2052 matches found
TYPO3 freeCap CAPTCHA Input Validation Error Vulnerability
TYPO3 is a free and open source content management system framework CMS/CMF from the TYPO3 Association in Switzerland. freeCap CAPTCHA is used in one of the CAPTCHA extension plugins. A security vulnerability exists in TYPO3 freeCap CAPTCHA version 2.4.5 and earlier and version 2.5.2 and earlier...
CVE-2019-16699
The CVE-2019-16699 issue affects the TYPO3 sr_freecap (freeCap CAPTCHA) extension, versions 2.4.5 and earlier and 2.5.2 and earlier. The root cause is improper sanitization of user input, which allows an attacker to trigger arbitrary Extbase actions and achieve Remote Code Execution (RCE). Public...
TYPO3 freeCap CAPTCHA Extension CVE-2019-16699 Remote Code Execution Vulnerability
Description TYPO3 freeCap CAPTCHA extension is prone to a remote code-execution vulnerability. A remote attacker can leverage this issue to execute arbitrary code within the context of the application. Successful exploits will compromise the application and possibly the underlying system. Version...
Remote Code Execution in extension "freeCap CAPTCHA" (sr_freecap)
The extension fails to sanitize user input which allows to execute arbitrary Extbase actions resulting in Remote Code Execution...
Kartpay: bypass captcha in the form forgot password
Summary: In this issue I can bypass Captcha Protection in the Forgot Password form. Browsers Verified In: firefox url: https://affiliate.kartpay.com/ url vulnerable: https://affiliate.kartpay.com/forgotpassword Steps To Reproduce: 1-Enter your email in the forgot password parameter. 2-complet...
Knowage CAPTCHA Bypass Vulnerability
Knowage is a suite of open source tools for modern business analytics. A CAPTCHA bypass vulnerability exists in Knowage 6.1.1 and earlier versions. The vulnerability stems from the registration page not invalidating a valid CAPTCHA token. An attacker can exploit this vulnerability to bypass CAPTC...
CVE-2019-13190
In Knowage through 6.1.1, the sign up page does not invalidate a valid CAPTCHA token. This allows for CAPTCHA bypass in the signup page...
CVE-2019-13190
In Knowage through 6.1.1, the sign up page does not invalidate a valid CAPTCHA token. This allows for CAPTCHA bypass in the signup page...
Design/Logic Flaw
In Knowage through 6.1.1, the sign up page does not invalidate a valid CAPTCHA token. This allows for CAPTCHA bypass in the signup page...
CVE-2019-13190
In Knowage through 6.1.1, the sign up page does not invalidate a valid CAPTCHA token. This allows for CAPTCHA bypass in the signup page...
CVE-2019-13190
In Knowage through 6.1.1, the sign up page does not invalidate a valid CAPTCHA token. This allows for CAPTCHA bypass in the signup page...
CVE-2019-13190
Knowage up to version 6.1.1 contains a CAPTCHA bypass vulnerability where the signup page does not invalidate a valid CAPTCHA token, enabling bypass of CAPTCHA on registration. This affects the sign-up functionality and stems from the CAPTCHA token validation flaw described across multiple source...
CVE-2018-20988
The wpgform plugin before 0.94 for WordPress has eval injection in the CAPTCHA calculation...
CVE-2018-20988
The wpgform plugin before 0.94 for WordPress has eval injection in the CAPTCHA calculation...
Code injection
The wpgform plugin before 0.94 for WordPress has eval injection in the CAPTCHA calculation...
CVE-2018-20988
CVE-2018-20988 affects the WordPress Google Forms (wpgform) plugin prior to 0.94. The issue is an eval injection in the CAPTCHA calculation, as described across multiple sources (NVD, Red Hat, CNVD, CVE list, etc.). The connected documents do not provide explicit exploitation details, affected pr...
CVE-2018-20988
The wpgform plugin before 0.94 for WordPress has eval injection in the CAPTCHA calculation...
Goop - Google Search Scraper (Bypass CAPTCHA)
goop can perform google searches without being blocked by the CAPTCHA or hitting any rate limits. How it works? Facebook provides a debugger tool for its scraper. Interestingly, Google doesn't limit the requests made by this debugger whitelisted? and hence it can be used to scrap the google searc...