2052 matches found
CVE-2024-44821
ZZCMS 2023 contains a vulnerability in the captcha reuse logic located in /inc/function.php. The checkyzm function does not properly refresh the captcha value after a failed validation attempt. As a result, an attacker can exploit this flaw by repeatedly submitting the same incorrect captcha...
CVE-2024-44821
ZZCMS 2023 contains a vulnerability in the captcha reuse logic located in /inc/function.php. The checkyzm function does not properly refresh the captcha value after a failed validation attempt. As a result, an attacker can exploit this flaw by repeatedly submitting the same incorrect captcha...
CVE-2024-44821
ZZCMS 2023 contains a vulnerability in the captcha reuse logic located in /inc/function.php. The checkyzm function does not properly refresh the captcha value after a failed validation attempt. As a result, an attacker can exploit this flaw by repeatedly submitting the same incorrect captcha...
ZZCMS 安全漏洞
ZZCMS is a content management system CMS from the ZZCMS team in China. A security vulnerability exists in ZZCMS version 2023, which stems from the checkyzm function failing to properly refresh the CAPTCHA value after a failed validation attempt...
CVE-2024-44821
ZZCMS 2023 contains a vulnerability in the captcha reuse logic located in /inc/function.php. The checkyzm function does not properly refresh the captcha value after a failed validation attempt. As a result, an attacker can exploit this flaw by repeatedly submitting the same incorrect captcha...
CVE-2024-44821
ZZCMS 2023 contains a vulnerability in the captcha reuse logic in /inc/function.php. The checkyzm function does not properly refresh the captcha value after a failed validation, enabling an attacker to repeatedly submit the same incorrect captcha and potentially infer the correct value via error ...
GO-2023-1657 Answer has Guessable CAPTCHA in github.com/answerdev/answer
Answer has Guessable CAPTCHA in github.com/answerdev/answer...
Exploit for Observable Discrepancy in 42Gears Suremdm
CVE-2023-3897 Username enumeration is possible through Bypassi...
Malware Campaign Lures Users With Fake W2 Form
The following analysts contributed to the research: Evan McCann, Matt Smith, Ipek Solak, Jake McMahon Rapid7 has recently observed an campaign targeting users searching for W2 forms using the Microsoft search engine Bing. Users are subsequently directed to a fake IRS website, enticing them to...
Malicious code in sap-captcha (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis f072ac7d874caf5a56f397d58f7b7de64f2ea4c63c3ea44846eb84d43d8f3389 The OpenSSF Package Analysis project identified 'sap-captcha' @ 0.0.0 npm as malicious. It is considered malicious because: - The package...
MAL-2024-7661 Malicious code in sap-captcha (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis f072ac7d874caf5a56f397d58f7b7de64f2ea4c63c3ea44846eb84d43d8f3389 The OpenSSF Package Analysis project identified 'sap-captcha' @ 0.0.0 npm as malicious. It is considered malicious because: - The package...
Exploit for CVE-2024-39211
CVE-2024-39211 Kaiten User Enumeration Kaitenhttps://kait...
MAL-2024-7065 Malicious code in vio-captcha (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7e0d4ea8565e04756dcba1d4c9911caedecb38b6cc8717f68ee679883d19cb2d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in vio-captcha (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7e0d4ea8565e04756dcba1d4c9911caedecb38b6cc8717f68ee679883d19cb2d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in bussardweg4av2 (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 5dc2b9d9e5d1ece75c0261406e9630389fdc48845f2aa80aa2bc9ad61897531c --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign: funcaptcha-ru Reasons based on the campaign: - infostealer...
MAL-2024-5791 Malicious code in pythoncaptchasolver (PyPI)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in pythoncaptchasolver (PyPI)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-4882 Malicious code in captcha-py (PyPI)
--- -= Per source details. Do not edit below this line.=-...