Malicious code in vio-captcha (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7e0d4ea8565e04756dcba1d4c9911caedecb38b6cc8717f68ee679883d19cb2d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7065 Malicious code in vio-captcha (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7e0d4ea8565e04756dcba1d4c9911caedecb38b6cc8717f68ee679883d19cb2d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in bussardweg4av2 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 5dc2b9d9e5d1ece75c0261406e9630389fdc48845f2aa80aa2bc9ad61897531c --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign: funcaptcha-ru Reasons based on the campaign: - infostealer...

Malicious code in pythoncaptchasolver (PyPI)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-5791 Malicious code in pythoncaptchasolver (PyPI)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-4882 Malicious code in captcha-py (PyPI)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in Blazor.Captcha (NuGet)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in Antі.CaptchaAPI (NuGet)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in 2CaptcһaAPІ (NuGet)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in 2Cаptcha.API (NuGet)

--- -= Per source details. Do not edit below this line.=-...

Improper Access Control

studiomitte/friendlycaptcha is vulnerable to Improper Access Control. The vulnerability is due to the extension failing to check the captcha field requirement in submitted form data, which lets an attacker bypass the captcha check...

FriendlyCaptcha Plugin for TYPO3 Captcha Check Bypass

An issue was discovered in the friendlycaptchaofficial aka Integration of Friendly Captcha extension before 0.1.4 for TYPO3. The extension fails to check the requirement of the captcha field in submitted form data, allowing a remote user to bypass the captcha check. This only affects the captcha...

GHSA-JG62-H7PV-HXGV FriendlyCaptcha Plugin for TYPO3 Captcha Check Bypass

An issue was discovered in the friendlycaptchaofficial aka Integration of Friendly Captcha extension before 0.1.4 for TYPO3. The extension fails to check the requirement of the captcha field in submitted form data, allowing a remote user to bypass the captcha check. This only affects the captcha...

CVE-2024-38873

An issue was discovered in the friendlycaptchaofficial aka Integration of Friendly Captcha extension before 0.1.4 for TYPO3. The extension fails to check the requirement of the captcha field in submitted form data, allowing a remote user to bypass the captcha check. This only affects the captcha...

CVE-2024-38873

An issue was discovered in the friendlycaptchaofficial aka Integration of Friendly Captcha extension before 0.1.4 for TYPO3. The extension fails to check the requirement of the captcha field in submitted form data, allowing a remote user to bypass the captcha check. This only affects the captcha...

TYPO3 Security Vulnerabilities

TYPO3 is a free and open source content management system framework CMS/CMF from the Swiss TYPO3 Association. A security vulnerability exists in versions of TYPO3 prior to 0.1.4 that stems from a failure of the friendlycaptchaofficial extension to check the requirements of the CAPTCHA field in...

CVE-2024-38873

An issue was discovered in the friendlycaptchaofficial aka Integration of Friendly Captcha extension before 0.1.4 for TYPO3. The extension fails to check the requirement of the captcha field in submitted form data, allowing a remote user to bypass the captcha check. This only affects the captcha...

PT-2024-28249 · Typo3 · Friendlycaptcha Official

Name of the Vulnerable Software and Affected Versions: friendlycaptcha official extension versions prior to 0.1.4 for TYPO3 Description: The issue allows a remote user to bypass the captcha check due to the extension's failure to verify the captcha field in submitted form data. This specifically...

CVE-2024-38873

CVE-2024-38873 concerns the TYPO3 extension friendlycaptcha_official (Integration of Friendly Captcha) before version 0.1.4. The issue is that the extension fails to verify the CAPTCHA requirement in submitted form data for the ext:form integration, allowing a remote user to bypass the CAPTCHA ch...

Insufficient Entropy

zendframework/zend-captcha is vulnerable to Insufficient Entropy. The vulnerability is due to the use of PHP's arrayrand function, which does not generate sufficient entropy, leading to predictable CAPTCHA words. The attacker can potentially brute force the CAPTCHA words by exploiting the weak...