2564 matches found
CVE-2024-44821
ZZCMS 2023 contains a vulnerability in the captcha reuse logic located in /inc/function.php. The checkyzm function does not properly refresh the captcha value after a failed validation attempt. As a result, an attacker can exploit this flaw by repeatedly submitting the same incorrect captcha...
CVE-2024-44821
ZZCMS 2023 contains a vulnerability in the captcha reuse logic located in /inc/function.php. The checkyzm function does not properly refresh the captcha value after a failed validation attempt. As a result, an attacker can exploit this flaw by repeatedly submitting the same incorrect captcha...
CVE-2024-44821
ZZCMS 2023 contains a vulnerability in the captcha reuse logic located in /inc/function.php. The checkyzm function does not properly refresh the captcha value after a failed validation attempt. As a result, an attacker can exploit this flaw by repeatedly submitting the same incorrect captcha...
CVE-2024-44821
ZZCMS 2023 contains a vulnerability in the captcha reuse logic located in /inc/function.php. The checkyzm function does not properly refresh the captcha value after a failed validation attempt. As a result, an attacker can exploit this flaw by repeatedly submitting the same incorrect captcha...
CVE-2024-44821
ZZCMS version 2023 is vulnerable to an improper authentication flaw within the captcha reuse logic located in the /inc/function.php file. The root cause is that the checkyzm function fails to properly refresh the captcha value following a failed validation attempt. This allows an attacker to repe...
PT-2024-31269
Name of the Vulnerable Software and Affected Versions ZZCMS 2023 Description The issue is related to the captcha reuse logic in ZZCMS 2023, specifically in the /inc/function.php file. The checkyzm function does not properly refresh the captcha value after a failed validation attempt. This allows ...
CVE-2024-44821: Improper Authentication
ZZCMS 2023 contains a vulnerability in the captcha reuse logic located in /inc/function.php. The checkyzm function does not properly refresh the captcha value after a failed validation attempt. As a result, an attacker can exploit this flaw by repeatedly submitting the same incorrect captcha...
ZZCMS 安全漏洞
ZZCMS is a content management system CMS from the ZZCMS team in China. A security vulnerability exists in ZZCMS version 2023, which stems from the checkyzm function failing to properly refresh the CAPTCHA value after a failed validation attempt...
GO-2023-1657 Answer has Guessable CAPTCHA in github.com/answerdev/answer
Answer has Guessable CAPTCHA in github.com/answerdev/answer...
Exploit for Observable Discrepancy in 42Gears Suremdm
CVE-2023-3897 Username enumeration is possible through Bypassi...
Malware Campaign Lures Users With Fake W2 Form
The following analysts contributed to the research: Evan McCann, Matt Smith, Ipek Solak, Jake McMahon Rapid7 has recently observed an campaign targeting users searching for W2 forms using the Microsoft search engine Bing. Users are subsequently directed to a fake IRS website, enticing them to...
Malicious code in sap-captcha (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis f072ac7d874caf5a56f397d58f7b7de64f2ea4c63c3ea44846eb84d43d8f3389 The OpenSSF Package Analysis project identified 'sap-captcha' @ 0.0.0 npm as malicious. It is considered malicious because: - The package...
MAL-2024-7661 Malicious code in sap-captcha (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis f072ac7d874caf5a56f397d58f7b7de64f2ea4c63c3ea44846eb84d43d8f3389 The OpenSSF Package Analysis project identified 'sap-captcha' @ 0.0.0 npm as malicious. It is considered malicious because: - The package...
Exploit for CVE-2024-39211
CVE-2024-39211 Kaiten User Enumeration Kaitenhttps://kait...
Malicious code in vio-captcha (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7e0d4ea8565e04756dcba1d4c9911caedecb38b6cc8717f68ee679883d19cb2d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malware in vio-captcha
Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...
MAL-2024-7065 Malicious code in vio-captcha (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7e0d4ea8565e04756dcba1d4c9911caedecb38b6cc8717f68ee679883d19cb2d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in bussardweg4av2 (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 5dc2b9d9e5d1ece75c0261406e9630389fdc48845f2aa80aa2bc9ad61897531c --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign: funcaptcha-ru Reasons based on the campaign: - infostealer...