Design/Logic Flaw

Peter's Math Anti-Spam Spinoff plugin for WordPress generates audio CAPTCHA clips by concatenating static audio files without any additional distortion, which allows remote attackers to bypass CAPTCHA protection by reading certain bytes from the generated clip...

CVE-2008-7216

The CVE-2008-7216 issue affects Peter's Math Anti-Spam Spinoff plugin for WordPress. The plugin generates audio CAPTCHA clips by concatenating static audio files without distortion, enabling a remote attacker to bypass CAPTCHA protection by reading certain bytes from the generated clip. Affected ...

CVE-2008-7216

Peter's Math Anti-Spam Spinoff plugin for WordPress generates audio CAPTCHA clips by concatenating static audio files without any additional distortion, which allows remote attackers to bypass CAPTCHA protection by reading certain bytes from the generated clip...

WordPress Peter's Math Anti-Spam Plugin - BYPASS

Because of this vulnerability, the attackers can bypass CAPTCHA protection by reading certain bytes from the generated clip. Solution Update the plugin...

Vulnerability in Dumb math captcha for WordPress

Здравствуйте 3APA3A! Сообщаю вам о найденной мною Insufficient Anti-automation уязвимости в плагине Dumb math captcha для WordPress. Insufficient Anti-automation: При передаче параметра action со значением commentopenid, значение ответа капчи не проверяется, что позволяет обойти капчу на страница...

Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc. Dumb math captcha: protection bypass backdoor...

Vulnerabilities in Dumb math captcha for WordPress

Здравствуйте 3APA3A! Сообщаю вам о найденных мною Insufficient Anti-automation и Full path disclosure уязвимостях в плагине Dumb math captcha для WordPress. Insufficient Anti-automation: Капча на страницах записей уязвима к Constant values bypass method, который я описал в проекте Month of Bugs i...

D-Link Products Captcha Bypass Vulnerability

Exploit for hardware platform in category remote exploits ============================================ D-Link Products Captcha Bypass Vulnerability ============================================ D-Link Captcha Bypass ------------------------------------- D-Link released new firmware designed to...

D-Link - Captcha Bypass

D-Link - Captcha Bypass D-Link Captcha Bypass ------------------------------------- D-Link released new firmware designed to protect against malware that alters DNS settings by logging in to the router using default administrative credentials. There is a flaw in the captcha authentication system...

Joomla Component ArtForms 2.1 b7 Remote File Inclusion Vulnerabilities

Exploit for unknown platform in category web applications ====================================================================== Joomla Component ArtForms 2.1 b7 Remote File Inclusion Vulnerabilities ====================================================================== ArtForms 2.1b7 remote file...

Joomla ArtForms 2.1b7 Remote File Inclusion

ArtForms 2.1b7 remote file includes From Turkey iskorpitx O bir dünya markası Asla Taklit Edilemez // swfmovie.php - swf output and config / output captcha image / / output captcha mp3 / ----------------------------------------------------------------------------------...

Joomla Component ArtForms 2.1 b7 Remote File Inclusion Vulnerabilities

No description provided by source. ArtForms 2.1b7 remote file includes From Turkey iskorpitx O bir dünya markası Asla Taklit Edilemez // swfmovie.php - swf output and config / output captcha image / / output captcha mp3 /...

Joomla! Component ArtForms 2.1 b7 - Remote File Inclusion

Joomla! Component ArtForms 2.1 b7 - Remote File Inclusion ArtForms 2.1b7 remote file includes From Turkey iskorpitx O bir dünya markası Asla Taklit Edilemez // swfmovie.php - swf output and config / output captcha image / / output captcha mp3 /...

Joomla! Component ArtForms 2.1 b7 - Remote File Inclusion

ArtForms 2.1b7 remote file includes From Turkey iskorpitx O bir dünya markası Asla Taklit Edilemez // swfmovie.php - swf output and config / output captcha image / / output captcha mp3 / ----------------------------------------------------------------------------------...

D-Link - Captcha Bypass

D-Link Captcha Bypass ------------------------------------- D-Link released new firmware designed to protect against malware that alters DNS settings by logging in to the router using default administrative credentials. There is a flaw in the captcha authentication system that allows an attacker ...

D-Link CAPTCHA Bypass

D-Link Captcha Partially Broken May 12th, 2009 Hack-A-Day reported on D-Link’s new captcha system designed to protect against malware that alters DNS settings by logging in to the router using default administrative credentials. I downloaded the new firmware onto our DIR-628 to take a look, and...

Formshield Captcha - Older Version vulnerable to replay attacks

Replay attack on CAPTCHA Libraries Summary A CAPTCHA implementation that we tested were found to be vulnerable to replay attacks. The attack is explained in detail for Formshield – A popular DOT NET CAPTCHA implementation. NOTE: We discovered this during a Black Box engagement with one of our...

The use of injection techniques to attack the mail server and defenses and(II)-vulnerability warning-the black bar safety net

IIIinformation leaks Use of the technique: IMAP injection User Authentication Required: No The use of IMAP injection can be obtained using other methods can not get IMAP server information. If the user can the command“CAPABILITY”is injected into the parameter“mailbox”: |...

Directory traversal

Directory traversal vulnerability in captcha/captchaimage.php in the RWCards comrwcards 3.0.11 component for Joomla!, when magicquotesgpc is disabled, allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the img parameter...

Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc. E107: обход CAPTCHA, межсайтовый скриптинг...