CVE-2024-6517

The CVE concerns the WordPress plugin Contact Form 7 Math Captcha, affected versions

WordPress Contact Form 7 Math Captcha Plugin <= 2.0.1 is vulnerable to Cross Site Scripting (XSS)

Software Contact Form 7 Math Captcha Type Plugin Vulnerable versions = 2.0.1 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-6517 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 1067711fa4c4 Credits...

WordPress plugin Contact Form 7 Math Captcha 安全漏洞

WordPress and the WordPress plugin are products of the WordPress Foundation, a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in the WordPress plugin...

PT-2024-37683 · WordPress · Contact Form 7 Math Captcha

Name of the Vulnerable Software and Affected Versions: Contact Form 7 Math Captcha WordPress plugin versions 2.0.1 and earlier Description: The issue is related to a Reflected Cross-Site Scripting problem, where a parameter is not properly sanitized and escaped before being outputted back in the...

Clever Social Engineering Attack Using Captchas

This is really interesting. Its a phishing attack targeting GitHub users, tricking them to solve a fake Captcha that actually runs a script that is copied to the command line. Clever...

This Windows PowerShell Phish Has Scary Potential

ManyGitHub users this week received a novel phishing email warning of critical security holes in their code. Those who clicked the link for details were asked to distinguish themselves from bots by pressing a combination of keyboard keys that causes Microsoft Windows to download password-stealing...

CVE-2024-44821

ZZCMS 2023 contains a vulnerability in the captcha reuse logic located in /inc/function.php. The checkyzm function does not properly refresh the captcha value after a failed validation attempt. As a result, an attacker can exploit this flaw by repeatedly submitting the same incorrect captcha...

CVE-2024-44821

ZZCMS 2023 contains a vulnerability in the captcha reuse logic located in /inc/function.php. The checkyzm function does not properly refresh the captcha value after a failed validation attempt. As a result, an attacker can exploit this flaw by repeatedly submitting the same incorrect captcha...

ZZCMS 安全漏洞

ZZCMS is a content management system CMS from the ZZCMS team in China. A security vulnerability exists in ZZCMS version 2023, which stems from the checkyzm function failing to properly refresh the CAPTCHA value after a failed validation attempt...

CVE-2024-44821

ZZCMS 2023 contains a vulnerability in the captcha reuse logic located in /inc/function.php. The checkyzm function does not properly refresh the captcha value after a failed validation attempt. As a result, an attacker can exploit this flaw by repeatedly submitting the same incorrect captcha...

CVE-2024-44821

ZZCMS 2023 contains a vulnerability in the captcha reuse logic located in /inc/function.php. The checkyzm function does not properly refresh the captcha value after a failed validation attempt. As a result, an attacker can exploit this flaw by repeatedly submitting the same incorrect captcha...

CVE-2024-44821

ZZCMS 2023 contains a vulnerability in the captcha reuse logic in /inc/function.php. The checkyzm function does not properly refresh the captcha value after a failed validation, enabling an attacker to repeatedly submit the same incorrect captcha and potentially infer the correct value via error ...

GO-2023-1657 Answer has Guessable CAPTCHA in github.com/answerdev/answer

Answer has Guessable CAPTCHA in github.com/answerdev/answer...

Exploit for Observable Discrepancy in 42Gears Suremdm

CVE-2023-3897 Username enumeration is possible through Bypassi...

Malware Campaign Lures Users With Fake W2 Form

The following analysts contributed to the research: Evan McCann, Matt Smith, Ipek Solak, Jake McMahon Rapid7 has recently observed an campaign targeting users searching for W2 forms using the Microsoft search engine Bing. Users are subsequently directed to a fake IRS website, enticing them to...

Malicious code in sap-captcha (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis f072ac7d874caf5a56f397d58f7b7de64f2ea4c63c3ea44846eb84d43d8f3389 The OpenSSF Package Analysis project identified 'sap-captcha' @ 0.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2024-7661 Malicious code in sap-captcha (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis f072ac7d874caf5a56f397d58f7b7de64f2ea4c63c3ea44846eb84d43d8f3389 The OpenSSF Package Analysis project identified 'sap-captcha' @ 0.0.0 npm as malicious. It is considered malicious because: - The package...

Exploit for CVE-2024-39211

CVE-2024-39211 Kaiten User Enumeration Kaitenhttps://kait...

Malicious code in vio-captcha (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7e0d4ea8565e04756dcba1d4c9911caedecb38b6cc8717f68ee679883d19cb2d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7065 Malicious code in vio-captcha (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7e0d4ea8565e04756dcba1d4c9911caedecb38b6cc8717f68ee679883d19cb2d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...