HackerOne: Login page password-guessing attack

A brute-force attack is an attempt to discover a password by systematically trying every possible combination of letters, numbers, and symbols until you discover the one correct combination that works. hackerone.com page doesn't have any protection against password-guessing attacks brute force...

CVE-2013-6246

The Dell Quest One Password Manager, possibly 5.0, allows remote attackers to bypass CAPTCHA protections and obtain sensitive information user's full name by sending a login request with a valid domain and username but without the CaptchaType, UseCaptchaEveryTime, and CaptchaResponse parameters...

Design/Logic Flaw

The Dell Quest One Password Manager, possibly 5.0, allows remote attackers to bypass CAPTCHA protections and obtain sensitive information user's full name by sending a login request with a valid domain and username but without the CaptchaType, UseCaptchaEveryTime, and CaptchaResponse parameters...

CVE-2013-6246

The Dell Quest One Password Manager, possibly 5.0, allows remote attackers to bypass CAPTCHA protections and obtain sensitive information user's full name by sending a login request with a valid domain and username but without the CaptchaType, UseCaptchaEveryTime, and CaptchaResponse parameters...

CVE-2013-6246

CVE-2013-6246 affects Dell Quest One Password Manager (possibly v5.0). The vulnerability allows remote attackers to bypass CAPTCHA protections and obtain a user’s full name by sending a login request with a valid domain and username but missing CaptchaType, UseCaptchaEveryTime, and CaptchaRespons...

PT-2013-5981

Name of the Vulnerable Software and Affected Versions Dell Quest One Password Manager version 5.0 Description The issue allows remote attackers to bypass CAPTCHA protections and obtain sensitive information, such as a user's full name, by sending a login request with a valid domain and username b...

CVE-2013-6246: Undefined Security Weakness

The Dell Quest One Password Manager, possibly 5.0, allows remote attackers to bypass CAPTCHA protections and obtain sensitive information user's full name by sending a login request with a valid domain and username but without the CaptchaType, UseCaptchaEveryTime, and CaptchaResponse parameters...

D-Link DIR-605L Captcha Handling Buffer Overflow

This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 /Boa/ include Msf::Exploit::Remote::HttpClient def initializeinfo = superupdateinfoinfo, 'Name' = 'D-Link DIR-605L Captcha Handling...

D-Link DIR-605L Captcha Handling Buffer Overflow Vulnerability

This Metasploit module exploits an anonymous remote code execution on D-Link DIR-605L routers. The vulnerability exists while handling user supplied captcha information, and is due to the insecure usage of sprintf on the getAuthCode function. This Metasploit module has been tested successfully on...

Dell Quest One Password Manager CAPTCHA Bypass

-= Disclosure =- Filing Date: Today Issue Tracking Numbah: 20747 Discoverorer: Johnny Bravo -= Background =- Quest made a password management web thing. Dell bought Quest. Dell offers Quest Onetm Password Manager for $5/user. http://software.dell.com/products/password-manager/. Oddly, this is not...

AVTECH DVR Multiple Vulnerabilities

This host is running AVTECH DVR and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbavtechdvrmultiplevuln.nasl 6074 2017-05-05 09:03:14Z teissa $ AVTECH DVR Multiple Vulnerabilities Authors: Antu Sanadi Copyright: Copyright c 2013 Greenbone Networks GmbH,...

AVTECH DVR Multiple Vulnerabilities

AVTECH DVR is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

ecshop to bypass the CAPTCHA windfall hack-vulnerability warning-the black bar safety net

Brief description: Should popular version of this problem exists Detailed description: ! ! If the verification code does not match, and did not destroy the current CAPTCHA So can one request the CAPTCHA image, as long as no refresh verification code you can always use Vulnerability proof: 1. To...

AVTECH DVR Buffer Overflow / CAPTCHA Bypass

Core Security - Corelabs Advisory http://corelabs.coresecurity.com/ AVTECH DVR multiple vulnerabilities 1. Advisory Information Title: AVTECH DVR multiple vulnerabilities Advisory ID: CORE-2013-0726 Advisory URL: http://www.coresecurity.com/advisories/avtech-dvr-multiple-vulnerabilities Date...

Short Password Reset code vulnerability allows hackers to brute-force many websites

Yesterday we received a vulnerability report in web applications from some unknown Indian Hacker, who explained that how Hackers are hijacking Mobile recharge and Free SMS service related websites. He detailed the loophole in password reset process, that could allow attackers to brute force many...

TYPO3 Maag Form Captcha开放重定向漏洞

BUGTRAQ ID: 60298 CVECAN ID: CVE-2013-4680 Typo3是开源内容管理系统（CMS）和内容管理框架（CMF）。 TYPO3的Maag Form Captcha 2.0.0及更早版本存在开放重定向漏洞，攻击者利用此漏洞可将用户重定向到任意网站并执行钓鱼攻击。 0 TYPO3 Maag Form Captcha = 2.0.0 厂商补丁： TYPO3 ----- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://typo3.org/extensions/repository/...

CVE-2013-4680

Open redirect vulnerability in Maag Form Captcha extension 2.0.0 and earlier for TYPO3 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors...

Open redirect

Open redirect vulnerability in Maag Form Captcha extension 2.0.0 and earlier for TYPO3 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors...

CVE-2013-4680

Open redirect vulnerability in Maag Form Captcha extension 2.0.0 and earlier for TYPO3 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors...

CVE-2013-4680

The CVE-2013-4680 entry concerns TYPO3’s Maag Form Captcha extension (versions 2.0.0 and earlier). The vulnerability is an open redirect in the extension, allowing attackers to redirect users to arbitrary websites and facilitate phishing via unspecified vectors. The connected sources note that TY...