MAL-2024-4882 Malicious code in captcha-py (PyPI)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in Blazor.Captcha (NuGet)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in Antі.CaptchaAPI (NuGet)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in 2CaptcһaAPІ (NuGet)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in 2Cаptcha.API (NuGet)

--- -= Per source details. Do not edit below this line.=-...

Improper Access Control

studiomitte/friendlycaptcha is vulnerable to Improper Access Control. The vulnerability is due to the extension failing to check the captcha field requirement in submitted form data, which lets an attacker bypass the captcha check...

FriendlyCaptcha Plugin for TYPO3 Captcha Check Bypass

An issue was discovered in the friendlycaptchaofficial aka Integration of Friendly Captcha extension before 0.1.4 for TYPO3. The extension fails to check the requirement of the captcha field in submitted form data, allowing a remote user to bypass the captcha check. This only affects the captcha...

GHSA-JG62-H7PV-HXGV FriendlyCaptcha Plugin for TYPO3 Captcha Check Bypass

An issue was discovered in the friendlycaptchaofficial aka Integration of Friendly Captcha extension before 0.1.4 for TYPO3. The extension fails to check the requirement of the captcha field in submitted form data, allowing a remote user to bypass the captcha check. This only affects the captcha...

CVE-2024-38873

An issue was discovered in the friendlycaptchaofficial aka Integration of Friendly Captcha extension before 0.1.4 for TYPO3. The extension fails to check the requirement of the captcha field in submitted form data, allowing a remote user to bypass the captcha check. This only affects the captcha...

CVE-2024-38873

CVE-2024-38873 concerns the TYPO3 extension friendlycaptcha_official (Integration of Friendly Captcha) before version 0.1.4. The issue is that the extension fails to verify the CAPTCHA requirement in submitted form data for the ext:form integration, allowing a remote user to bypass the CAPTCHA ch...

CVE-2024-38873

An issue was discovered in the friendlycaptchaofficial aka Integration of Friendly Captcha extension before 0.1.4 for TYPO3. The extension fails to check the requirement of the captcha field in submitted form data, allowing a remote user to bypass the captcha check. This only affects the captcha...

TYPO3 Security Vulnerabilities

TYPO3 is a free and open source content management system framework CMS/CMF from the Swiss TYPO3 Association. A security vulnerability exists in versions of TYPO3 prior to 0.1.4 that stems from a failure of the friendlycaptchaofficial extension to check the requirements of the CAPTCHA field in...

PT-2024-28249 · Typo3 · Friendlycaptcha Official

Name of the Vulnerable Software and Affected Versions: friendlycaptcha official extension versions prior to 0.1.4 for TYPO3 Description: The issue allows a remote user to bypass the captcha check due to the extension's failure to verify the captcha field in submitted form data. This specifically...

CVE-2024-38873

An issue was discovered in the friendlycaptchaofficial aka Integration of Friendly Captcha extension before 0.1.4 for TYPO3. The extension fails to check the requirement of the captcha field in submitted form data, allowing a remote user to bypass the captcha check. This only affects the captcha...

Insufficient Entropy

zendframework/zend-captcha is vulnerable to Insufficient Entropy. The vulnerability is due to the use of PHP's arrayrand function, which does not generate sufficient entropy, leading to predictable CAPTCHA words. The attacker can potentially brute force the CAPTCHA words by exploiting the weak...

New Phishing Campaign Deploys WARMCOOKIE Backdoor Targeting Job Seekers

Cybersecurity researchers have disclosed details of an ongoing phishing campaign that leverages recruiting- and job-themed lures to deliver a Windows-based backdoor named WARMCOOKIE. "WARMCOOKIE appears to be an initial backdoor tool used to scout out victim networks and deploy additional...

TYPO3-EXT-SA-2024-004: Broken Access Control in "Integration of Friendly Captcha" (friendlycaptcha_official)

More info at https://typo3.org/security/advisory/typo3-ext-sa-2024-004...

Zendframework Potential Information Disclosure and Insufficient Entropy vulnerability

In Zend Framework, ZendCaptchaWord v1 and Zend\Captcha\Word v2 generate a "word" for a CAPTCHA challenge by selecting a sequence of random letters from a character set. Prior to this advisory, the selection was performed using PHP's internal arrayrand function. This function does not generate...

GHSA-848F-MPH5-9PM9 Zendframework Potential Information Disclosure and Insufficient Entropy vulnerability

In Zend Framework, ZendCaptchaWord v1 and Zend\Captcha\Word v2 generate a "word" for a CAPTCHA challenge by selecting a sequence of random letters from a character set. Prior to this advisory, the selection was performed using PHP's internal arrayrand function. This function does not generate...

Zendframework potential Cross-site Scripting vector in `Zend_Service_ReCaptcha_MailHide`

ZendServiceReCaptchaMailHide had a potential XSS vulnerability. Due to the fact that the email address was never validated, and because its use of htmlentities did not include the encoding argument, it was potentially possible for a malicious user aware of the issue to inject a specially crafted...