EUVD-2023-50944

Malicious code in bioql PyPI...

CVE-2023-46777

Cross-Site Request Forgery CSRF vulnerability in Custom Login Page | Temporary Users | Rebrand Login | Login Captcha plugin = 1.1.3 versions...

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in Custom Login Page | Temporary Users | Rebrand Login | Login Captcha plugin = 1.1.3 versions...

CVE-2023-46777: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Custom Login Page | Temporary Users | Rebrand Login | Login Captcha plugin = 1.1.3 versions...

WordPress Plugin Custom Login Page | Temporary Users | Rebrand Login | Login Captcha Cross-Site Request Forgery Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. WordPress Plugin Custom Login Page |...

PT-2023-30206 · WordPress · Custom Login Page | Temporary Users | Rebrand Login | Login Captcha

Name of the Vulnerable Software and Affected Versions: Custom Login Page | Temporary Users | Rebrand Login | Login Captcha plugin versions 1.1.3 and earlier Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick...

D-Link DIR-823G 命令注入漏洞

D-Link DIR-823G is an AC1200M dual-band gigabit wireless router.A command injection vulnerability exists in the HNAP1 protocol in D-Link DIR-823G version 1.0.2B05. An attacker can execute arbitrary Web scripts using shell meta characters in the Captcha field of the login section...

Design/Logic Flaw

/admin/loginc.php in Allen Disk 1.6 doesn't check if isset$SESSION'captcha''code' == 1, which leads to CAPTCHA bypass by emptying $POST'captcha'...

CVE-2017-9091

/admin/loginc.php in Allen Disk 1.6 doesn't check if isset$SESSION'captcha''code' == 1, which leads to CAPTCHA bypass by emptying $POST'captcha'...

ecshop设计缺陷.会员账号可暴力破解

简要描述： 乌云上面很多都是爆破验证码..怎么没人发爆破账号密码的... 详细说明： 在www.ecshop.cn 做的测试 登陆口连个简单的验证码都没有设置...一些网站的管理后台也有没验证码.这样就可以爆破了.先拿会员账号做个测试... 漏洞证明： img src="https://images.seebug.org/upload/201305/3009142831689f1beb4c45937af23a32a3389e7a.jpg" alt="1.jpg" widt...