Predator

Predator アンチオートメーションシステム はじめに Predator は、アンチクローリング、アンチオートメーション、ボット検出の各手法を実演するために設計されたプロトタイプの Web アプリケーションです。 ハニーポット、アンチクローリングシステム、または脆弱性スキャナの誤検知テストベッドとして使用できます。 警告: ここで実演されている手法を、その正確な動作を理解せずに本番サーバーで使用することは強くお勧めしません。Web アプリケーションに応じて有効と思われる手法のみを実装すべきであることを忘れないでください。Predator...

CVE-2026-105130

LaraDashboard from 1.4.0 before 1.4.8 contains a race condition vulnerability in RegisterController::register that allows unauthenticated attackers to bypass the per-IP daily registration limit. Attackers can send many concurrent registration requests from one IP so all pass...

CVE-2026-105130 LaraDashboard 1.4.0 before 1.4.8 Race Condition Bypasses Per-IP Registration Limit

LaraDashboard from 1.4.0 before 1.4.8 contains a race condition vulnerability in RegisterController::register that allows unauthenticated attackers to bypass the per-IP daily registration limit. Attackers can send many concurrent registration requests from one IP so all pass...

anti-anti-automation

アンチ・アンチ自動化フレームワーク 一般的なアンチ自動化セキュリティ統制を回避するためのテクニックをまとめたフレームワークです。 一般的なアンチ自動化統制 メール認証 CAPTCHA SMS/電話 クレジットカード WASC-21: 不十分なアンチ自動化 http://projects.webappsec.org/w/page/13246938/Insufficient%20Anti-automation WE-799: 相互作用頻度の不適切な制御 http://cwe.mitre.org/data/definitions/799.html...

PT-2026-95263

Name of the Vulnerable Software and Affected Versions Clean Login WordPress plugin versions prior to 1.19 Description The plugin fails to verify the registration CAPTCHA when the stored session value is empty. This allows unauthenticated users to bypass anti-automation controls on the registratio...

CVE-2026-90977: Incorrect Comparison

The Clean Login WordPress plugin before 1.19 does not verify its registration CAPTCHA when the stored session value is empty, allowing unauthenticated users to bypass the anti-automation control on the registration form and create accounts without solving it...

CVE-2025-62314

HCL AION is affected by a vulnerability where certain endpoints lack sufficient anti-automation controls. Automated or scripted requests may be submitted without adequate rate limiting or challenge mechanisms, potentially resulting in unintended behavior or security impact under certain condition...

CVE-2025-62314 HCL AION is affected by multiple security vulnerabilities.

HCL AION is affected by a vulnerability where certain endpoints lack sufficient anti-automation controls. Automated or scripted requests may be submitted without adequate rate limiting or challenge mechanisms, potentially resulting in unintended behavior or security impact under certain condition...

EUVD-2025-210723

HCL AION is affected by a vulnerability where certain endpoints lack sufficient anti-automation controls. Automated or scripted requests may be submitted without adequate rate limiting or challenge mechanisms, potentially resulting in unintended behavior or security impact under certain condition...

CVE-2025-62314 HCL AION is affected by multiple security vulnerabilities.

HCL AION is affected by a vulnerability where certain endpoints lack sufficient anti-automation controls. Automated or scripted requests may be submitted without adequate rate limiting or challenge mechanisms, potentially resulting in unintended behavior or security impact under certain condition...

CVE-2025-62314

HCL AION is reported to have a vulnerability where certain endpoints lack sufficient anti-automation controls, allowing automated or scripted requests without proper rate limiting or challenges. The primary impact described is potential unintended behavior or security effects under specific condi...

CVE-2025-62314: Improper Restriction of Excessive Authentication Attempts

HCL AION is affected by a vulnerability where certain endpoints lack sufficient anti-automation controls. Automated or scripted requests may be submitted without adequate rate limiting or challenge mechanisms, potentially resulting in unintended behavior or security impact under certain condition...

PT-2026-71491

Name of the Vulnerable Software and Affected Versions HCL AION affected versions not specified Description Certain endpoints lack sufficient anti-automation controls, allowing automated or scripted requests to be submitted without adequate rate limiting or challenge mechanisms. This may result in...

Brute-Force Attack

ethycafides is vulnerable to brute-force attack. The vulnerability is due to the absence of specific anti-automation controls on the Admin UI login endpoint, which allows an attacker to perform credential testing attacks such as credential stuffing or password spraying to gain unauthorized access...

EUVD-2021-1501

Malware in sbrugna...

EUVD-2019-5245

Malware in sbrugna...

PT-2025-36508

Name of the Vulnerable Software and Affected Versions: Fides versions prior to 2.69.1 Description: Fides is an open-source privacy engineering platform. The Admin UI login endpoint relies on a general IP-based rate limit and lacks specific anti-automation controls, potentially allowing attackers ...

CVE-2020-8827

As of v1.5.0, the Argo API does not implement anti-automation measures such as rate limiting, account lockouts, or other anti-bruteforce measures. Attackers can submit an unlimited number of authentication attempts without consequence...

CVE-2019-13983

Directus 7 API before 2.2.2 has insufficient anti-automation, as demonstrated by lack of a CAPTCHA in core/Directus/Services/AuthService.php and endpoints/Auth.php...

BIT-ARGO-CD-2020-8827

As of v1.5.0, the Argo API does not implement anti-automation measures such as rate limiting, account lockouts, or other anti-bruteforce measures. Attackers can submit an unlimited number of authentication attempts without consequence...