Unijimpe Captcha - 'captchademo.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/53585/info The Unijimpe Captcha is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the...

IAA, Redirector and XSS vulnerabilities in WordPress

Hello 3APA3A! I want to warn you about security vulnerabilities in WordPress. These are Insufficient Anti-automation, Redirector and Cross-Site Scripting vulnerabilities. ------------------------- Affected products: ------------------------- Vulnerable are WordPress 2.0 - 3.3.1. ---------- Detail...

The Uploader 2.0.4 (EnglishItalian) - Arbitrary File Upload Remote Code Execution (Metasploit)

The Uploader 2.0.4 EnglishItalian - Arbitrary File Upload Remote Code Execution Metasploit require 'msf/core' class Metasploit3 'The Uploader 2.0.4 Eng/Ita Remote File Upload', 'Description'= %q This module exploits various flaws in The Uploader to upload a PHP payload to target system. When run...

Video: New Banking Trojan Caught Breaking CAPTCHA

A new banking Trojan variant can bypass CAPTCHA, as demonstrated by a video posted today by security firm Websense on their Security Labs blog. Once downloaded to the machine, Cridex, a data-stealing Trojan, will track content from various web forms. Cridex also downloads a ‘spamming module’ to t...

A voting system bug, cause you can brush votes brush downloads-vulnerability warning-the black bar safety net

This article does not for a particular activity or site, the ASP voting system relates to many website activities. Its core code is the same, just styled somewhat questioningly. Don't want everyone to bulk engage in Station, but occasionally hit peripheral participation activities can use this BU...

JQuery-Real-Person CAPTCHA 1.0.1 Bypass

Exploit Title: Bypass the JQuery-Real-Person captcha plugin Google Dork: if relevant we will automatically add these to the GHDB Date: 28th November, 2011 Author: Alberto Garcia-Illera Software Link: http://keith-wood.name/realPerson.html Version: 1.0.1 0-day Tested on: Chrome web browser...

JQuery-Real-Person captcha plugin 0-day Bypass

Exploit for php platform in category web applications Exploit Title: Bypass the JQuery-Real-Person captcha plugin Google Dork: if relevant we will automatically add these to the GHDB Date: 28th November, 2011 Author: Alberto Garcia-Illera Software Link: http://keith-wood.name/realPerson.html...

JQuery-Real-Person plugin - Bypass Captcha

JQuery-Real-Person plugin - Bypass Captcha Exploit Title: Bypass the JQuery-Real-Person captcha plugin Google Dork: if relevant we will automatically add these to the GHDB Date: 28th November, 2011 Author: Alberto Garcia-Illera Software Link: http://keith-wood.name/realPerson.html Version: 1.0.1...

JQuery-Real-Person plugin - Bypass Captcha

Exploit Title: Bypass the JQuery-Real-Person captcha plugin Google Dork: if relevant we will automatically add these to the GHDB Date: 28th November, 2011 Author: Alberto Garcia-Illera Software Link: http://keith-wood.name/realPerson.html Version: 1.0.1 0-day Tested on: Chrome web browser...

DELL Quest One Password Manager - CAPTCHA Security Bypass

DELL Quest One Password Manager - CAPTCHA Security Bypass source: https://www.securityfocus.com/bid/63259/info DELL Quest One Password Manager is prone to a security bypass vulnerability. An attacker can exploit this issue to bypass certain security restrictions and gain access to sensitive areas...

PT-2011-4607

Name of the Vulnerable Software and Affected Versions ClipBucket version 2.0.9 Description The issue allows remote attackers to obtain sensitive information via a direct request to a .php file. This is demonstrated by accessing certain files, such as plugins/signup captcha/signup captcha.php, whi...

ClickCMS - Denial of Service CAPTCHA Bypass

ClickCMS - Denial of Service CAPTCHA Bypass source: https://www.securityfocus.com/bid/49361/info ClickCMS is prone to a denial-of-service vulnerability and a CAPTCHA-bypass vulnerability. Attackers can leverage these issues to cause the affected server to stop responding or to bypass certain...

ClickCMS - Denial of Service / CAPTCHA Bypass

source: https://www.securityfocus.com/bid/49361/info ClickCMS is prone to a denial-of-service vulnerability and a CAPTCHA-bypass vulnerability. Attackers can leverage these issues to cause the affected server to stop responding or to bypass certain security mechanisms...

WordPress Super CAPTCHA 2.2.4 SQL Injection

Exploit Title: WordPress Super CAPTCHA plugin Accounts Flagged'; for$i=0;$iusers ." SET spam='1' WHERE ID='". $UIDs$i ."'"; mysqlquery"UPDATE ". $wpdb-users ." SET userstatus='1' WHERE ID='". $UIDs$i ."'"; echo'USER ID: '. $UIDs$i .' marked as spammer.';...

WordPress Super CAPTCHA plugin <= 2.2.4 SQL Injection Vulnerability

No description provided by source. Exploit Title: WordPress Super CAPTCHA plugin = 2.2.4 SQL Injection Vulnerability Date: 2011-08-26 Author: Miroslav Stampar miroslav.stamparatgmail.com @stamparm Software Link: http://downloads.wordpress.org/plugin/super-capcha.2.2.4.zip Version: 2.2.4 tested...

WordPress Super CAPTCHA Plugin <= 2.2.4 - SQL Injection

This Super CAPTCHA plugin is prone to an SQL injection. This vulnerability allows an attacker to modify data, alter queries to the application SQL database, compromise the access and application or exploit hidden vulnerabilities in the underlying database. Solution Upgrade the plugin...

WordPress Plugin Super CAPTCHA 2.2.4 - SQL Injection

WordPress Plugin Super CAPTCHA 2.2.4 - SQL Injection Exploit Title: WordPress Super CAPTCHA plugin Accounts Flagged'; for$i=0;$iusers ." SET spam='1' WHERE ID='". $UIDs$i ."'"; mysqlquery"UPDATE ". $wpdb-users ." SET userstatus='1' WHERE ID='". $UIDs$i ."'"; echo'USER ID: '. $UIDs$i .' marked as...

WordPress Plugin Super CAPTCHA 2.2.4 - SQL Injection

Exploit Title: WordPress Super CAPTCHA plugin Accounts Flagged'; for$i=0;$iusers ." SET spam='1' WHERE ID='". $UIDs$i ."'"; mysqlquery"UPDATE ". $wpdb-users ." SET userstatus='1' WHERE ID='". $UIDs$i ."'"; echo'USER ID: '. $UIDs$i .' marked as spammer.';...

WordPress Super CAPTCHA plugin <= 2.2.4 SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: WordPress Super CAPTCHA plugin Accounts Flagged'; for$i=0;$iusers ." SET spam='1' WHERE ID='". $UIDs$i ."'"; mysqlquery"UPDATE ". $wpdb-users ." SET userstatus='1' WHERE ID='". $UIDs$i ."'"; echo'USER ID: '. $UIDs$i .' marked as...

Facebook Status Update With XFBML Injection

Facebook Status Update With XFBML Injection i Last week Acizninja DeadcOde share Tweaking Facebook Status with HTML button. Well today he is going to share another kind of cool tricks to tweak Facebook Status Update using XFBML Injection. With this tweak, we will do an injection on Facebook URL a...