2083 matches found
CVE-2023-33324 WordPress Easy Captcha plugin <= 1.0 - Broken Access Control vulnerability
Missing Authorization vulnerability in wppal Easy Captcha allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Easy Captcha: from n/a through 1.0...
CVE-2023-33324 WordPress Easy Captcha plugin <= 1.0 - Broken Access Control vulnerability
Missing Authorization vulnerability in wppal Easy Captcha easy-captcha allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Easy Captcha: from n/a through = 1.0...
WordPress plugin Easy Captcha 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...
Malicious code in ne-captcha (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-11403 Malicious code in ne-captcha (npm)
--- -= Per source details. Do not edit below this line.=-...
Fedora 40 : lemonldap-ng (2024-e457192aa2)
The remote Fedora 40 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-e457192aa2 advisory. Update to lemonldap-ng 2.20.1: - Security Adaptative Authentication Rules triggered by Refresh my rights - Security XSS in upgradeSession / forceUpgrade page...
Fedora 41 : lemonldap-ng (2024-7bc1df53fc)
The remote Fedora 41 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-7bc1df53fc advisory. Update to lemonldap-ng 2.20.1: - Security Adaptative Authentication Rules triggered by Refresh my rights - Security XSS in upgradeSession / forceUpgrade page...
CVE-2024-51037
An issue in kodbox v.1.52.04 and before allows a remote attacker to obtain sensitive information via the captcha feature in the password reset function...
kodbox 安全漏洞
kodbox is a network file manager by warlee individual developer. A security vulnerability exists in kodbox version 1.52.04 and earlier, which originates from a remote attacker who can obtain sensitive information via the captcha function in the password reset feature...
CVE-2024-51037
An issue in kodbox v.1.52.04 and before allows a remote attacker to obtain sensitive information via the captcha feature in the password reset function...
PT-2024-34499 · Kodbox · Kodbox
Name of the Vulnerable Software and Affected Versions: kodbox versions 1.52.04 and earlier Description: The issue allows a remote attacker to obtain sensitive information via the captcha feature in the password reset function. Recommendations: For kodbox versions 1.52.04 and earlier, consider...
CVE-2024-51037
An issue in kodbox v.1.52.04 and before allows a remote attacker to obtain sensitive information via the captcha feature in the password reset function...
CVE-2024-51037
An issue in kodbox v.1.52.04 and before allows a remote attacker to obtain sensitive information via the captcha feature in the password reset function...
CVE-2024-49648
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in rafasashi SVG Captcha svg-captcha allows Reflected XSS.This issue affects SVG Captcha: from n/a through = 1.0.11...
CVE-2024-49648 WordPress SVG Captcha plugin <= 1.0.11 - Reflected Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in rafasashi SVG Captcha svg-captcha allows Reflected XSS.This issue affects SVG Captcha: from n/a through = 1.0.11...
CVE-2024-49648
The CVE-2024-49648 entry refers to a reflected XSS in the WordPress SVG Captcha plugin (versions <= 1.0.11) caused by improper neutralization of input during web page generation. Public sources (Patchstack, Red Hat/ENISA entries) confirm the vulnerability and its unauthenticated disclosure, wi...
CVE-2024-49648 WordPress SVG Captcha plugin <= 1.0.11 - Reflected Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in rafasashi SVG Captcha svg-captcha allows Reflected XSS.This issue affects SVG Captcha: from n/a through = 1.0.11...
Lumma/Amadey: fake CAPTCHAs want to know if you’re human
Attackers are increasingly distributing malware through a rather unusual method: a fake CAPTCHA as the initial infection vector. Researchers from various companies reported this campaign in August and September. The attackers, primarily targeting gamers, initially delivered the Lumma stealer to...
PT-2024-33601 · Unknown · Rafasashi Svg Captcha
Name of the Vulnerable Software and Affected Versions: rafasashi SVG Captcha versions 1.0.11 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Reflected XSS. Recommendations: For...
WordPress plugin SVG Captcha 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin ... A cross-site scripting...