Design/Logic Flaw

The BestWebSoft Captcha plugin before 4.0.7 for WordPress allows remote attackers to bypass the CAPTCHA protection mechanism and obtain administrative access via unspecified vectors...

Design/Logic Flaw

The BestWebSoft Google Captcha aka reCAPTCHA plugin before 1.13 for WordPress allows remote attackers to bypass the CAPTCHA protection mechanism and obtain administrative access via unspecified vectors...

CVE-2015-0890

The CVE-2015-0890 issue affects the WordPress plugin “Google Captcha (reCAPTCHA)” by BestWebSoft, with vulnerable versions prior to 1.13 (notably 1.12 and earlier). It enables a CAPTCHA authentication bypass (CWE-254), allowing remote attackers to log in as an administrator via unspecified vector...

CVE-2014-9283

The BestWebSoft Captcha plugin before 4.0.7 for WordPress allows remote attackers to bypass the CAPTCHA protection mechanism and obtain administrative access via unspecified vectors...

CVE-2015-0890

The BestWebSoft Google Captcha aka reCAPTCHA plugin before 1.13 for WordPress allows remote attackers to bypass the CAPTCHA protection mechanism and obtain administrative access via unspecified vectors...

CVE-2014-9283

The CVE-2014-9283 entry concerns the BestWebSoft Captcha plugin for WordPress, affected before version 4.0.7. A vulnerability allows remote attackers to bypass CAPTCHA protection and gain administrative access via unspecified vectors. Public references across CNVD/JVN/CVE records consistently des...

Google Captcha (reCAPTCHA) by BestWebSoft vulnerable to CAPTCHA authentication bypass

Overview Google Captcha reCAPTCHA by BestWebSoft is a plugin for WordPress. Google Captcha reCAPTCHA by BestWebSoft contains a CAPTCHA authentication bypass vulnerability CWE-254. Impact If this vulnerability is exploited, an attacker may be able to successfully login to WordPress and access an...

BestWebSoft Captcha plugin vulnerable to CAPTCHA authentication bypass

Overview Captcha provided by BestWebSoft is a plugin for WordPress. Captcha contains a CAPTCHA authentication bypass vulnerability CWE-254. Impact If this vulnerability is exploited, an attacker may be able to successfully login to WordPress and access an administrative interface without...

JVN#93727681: BestWebSoft Captcha plugin vulnerable to CAPTCHA authentication bypass

Captcha provided by BestWebSoft is a plugin for WordPress. Captcha contains a CAPTCHA authentication bypass vulnerability CWE-254. Impact If this vulnerability is exploited, an attacker may be able to successfully login to WordPress and access an administrative interface without authentication...

JVN#55063777: Google Captcha (reCAPTCHA) by BestWebSoft vulnerable to CAPTCHA authentication bypass

Google Captcha reCAPTCHA by BestWebSoft is a plugin for WordPress. Google Captcha reCAPTCHA by BestWebSoft contains a CAPTCHA authentication bypass vulnerability CWE-254. Impact If this vulnerability is exploited, an attacker may be able to successfully login to WordPress and access an...

Captcha <= 4.0.6 - Captcha Bypass

The captcha WordPress plugin was affected by a Captcha Bypass security vulnerability...

MantisBT 1.2.x < 1.2.19 Multiple Vulnerabilities

According to its version number, the MantisBT application hosted on the remote web server is 1.2.x prior to 1.2.19. It is, therefore, affected by the following vulnerabilities : - An XSS vulnerability exists in 'admin/install.php' that allows remote attackers to inject arbitrary script data via t...

MantisBT 1.2.x < 1.2.19 Multiple Vulnerabilities

Binary data 8903.prm...

ecshop background a brute-force CAPTCHA bypass-vulnerability warning-the black bar safety net

ecshop background of violence crack Detailed description: ! 选区 092.jpg Login request for code area username=admin&password=admin888&captcha=1 1 1 1&act=signin Request remove cookie in ECSCPID=parameter Service the end it will not verify the CAPTCHA directly to verify that the account password is...

phpwind can bypass the verification code to continue the violent crack users, demo demo-a vulnerability warning-the black bar safety net

First came to phpwind official website to see, found phpwind has been updated to 9. 0, website is the latest program ! 1. png Then came the landing place can be seen, the site has CAPTCHA restrictions, sank half） ! 2. png Then pick an account login see, the input error will find that there are th...

mantisbt: multiple issues

CVE-2014-9571 cross-side scripting Cross-site scripting XSS vulnerability in admin/install.php allows remote attackers to inject arbitrary web script or HTML via the 1 adminusername or 2 adminpassword parameter. - CVE-2014-9572 information disclosure It was discovered that mantisbt does not...

ecshop a CAPTCHA bypass logic vulnerability-vulnerability warning-the black bar safety net

Although the code is encrypted, but logically there is a point problem The problem ..\includes\clscaptcha.php By the verification function can be seen directly returned, and no authentication failure processing function checkword$word $recorded = isset$SESSION$this-sessionword ?...

Facebook Linkshim Bypass Vulnerability

This Bypasses the l.php in facebook and granting you full control to send links in your victims without the captcha. It will also be masked by on.fb.me Speaking of Bypass it does not redirect the victim to the warning page. Usage Info You just need some fast moves to create this exploit before it...

CVE-2014-8034

Cisco WebEx Meetings Server 1.5 presents the same CAPTCHA challenge for each login attempt, which makes it easier for remote attackers to obtain access via a brute-force approach of guessing usernames, aka Bug ID CSCuj40321...

Design/Logic Flaw

Cisco WebEx Meetings Server 1.5 presents the same CAPTCHA challenge for each login attempt, which makes it easier for remote attackers to obtain access via a brute-force approach of guessing usernames, aka Bug ID CSCuj40321...