PT-2017-6376

Name of the Vulnerable Software and Affected Versions MantisBT versions prior to 1.2.19 Description A CAPTCHA bypass issue exists, potentially allowing unauthorized access. Recommendations For versions prior to 1.2.19, update to version 1.2.19 or later to resolve the issue...

CVE-2015-8351: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in the Gwolle Guestbook plugin before 1.5.4 for WordPress, when allowurlinclude is enabled, allows remote authenticated users to execute arbitrary PHP code via a URL in the abspath parameter to frontend/captcha/ajaxresponse.php. NOTE: this can also be...

PT-2017-7400

Name of the Vulnerable Software and Affected Versions Gwolle Guestbook plugin versions prior to 1.5.4 Description The issue allows remote authenticated users to execute arbitrary PHP code via a URL in the abspath parameter to "frontend/captcha/ajaxresponse.php". This can also be leveraged to...

Ringtone Duo App Has Denial of Service Vulnerability

Ringtone Duo APP is a cell phone ringtone downloader. Ringtone Duo APP suffers from a denial-of-service vulnerability, where an attacker consumes server resources and causes a denial-of-service by sending unlimited CAPTCHAs to cell phones...

simple-php authentication bypass vulnerability

simple-php-captcha is a PHP-based CAPTCHA script. A security vulnerability exists in simple-php-captcha commit 2015-08-31 and earlier versions. A remote attacker can exploit the vulnerability to automatically generate CAPTCHA responses...

CVE-2015-6250

simple-php-captcha before commit 9d65a945029c7be7bb6bc893759e74c5636be694 allows remote attackers to automatically generate the captcha response by running the same code on the client-side...

Code injection

simple-php-captcha before commit 9d65a945029c7be7bb6bc893759e74c5636be694 allows remote attackers to automatically generate the captcha response by running the same code on the client-side...

CVE-2015-6250

simple-php-captcha before commit 9d65a945029c7be7bb6bc893759e74c5636be694 allows remote attackers to automatically generate the captcha response by running the same code on the client-side...

CVE-2015-6250

simple-php-captcha before commit 9d65a945029c7be7bb6bc893759e74c5636be694 allows remote attackers to automatically generate the captcha response by running the same code on the client-side...

CVE-2015-6250

CVE-2015-6250 affects the simple-php-captcha project. A vulnerability in the captured code before commit 9d65a945029c7be7bb6bc893759e74c5636be694 allows remote attackers to automatically generate CAPTCHA responses by running the same code on the client-side, effectively bypassing CAPTCHA verifica...

CAPTCHA - Moderately Critical - Denial of Service - SA-CONTRIB-2017-073

This module enables you to use various techniques to block automated scripts / robots from submitting content to a site, e.g. to block spam comments. The module doesn't properly store the session ID of visitors who are given a session which could lead to a Denial of Service attack. This...

Clientside Validation - Critical - Arbitary PHP Execution - DRUPAL-SA-CONTRIB-2017-072

The Clientside Validation module enables you to have clientside Javascript validation on your forms. The module does not sufficiently validate parameters of a POST request made when validating a CAPTCHA. For the 1.x version of this module, this vulnerability is mitigated by the fact that the...

CVE-2015-6250: Exposure of Sensitive Information to an Unauthorized Actor

simple-php-captcha before commit 9d65a945029c7be7bb6bc893759e74c5636be694 allows remote attackers to automatically generate the captcha response by running the same code on the client-side...

PT-2017-7000

Name of the Vulnerable Software and Affected Versions simple-php-captcha versions before 9d65a945029c7be7bb6bc893759e74c5636be694 Description The issue allows remote attackers to automatically generate the captcha response by running the same code on the client-side. Recommendations For versions...

Tor: [rt.torproject.org] No Rate Limitting on Login Form

Vulnerability description not provided...

Wheeling Self-Driving Android App is vulnerable to arbitrary account password resets

Wheel Self-Driving APP is a self-driving comprehensive service center software. The Rolling Self-Driving Android APP is vulnerable to arbitrary account password reset vulnerability. It allows an attacker to reset any registered account password by means of CAPTCHA blasting...

Shenzhen Yuanzheng Technology golo merchant Android APP has arbitrary account password reset vulnerability

golo merchant is an app developed by Shenzhen Yuanzheng Technology to provide auto repair services. There is an arbitrary account password reset vulnerability in the golo merchant android app of Shenzhen Yuanzheng Technology. An attacker can reset any registered user's password by means of CAPTCH...

Shenzhen Yuanzheng Technology goloZ Android APP has arbitrary account password reset vulnerability

goloZ APP is a product developed by Shenzhen Yuanzheng Technology to provide auto repair service. There is an arbitrary account password reset vulnerability in Shenzhen Yuanzheng Technology's goloZ Android APP. An attacker can reset any registered user's password by CAPTCHA blasting...

Charging Pile Android App has Arbitrary Account Password Reset Vulnerability

Charging Pile APP is a software that provides electric vehicle owners with information service on the location, number, type and status of charging piles. Charging Pile Android APP has an arbitrary account password reset vulnerability. Allowing an attacker to reset a user's password by captcha...

Shenzhen Yuanzheng Technology golo Android APP has arbitrary account login vulnerability

golo APP is a social networking application that uses instant messaging as a communication platform to connect automotive repair technicians with car owners. A vulnerability exists in Shenzhen Yuanzheng Technology's golo Android APP that allows an attacker to log in to any account. An attacker ca...