Youxin Used Car App Has Logic Design Flaws

Youxin Used Car APP is a cell phone used car information buying service software. There is a logical design vulnerability in Ushin Used Car APP. Attackers can bombard the client with SMS messages by replaying packets that send CAPTCHA without restriction...

Happy Kangaroo App has SMS Bombing Vulnerability

Happy Kangaroo App is a financial app. There is an SMS bombing vulnerability in Happy Kangaroo APP. An attacker can exploit this vulnerability to replay packets sending CAPTCHA without restriction and bombard the client with SMS messages...

Honeypot strategy is no longer effectively preventing spam account signup

panel:title=Fix From 3.9.5 onwards we have turned off the honeypot in favour of using captcha anyone affected by this issue just needs to switch the CAPTCHA on...

Honeypot strategy is no longer effectively preventing spam account signup

panel:title=Fix From 3.9.5 onwards we have turned off the honeypot in favour of using captcha anyone affected by this issue just needs to switch the CAPTCHA on...

Logic design flaws in Anju App

Anjuke APP is a domestic real estate rental and sale service platform. A logical design vulnerability exists in Anjuke APP. An attacker can exploit this vulnerability to consume server resources and cause denial of service by sending unlimited CAPTCHAs to cell phones...

Used Car Home App Has SMS Bombing Vulnerability

Used Car Home App is a mobile application platform that helps users to buy and sell used cars. The Used Car House APP version 6.1.4 suffers from an SMS bombing vulnerability that allows an attacker to traverse a cell phone number and consume server resources and cause a denial of service by sendi...

140.127.202.12 XSS vulnerability

Open Bug Bounty ID: OBB-484372 Description| Value ---|--- Affected Website:| 140.127.202.12 Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Disclosure Standard:| Coordinated Disclosure base...

Logic Design Vulnerability in Catfish CMS/Blog System Logins

Catfish catfish CMS is open source PHP content management system. A logical design vulnerability exists in the Catfish CMS/Blog system login. Allow attackers to exploit the vulnerability to bypass the CAPTCHA authentication and carry out unlimited blasting attacks on the system...

WordPress Captcha Plugin < 4.4.5 Backdoor Vulnerability

The WordPress plugin SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description scriptoid"1.3.6.1.4.1.25623.1.0.112155";...

WordPress Captcha Plugin Backdoor

A backdoor vulnerability exists in WordPress Captcha plugin. Successful exploitation of this vulnerability allows remote attackers to change the effected site's content...

WordPress Captcha plugin <=4.4.4 - Backdoored

Backdoor found by WordFence team in WordPress Captcha plugin versions 4.3.6–4.4.4. Solution WordPress plugin repository team patched the plugin, but you need to decide on your own to use this plugin further or not...

Hidden Backdoor Found In WordPress Captcha Plugin Affects Over 300,000 Sites

Buying popular plugins with a large user-base and using it for effortless malicious campaigns have become a new trend for bad actors. One such incident happened recently when the renowned developer BestWebSoft sold a popular Captcha WordPress plugin to an undisclosed buyer, who then modified the...

Captcha 4.3.6–4.4.4 - Backdoored

The captcha WordPress plugin was affected by a Backdoored security vulnerability...

MicroTalk App Has SMS Bombing Vulnerability

MicroTalk App is a calling software. MicroTalk APP has SMS bombing vulnerability. The attacker sends unlimited CAPTCHA to the cell phone by catching packets through the forget password function, consumes server resources, and carries out SMS bombing...

base64Captcha

A flexible and various captcha package !Testhttps://github...

SMS Bombing Vulnerability in Xiaofeng Air Ching App Android Version

Ltd. developed with the work of the Xiao Feng Air Dorothy system APP, mainly used to monitor the indoor air quality and Xiao Feng Air Dorothy internal and external machine running status, monitoring items including PM2.5, formaldehyde, oxygen, temperature and humidity, and can be through the APP...

Securimage HTML Injection Vulnerability

Securimage is an open source free PHP CAPTCHA script for generating complex CAPTCHA images and CAPTCHA code. An HTML injection vulnerability exists in Securimage 3.6.4 and earlier versions. A remote attacker can send the '$SERVER'HTTPUSERAGENT'' parameter to the exampleform.ajax.php or...

Logic design flaws in Tap Tech's smart CAPTCHA system

Smart CAPTCHA system is a new generation of Internet CAPTCHA system. A logical design vulnerability exists in the Smart CAPTCHA System of Point and Click Technology. An attacker can bypass the graphical CAPTCHA of the mouse-click method by modifying the status code, which can be utilized to bypas...

This Week in Security News

Welcome to our weekly roundup, where we share what you need to know about the cybersecurity news and events that happened over the past few days. Below you’ll find a quick recap of topics followed by links to news articles and/or our blog posts providing additional insight. Be sure to check back...

Google’s reCaptcha Cracked Again

Google’s reCaptcha service has been cracked by a group of University of Maryland researchers who devised an automated attack that can break the service with 85 percent accuracy. The researchers created a tool called unCaptcha that is able to abuse the audio challenge option of Google’s reCaptcha ...