CVE-2023-41100

An issue was discovered in the hcaptcha aka hCaptcha for EXT:form extension before 2.1.2 for TYPO3. It fails to check that the required captcha field is submitted in the form data. allowing a remote user to bypass the CAPTCHA check...

Authentication flaw

An issue was discovered in the hcaptcha aka hCaptcha for EXT:form extension before 2.1.2 for TYPO3. It fails to check that the required captcha field is submitted in the form data. allowing a remote user to bypass the CAPTCHA check...

TYPO3 安全漏洞

TYPO3 is a free and open source content management system framework CMS/CMF from the TYPO3 Association in Switzerland. A security vulnerability exists in versions of TYPO3 prior to 2.1.2 that stems from an inability to check if the required CAPTCHA field is submitted in form data, allowing remote...

CVE-2023-41100

An issue was discovered in the hcaptcha aka hCaptcha for EXT:form extension before 2.1.2 for TYPO3. It fails to check that the required captcha field is submitted in the form data. allowing a remote user to bypass the CAPTCHA check...

CVE-2023-41100

CVE-2023-41100 affects the hCaptcha for EXT:form extension in TYPO3 prior to 2.1.2. The issue is that the required captcha field is not checked in form submissions, allowing a remote attacker to bypass the CAPTCHA check. Remediation: upgrade to version 2.1.2 or later (or apply vendor guidance). E...

WordPress Cartpauj Register Captcha Plugin <= 1.0.02 is vulnerable to Bypass Vulnerability

Software Cartpauj Register Captcha Type Plugin Vulnerable versions = 1.0.02 Fixed in 2.0.0 OWASP Top 10 A5: Security Misconfiguration Classification Bypass Vulnerability CVE CVE-2023-40673 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 2347148519cf Credits qilin99 Require...

Bots Are Better than Humans at Solving CAPTCHAs

Interesting research: "An Empirical Study & Evaluation of Modern CAPTCHAs": Abstract: For nearly two decades, CAPTCHAS have been widely used as a means of protection against bots. Throughout the years, as their use grew, techniques to defeat or bypass CAPTCHAS have continued to improve. Meanwhile...

CVE-2023-30786

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Benjamin Guy Captcha Them All plugin = 1.3.3 versions...

CVE-2023-30786

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Benjamin Guy Captcha Them All plugin = 1.3.3 versions...

CVE-2023-30786 WordPress Captcha Them All Plugin <= 1.3.3 is vulnerable to Cross Site Scripting (XSS)

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Benjamin Guy Captcha Them All plugin = 1.3.3 versions...

CVE-2023-30786

CVE-2023-30786 : The WordPress plugin Captcha Them All (

CVE-2023-30786 WordPress Captcha Them All Plugin <= 1.3.3 is vulnerable to Cross Site Scripting (XSS)

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Benjamin Guy Captcha Them All plugin = 1.3.3 versions...

WordPress plugin Captcha Them All 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting vulnerability...

Cybercriminals Abusing Cloudflare R2 for Hosting Phishing Pages, Experts Warn

Threat actors' use of Cloudflare R2 to host phishing pages has witnessed a 61-fold increase over the past six months. "The majority of the phishing campaigns target Microsoft login credentials, although there are some pages targeting Adobe, Dropbox, and other cloud apps," Netskope security...

Captcha Bypass

github.com/answerdev/answer is vulnerable to Captcha Bypass. The vulnerability exists due to an improper captcha mechanism in captcha.go, which allows an attacker to bypass the captcha technique and create multiple user accounts...

Improper Access Control

github.com/answerdev/answer is vulnerable to Improper Access Control. The vulnerability exists due to the usage of guessable CAPTCHA which allows an attacker to solve a captcha and brute force login attempts...

Phishing campaigns are using AMP URLs to avoid detection

Researchers have found a new phishing tactic which uses Google Accelerated Mobile Pages AMP to make URLs look trustworthy. The tactic is designed to slip past both software and users on the lookout for strange and untrustworthy domain names. AMP is an open-source HTML framework designed to make w...

CVE-2023-3897

Username enumeration is possible through Bypassing CAPTCHA in On-premise SureMDM Solution on Windows deployment allows attacker to enumerate local user information via error message. This issue affects SureMDM On-premise: 6.31 and below version...

CVE-2023-3897

Username enumeration is possible through Bypassing CAPTCHA in On-premise SureMDM Solution on Windows deployment allows attacker to enumerate local user information via error message. This issue affects SureMDM On-premise: 6.31 and below version...

Information disclosure

Username enumeration is possible through Bypassing CAPTCHA in On-premise SureMDM Solution on Windows deployment allows attacker to enumerate local user information via error message. This issue affects SureMDM On-premise: 6.31 and below version...