026-79701 Joomla Extension - joomshaper.com - Unauthenticated CAPTCHA Bypass in Module Context in the Contact, Opt-in and Form Builder Addons in SP Page Builder Pro 3.2.6 - 6.9.0
Joomla Extension - joomshaper.com - Unauthenticated CAPTCHA Bypass in Module Context in the Contact, Opt-in and Form Builder Addons in SP Page Builder Pro 3.2.6 - 6.9.0 - In the ajaxcontact, optinform and formbuilder addons, the result returned by the CAPTCHA plugin's onCheckAnswer event was...