566 matches found
Snapchat: Captcha Bypass in Snapchat's Geofilter Submission Process
Hi, Overview: Snapchat provides a form in which users can submit "Geofilters". These are filters which get applied to users snaps when they are in specific geolocations. The form https://www.snapchat.com/geofilters/submit.html allows for the submission of these "Geofilters" as an anonymous user...
CVE-2015-0890
The CVE-2015-0890 issue affects the WordPress plugin “Google Captcha (reCAPTCHA)” by BestWebSoft, with vulnerable versions prior to 1.13 (notably 1.12 and earlier). It enables a CAPTCHA authentication bypass (CWE-254), allowing remote attackers to log in as an administrator via unspecified vector...
JVN#55063777: Google Captcha (reCAPTCHA) by BestWebSoft vulnerable to CAPTCHA authentication bypass
Google Captcha reCAPTCHA by BestWebSoft is a plugin for WordPress. Google Captcha reCAPTCHA by BestWebSoft contains a CAPTCHA authentication bypass vulnerability CWE-254. Impact If this vulnerability is exploited, an attacker may be able to successfully login to WordPress and access an...
Google Captcha <= 1.12 - Authentication Bypass
The reCaptcha by BestWebSoft WordPress plugin was affected by an Authentication Bypass security vulnerability...
Google's reCAPTCHA can tell if You're a Spambot or Human with Just a Click
Many a time we deal with those strange words and phrases that ask us to type them back in plaintext while signing up for an account. Yes, those increasingly annoying CAPTCHAs !!, which are both time-consuming and sometimes very difficult to read. If you really are tired of these distorted series ...
Google Retools reCAPTCHA with No CAPTCHA
Google is getting right to the point with the latest update to its reCAPTCHA authentication system. Rather than have users signing in to an online service try to decipher blurred text, Google has simplified the process by simply asking users whether they’re a bot. One click later, they’re...
Google reCAPTCHA <= 3.1.3 - Reflected XSS
The wp-recaptcha WordPress plugin was affected by a Reflected XSS security vulnerability...
Google Retools reCAPTCHA Authentication System
Google announced a change to its reCAPTCHA authentication system late Friday wherein the company will begin creating different types of puzzles for different users, use numeric CAPTCHAs and move away from more obscure, hard-to-read distorted letters. CAPTCHAs are the series of distorted letter...
Fedora 19 : ReviewBoard-1.7.12-1.fc19 / python-djblets-0.7.16-1.fc19 (2013-13850)
As with all ReviewBoard updates, you will need to run 'rb-site upgrade /path/to/site' for all installed sites after applying this update. == Action Required == The default Apache configuration is now more strict with how it serves up file attachments. This does not apply to existing installations...
Fedora 18 : ReviewBoard-1.7.12-1.fc18 / python-djblets-0.7.16-1.fc18 (2013-13911)
As with all ReviewBoard updates, you will need to run 'rb-site upgrade /path/to/site' for all installed sites after applying this update. == Action Required == The default Apache configuration is now more strict with how it serves up file attachments. This does not apply to existing installations...
Google reCAPTCHA WordPress Cross Site Scripting
Exploit Title: Google reCAPTCHA Wordpress Plugin - Reflected Cross-Site Scripting XSS Vulnerability Script Page : http://www.google.com/recaptcha http://wordpress.org/extend/plugins/wp-recaptcha Date: 11-12-2011 Author : RandomStorm - http://www.randomstorm.com Avram Marius Gabriel d3v1l Tested o...
Debian DSA-2338-1 : moodle - several vulnerabilities
Several cross-site scripting and information disclosure issues have been fixed in Moodle, a course management system for online learning : - MSA-11-0020 Continue links in error messages can lead offsite - MSA-11-0024 reCAPTCHA images were being authenticated from an older server - MSA-11-0025 Gro...
DSA-2338-1 moodle - several
Bulletin has no description...
CVE-2011-0759
Multiple cross-site request forgery CSRF vulnerabilities in the configuration page in the Recaptcha aka WP-reCAPTCHA plugin 2.9.8.2 for WordPress allow remote attackers to hijack the authentication of administrators for requests that disable the CAPTCHA requirement or insert cross-site scripting...
Cross site request forgery (csrf)
Multiple cross-site request forgery CSRF vulnerabilities in the configuration page in the Recaptcha aka WP-reCAPTCHA plugin 2.9.8.2 for WordPress allow remote attackers to hijack the authentication of administrators for requests that disable the CAPTCHA requirement or insert cross-site scripting...
CVE-2011-0759
CVE-2011-0759 affects the WordPress WP-reCAPTCHA (Recaptcha) plugin up to version 2.9.8.2. The vulnerability is due to multiple cross-site request forgery (CSRF) vectors in the configuration page, allowing remote attackers to hijack administrator sessions and to inject or disable CAPTCHA/XSS cont...
CVE-2011-0759
Multiple cross-site request forgery CSRF vulnerabilities in the configuration page in the Recaptcha aka WP-reCAPTCHA plugin 2.9.8.2 for WordPress allow remote attackers to hijack the authentication of administrators for requests that disable the CAPTCHA requirement or insert cross-site scripting...
PT-2011-2614
Name of the Vulnerable Software and Affected Versions WP-reCAPTCHA plugin version 2.9.8.2 Description The issue concerns multiple cross-site request forgery CSRF vulnerabilities in the configuration page of the WP-reCAPTCHA plugin for WordPress. These vulnerabilities allow remote attackers to...
CVE-2011-0759: Cross-Site Request Forgery (CSRF)
Multiple cross-site request forgery CSRF vulnerabilities in the configuration page in the Recaptcha aka WP-reCAPTCHA plugin 2.9.8.2 for WordPress allow remote attackers to hijack the authentication of administrators for requests that disable the CAPTCHA requirement or insert cross-site scripting...