570 matches found
PT-2014-4594 · Rock Lobster · Contact Form 7
Name of the Vulnerable Software and Affected Versions: Rock Lobster Contact Form 7 versions prior to 3.7.2 Description: The issue allows remote attackers to bypass the CAPTCHA protection mechanism and submit arbitrary form data by omitting the wpcf7 captcha challenge captcha-719 parameter. This...
RelateIQ: Captcha Bypass With Extension
Hello, These days Captcha's are one of the most vulnerable methods To Protect The Website From Bots, But there is a Extension Named Rumola Which Automatically Fills up the Captcha While We Fill Other Credentials like Email etc. Here a Vulnerability Arises That Bots May Use This Extension Script i...
Pastebin CAPTCHA Bypass
Hello all, After reading an article in Go Null Yourself about abusing PhpBB's Tell-a-Friend feature a while back, I've kept an eye out for ways to spam people or bypass a website's flood protection. Apologies to forum moderators everywhere! On October 5, I discovered a captcha bypass technique an...
CVE-2013-6246
The Dell Quest One Password Manager, possibly 5.0, allows remote attackers to bypass CAPTCHA protections and obtain sensitive information user's full name by sending a login request with a valid domain and username but without the CaptchaType, UseCaptchaEveryTime, and CaptchaResponse parameters...
Design/Logic Flaw
The Dell Quest One Password Manager, possibly 5.0, allows remote attackers to bypass CAPTCHA protections and obtain sensitive information user's full name by sending a login request with a valid domain and username but without the CaptchaType, UseCaptchaEveryTime, and CaptchaResponse parameters...
CVE-2013-6246: Undefined Security Weakness
The Dell Quest One Password Manager, possibly 5.0, allows remote attackers to bypass CAPTCHA protections and obtain sensitive information user's full name by sending a login request with a valid domain and username but without the CaptchaType, UseCaptchaEveryTime, and CaptchaResponse parameters...
PT-2013-5981
Name of the Vulnerable Software and Affected Versions Dell Quest One Password Manager version 5.0 Description The issue allows remote attackers to bypass CAPTCHA protections and obtain sensitive information, such as a user's full name, by sending a login request with a valid domain and username b...
AVTECH DVR Buffer Overflow / CAPTCHA Bypass
Core Security - Corelabs Advisory http://corelabs.coresecurity.com/ AVTECH DVR multiple vulnerabilities 1. Advisory Information Title: AVTECH DVR multiple vulnerabilities Advisory ID: CORE-2013-0726 Advisory URL: http://www.coresecurity.com/advisories/avtech-dvr-multiple-vulnerabilities Date...
Video: New Banking Trojan Caught Breaking CAPTCHA
A new banking Trojan variant can bypass CAPTCHA, as demonstrated by a video posted today by security firm Websense on their Security Labs blog. Once downloaded to the machine, Cridex, a data-stealing Trojan, will track content from various web forms. Cridex also downloads a ‘spamming module’ to t...
JQuery-Real-Person plugin - Bypass Captcha
Exploit Title: Bypass the JQuery-Real-Person captcha plugin Google Dork: if relevant we will automatically add these to the GHDB Date: 28th November, 2011 Author: Alberto Garcia-Illera Software Link: http://keith-wood.name/realPerson.html Version: 1.0.1 0-day Tested on: Chrome web browser...
ClickCMS - Denial of Service CAPTCHA Bypass
ClickCMS - Denial of Service CAPTCHA Bypass source: https://www.securityfocus.com/bid/49361/info ClickCMS is prone to a denial-of-service vulnerability and a CAPTCHA-bypass vulnerability. Attackers can leverage these issues to cause the affected server to stop responding or to bypass certain...
OpenClassifieds 1.7.0.3 Chained: Captcha Bypass / SQLi / Persistent XSS
Exploit for php platform in category web applications Author:Michael Brooks Rook Application:OpenClassifieds 1.7.0.3 download: http://open-classifieds.com/download/ Exploit chain:captcha bypass-sqliinsert-persistant xss on front page If registration is required an extra link in the chain is added...
OpenClassifieds 1.7.0.3 - Chained: Captcha Bypass SQL Injection Persistent Cross-Site Scripting on FrontPage
OpenClassifieds 1.7.0.3 - Chained: Captcha Bypass SQL Injection Persistent Cross-Site Scripting on FrontPage Author:Michael Brooks Rook Application:OpenClassifieds 1.7.0.3 download: http://open-classifieds.com/download/ Exploit chain:captcha bypass-sqliinsert-persistant xss on front page If...
OpenClassifieds 1.7.0.3 - Chained: Captcha Bypass / SQL Injection / Persistent Cross-Site Scripting on FrontPage
Author:Michael Brooks Rook Application:OpenClassifieds 1.7.0.3 download: http://open-classifieds.com/download/ Exploit chain:captcha bypass-sqliinsert-persistant xss on front page If registration is required an extra link in the chain is added: Exploit chain:blind sqliselect-captcha...
Multiple Vulnerabilities in OpenClassifieds 1.7.0.3
I understand that this is a vain hope that bugtraq will start posting something useful. Author:Michael Brooks Rookbr Application:OpenClassifieds 1.7.0.3br download: http://open-classifieds.com/download/br Exploit chain:captcha bypass-sqliinsert-persistant xss on front pagebr If registration is...
OpenClassifieds 1.7.0.3 Chained: Captcha Bypass -> SQL Injection -> XSS on Frontpage
Author:Michael Brooks Rook Application:OpenClassifieds 1.7.0.3 download: http://open-classifieds.com/download/ Exploit chain:captcha bypass-sqliinsert-persistant xss on front page If registration is required an extra link in the chain is added: Exploit chain:blind sqliselect-captcha...
OpenAuto 1.6.3 Multiple Vulnerabilities
Exploit for php platform in category web applications Credit:Michael Brooks Affects:OpenAuto 1.6.3 Vulnerabilites: XSRF/XSS/Blind SQLi/Captcha Bypass http://openautoclassifieds.com/ ---------------------------------------------------------------------------------------------------- Reflective XSS...
openauto 1.6.3 - Multiple Vulnerabilities
openauto 1.6.3 - Multiple Vulnerabilities Credit:Michael Brooks Affects:OpenAuto 1.6.3 Vulnerabilites: XSRF/XSS/Blind SQLi/Captcha Bypass http://openautoclassifieds.com/ ---------------------------------------------------------------------------------------------------- Reflective XSS by adding a...
Cforms & CformsII <= 14.10.1 - CAPTCHA Bypass
The cformsII plugin slug: cforms and its fork slug: cforms2 have a CAPTCHA Bypass vulnerability. The MD5 hash for matching the answer is sent with the forms and so it can be overwritten. This is fixed in the fork cforms2 with version 14.11 see changelog for confirmation. The original delicious:da...
D-Link Routers - Authentication Bypass (2)
Multiple D-Link routers suffer from insecure implementations of the Home Network Administration Protocol which allow unauthenticated and/or unprivileged users to view and configure administrative settings on the router. Further, the mere existence of HNAP allows attackers to completely bypass...