Lucene search
+L

2571 matches found

OSSF Malicious Packages
OSSF Malicious Packages
•added 2024/07/01 4:47 a.m.•9 views

Malicious code in vio-captcha (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7e0d4ea8565e04756dcba1d4c9911caedecb38b6cc8717f68ee679883d19cb2d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
Github Security Blog
Github Security Blog
•added 2024/07/01 4:47 a.m.•4 views

Malware in vio-captcha

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

5.8AI score
SaveExploits0References1Affected Software1
OSV
OSV
•added 2024/07/01 4:47 a.m.•15 views

MAL-2024-7065 Malicious code in vio-captcha (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7e0d4ea8565e04756dcba1d4c9911caedecb38b6cc8717f68ee679883d19cb2d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2024/06/28 8:16 p.m.•10 views

Malicious code in bussardweg4av2 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 5dc2b9d9e5d1ece75c0261406e9630389fdc48845f2aa80aa2bc9ad61897531c --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign: funcaptcha-ru Reasons based on the campaign: - infostealer...

7AI score
SaveExploits0References3
OSSF Malicious Packages
OSSF Malicious Packages
•added 2024/06/25 1:40 p.m.•12 views

Malicious code in pythoncaptchasolver (PyPI)

--- -= Per source details. Do not edit below this line.=-...

7AI score
SaveExploits0References2
OSV
OSV
•added 2024/06/25 1:40 p.m.•8 views

MAL-2024-5791 Malicious code in pythoncaptchasolver (PyPI)

--- -= Per source details. Do not edit below this line.=-...

7.1AI score
SaveExploits0References2
OSV
OSV
•added 2024/06/25 1:33 p.m.•15 views

MAL-2024-4882 Malicious code in captcha-py (PyPI)

--- -= Per source details. Do not edit below this line.=-...

7.1AI score
SaveExploits0References3
OSSF Malicious Packages
OSSF Malicious Packages
•added 2024/06/25 1:27 p.m.•15 views

Malicious code in Blazor.Captcha (NuGet)

--- -= Per source details. Do not edit below this line.=-...

5.3AI score
SaveExploits0
OSSF Malicious Packages
OSSF Malicious Packages
•added 2024/06/25 1:23 p.m.•8 views

Malicious code in Antі.CaptchaAPI (NuGet)

--- -= Per source details. Do not edit below this line.=-...

7AI score
SaveExploits0
OSSF Malicious Packages
OSSF Malicious Packages
•added 2024/06/25 1:23 p.m.•9 views

Malicious code in 2CaptcһaAPІ (NuGet)

--- -= Per source details. Do not edit below this line.=-...

7AI score
SaveExploits0
OSSF Malicious Packages
OSSF Malicious Packages
•added 2024/06/25 1:23 p.m.•9 views

Malicious code in 2Cаptcha.API (NuGet)

--- -= Per source details. Do not edit below this line.=-...

7AI score
SaveExploits0
Veracode
Veracode
•added 2024/06/24 7:13 a.m.•19 views

Improper Access Control

studiomitte/friendlycaptcha is vulnerable to Improper Access Control. The vulnerability is due to the extension failing to check the captcha field requirement in submitted form data, which lets an attacker bypass the captcha check...

5.3CVSS6.7AI score0.0055EPSS
SaveExploits0References3Affected Software1
OSV
OSV
•added 2024/06/21 9:30 a.m.•90 views

GHSA-JG62-H7PV-HXGV FriendlyCaptcha Plugin for TYPO3 Captcha Check Bypass

An issue was discovered in the friendlycaptchaofficial aka Integration of Friendly Captcha extension before 0.1.4 for TYPO3. The extension fails to check the requirement of the captcha field in submitted form data, allowing a remote user to bypass the captcha check. This only affects the captcha...

6.9CVSS5.2AI score0.0055EPSS
SaveExploits0References4
Github Security Blog
Github Security Blog
•added 2024/06/21 9:30 a.m.•28 views

FriendlyCaptcha Plugin for TYPO3 Captcha Check Bypass

An issue was discovered in the friendlycaptchaofficial aka Integration of Friendly Captcha extension before 0.1.4 for TYPO3. The extension fails to check the requirement of the captcha field in submitted form data, allowing a remote user to bypass the captcha check. This only affects the captcha...

5.3CVSS6.9AI score0.0055EPSS
SaveExploits0References4Affected Software1
NVD
NVD
•added 2024/06/21 7:15 a.m.•39 views

CVE-2024-38873

An issue was discovered in the friendlycaptchaofficial aka Integration of Friendly Captcha extension before 0.1.4 for TYPO3. The extension fails to check the requirement of the captcha field in submitted form data, allowing a remote user to bypass the captcha check. This only affects the captcha...

5.3CVSS0.0055EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2024/06/21 12:00 a.m.•19 views

TYPO3 Security Vulnerabilities

TYPO3 is a free and open source content management system framework CMS/CMF from the Swiss TYPO3 Association. A security vulnerability exists in versions of TYPO3 prior to 0.1.4 that stems from a failure of the friendlycaptchaofficial extension to check the requirements of the CAPTCHA field in...

5.3CVSS6.8AI score0.0055EPSS
SaveExploits0References3
Mend
Mend
•added 2024/06/21 12:00 a.m.•2 views

CVE-2024-38873

An issue was discovered in the friendlycaptchaofficial aka Integration of Friendly Captcha extension before 0.1.4 for TYPO3. The extension fails to check the requirement of the captcha field in submitted form data, allowing a remote user to bypass the captcha check. This only affects the captcha...

6.9CVSS0.0055EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2024/06/21 12:00 a.m.•48 views

CVE-2024-38873

An issue was discovered in the friendlycaptchaofficial aka Integration of Friendly Captcha extension before 0.1.4 for TYPO3. The extension fails to check the requirement of the captcha field in submitted form data, allowing a remote user to bypass the captcha check. This only affects the captcha...

5.3CVSS0.0055EPSS
SaveExploits0References1
CVE
CVE
•added 2024/06/21 12:00 a.m.•65 views

CVE-2024-38873

CVE-2024-38873 concerns the TYPO3 extension friendlycaptcha_official (Integration of Friendly Captcha) before version 0.1.4. The issue is that the extension fails to verify the CAPTCHA requirement in submitted form data for the ext:form integration, allowing a remote user to bypass the CAPTCHA ch...

5.3CVSS7.2AI score0.0055EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/06/21 12:00 a.m.•17 views

CVE-2024-38873

An issue was discovered in the friendlycaptchaofficial aka Integration of Friendly Captcha extension before 0.1.4 for TYPO3. The extension fails to check the requirement of the captcha field in submitted form data, allowing a remote user to bypass the captcha check. This only affects the captcha...

5.3CVSS5.3AI score0.0055EPSS
SaveExploits0References1
Rows per page
Query Builder