CVE-2023-3897

CVE-2023-3897 Windows 배포에서 On-premise SureMDM 솔루션의 CAPTCHA 우회를 통해 사용자 이름 열거가 가능하며, 이를 통해 공격자가 오류 메시지를 통해 로컬 사용자 정보를 열거할 수 있습니다. 이 문제는 SureMDM On-premise 6.31 및 이하 버전에 영향을 미칩니다. https://nvd.nist.gov/vuln/detail/CVE-2023-3897...

ai-captcha-bypass

AI 기반 CAPTCHA 솔버 이 프로젝트는 OpenAI의 GPT-4o 및 Google Gemini와 같은 대형 멀티모달 모델LMM을 사용하여 다양한 유형의 CAPTCHA를 자동으로 해결하는 Python 기반 명령줄 도구입니다. Selenium을 활용한 웹 브라우저 자동화를 통해 웹 페이지와 상호작용하고 실시간으로 CAPTCHA를 해결합니다. 성공적으로 해결된 캡처는 successfulsolves 디렉토리에 GIF로 기록됩니다. 상세 블로그 게시물 :...

GoogleRecaptchaBypass

Google Recaptcha Solver 우리는 봇을 사랑합니다 ❤️, 하지만 Google은 그렇지 않죠. 그래서 Google reCAPTCHA를 우회하는 해결책을 준비했습니다. Google reCAPTCHA를 5초 이내에 해결하세요! 🚀 이것은 DrissionPage 라이브러리를 사용하여 Google reCAPTCHA를 해결하는 Python 스크립트입니다. Selenium 구현은 곧 추가될 예정입니다. 최근 업데이트 좋은 소식입니다! Selenium 구현이 추가되었습니다. 기여해 주신 @obaskly님께 감사드립니다. 자세한...

TOTOLINK/Realtek Routers - CAPTCHA Bypass

On certain TOTOLINK Realtek SDK based routers, the CAPTCHA text can be retrieved via a POST request to the boafrm/formLogin URI with the JSON payload "topicurl":"setting/getSanvas". This allows an unauthenticated attacker to bypass CAPTCHA verification, gaining unauthorized access to restricted...

AudioCaptchaBypass-CVE-2008-2019

Эксплойт для CVE-2008-2019 - Simple Machines Form SMF 1.1.4 и ниже. SMF использует аудио-капчу, состоящую из женского голоса, произносящего каждую букву алфавита. Пользователь который может быть слепым должен ввести эти буквы, чтобы пройти проверку. Уязвимость, идентифицированная как CVE-2008-201...

CVE-2019-17525

CVE-2019-17525 D-LINK 라우터 "모델 번호: DIR-615" - "펌웨어 버전:20.10" & "하드웨어 버전:T1" D-LINK 라우터 "DIR-615" 펌웨어 버전:20.10 및 하드웨어 버전:T1의 로그인 페이지에서 발견된 취약점으로, 공격자가 무차별 대입BRUTEFORCING을 통해 로그인 페이지의 CAPTCHA를 쉽게 우회할 수 있습니다. 대상 D-LINK 라우터 "모델 번호: DIR-615" 펌웨어 버전:20.10 및 하드웨어 버전:T1의 "로그인 페이지"라우터 로그인의 IP 주소. 공격 시나리오 및...

goop

goop Google Search Scraper Note: It no longer works. Google team told me it's not a legitimate issue when I reported it to them but now they just silently fixed it. Contents Introduction How it works? Usage Installation Example Legal Introduction goop can perform google searches without being...

goop

goop Скрапер поиска Google Примечание: Больше не работает. Команда Google сказала мне, что это не является легитимной проблемой, когда я сообщил им об этом, но теперь они просто молча это исправили. Содержание Введение Как это работает? Использование Установка Пример Правовая информация и отказ о...

anti-anti-automation

안티-안티-자동화 프레임워크 일반적인 안티-자동화 보안 통제를 우회하는 기법을 위한 프레임워크입니다. 일반적인 안티-자동화 통제 이메일 인증 CAPTCHA SMS/전화 신용카드 WASC-21: 불충분한 안티-자동화 http://projects.webappsec.org/w/page/13246938/Insufficient%20Anti-automation WE-799: 부적절한 상호작용 빈도 제어 http://cwe.mitre.org/data/definitions/799.html...

CVE-2026-66674 WordPress Simple Cloudflare Turnstile plugin <= 1.42.1 - Captcha Bypass vulnerability

Unauthenticated Bypass Vulnerability in Simple Cloudflare Turnstile = 1.42.1 versions...

CVE-2026-66674

CVE-2026-66674 affects the Simple Cloudflare Turnstile WordPress plugin, versions

WordPress Simple Cloudflare Turnstile plugin <= 1.42.1 - Captcha Bypass vulnerability

Captcha Bypass vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Simple Cloudflare Turnstile versions = 1.42.1...

CVE-2026-85586

phpMyFAQ versions before 4.1.8 fail to validate CAPTCHA when the store parameter is set to 'now' in question submission requests. Unauthenticated attackers can bypass CAPTCHA protection and submit unlimited questions directly, causing database pollution and triggering outgoing mail notifications...

CVE-2026-85586 phpMyFAQ before 4.1.8 CAPTCHA Bypass via store parameter

phpMyFAQ versions before 4.1.8 fail to validate CAPTCHA when the store parameter is set to 'now' in question submission requests. Unauthenticated attackers can bypass CAPTCHA protection and submit unlimited questions directly, causing database pollution and triggering outgoing mail notifications...

CVE-2026-85586

phpMyFAQ versions before 4.1.8 fail to validate CAPTCHA when the store parameter is set to 'now' in question submission requests. This allows unauthenticated attackers to bypass CAPTCHA protection and submit unlimited questions directly, resulting in database pollution and triggering outgoing mai...

CVE-2026-85586 phpMyFAQ before 4.1.8 CAPTCHA Bypass via store parameter

phpMyFAQ versions before 4.1.8 fail to validate CAPTCHA when the store parameter is set to 'now' in question submission requests. Unauthenticated attackers can bypass CAPTCHA protection and submit unlimited questions directly, causing database pollution and triggering outgoing mail notifications...

EUVD-2026-69721

WWBN AVideo current e01e41ecc and earlier makes three login-time security controls depend solely on the client-supplied User-Agent header. The isAVideoEncoder/isAVideoMobileApp checks match HTTPUSERAGENT against a hardcoded literal "AVideoEncoder"/"AVideoMobileApp" with no IP check or shared...

CVE-2026-84479

WWBN AVideo current e01e41ecc and earlier makes three login-time security controls depend solely on the client-supplied User-Agent header. The isAVideoEncoder/isAVideoMobileApp checks match HTTPUSERAGENT against a hardcoded literal "AVideoEncoder"/"AVideoMobileApp" with no IP check or shared...

CVE-2026-84479 WWBN AVideo Authentication Bypass via User-Agent Header

WWBN AVideo current e01e41ecc and earlier makes three login-time security controls depend solely on the client-supplied User-Agent header. The isAVideoEncoder/isAVideoMobileApp checks match HTTPUSERAGENT against a hardcoded literal "AVideoEncoder"/"AVideoMobileApp" with no IP check or shared...

CVE-2026-84479 WWBN AVideo Authentication Bypass via User-Agent Header

WWBN AVideo current e01e41ecc and earlier makes three login-time security controls depend solely on the client-supplied User-Agent header. The isAVideoEncoder/isAVideoMobileApp checks match HTTPUSERAGENT against a hardcoded literal "AVideoEncoder"/"AVideoMobileApp" with no IP check or shared...