Captcha Bypass in strapi-plugin-ezforms

Impact Users using any captcha providers Patches 0.1.0 References Issue...

GHSA-8MGQ-6R2Q-82W9 Captcha Bypass in strapi-plugin-ezforms

Impact Users using any captcha providers Patches 0.1.0 References Issue...

PT-2022-28221 · Strapi · Strapi-Plugin-Ezforms

Name of the Vulnerable Software and Affected Versions: strapi-plugin-ezforms versions prior to 0.1.0 Description: The issue affects users utilizing any captcha providers. There is no information available about the estimated number of potentially affected devices or real-world incidents where thi...

Grandoreiro Banking Trojan Attacks Industries in Spanish-Speaking Countries

Threat Level Attack Report For a detailed advisory, download the pdf file here Summary Grandoreiro banking trojan is a campaign that has been active since at least 2016 and targets a variety of businesses in Mexico and Spain, including automotive, chemical production, and others. Threat actors...

Login No Captcha reCAPTCHA < 1.7 - IP Check Bypass

The plugin doesn't check the proper IP address allowing attackers to spoof IP addresses on the allow list and bypass the need for captcha on the login screen. PoC Set HTTPCLIENTIP, HTTPXFORWARDEDFOR or any other header in LoginNoCaptcha::getipaddress which is then checked against the whitelist an...

CVE-2022-2184

The CAPTCHA 4WP WordPress plugin before 7.1.0 lets user input reach a sensitive requireonce call in one of its admin-side templates. This can be abused by attackers, via a Cross-Site Request Forgery attack to run arbitrary code on the server...

CVE-2022-2184

The CAPTCHA 4WP WordPress plugin before 7.1.0 lets user input reach a sensitive requireonce call in one of its admin-side templates. This can be abused by attackers, via a Cross-Site Request Forgery attack to run arbitrary code on the server...

CVE-2022-2184

The CAPTCHA 4WP WordPress plugin before 7.1.0 lets user input reach a sensitive requireonce call in one of its admin-side templates. This can be abused by attackers, via a Cross-Site Request Forgery attack to run arbitrary code on the server...

Cross site request forgery (csrf)

The CAPTCHA 4WP WordPress plugin before 7.1.0 lets user input reach a sensitive requireonce call in one of its admin-side templates. This can be abused by attackers, via a Cross-Site Request Forgery attack to run arbitrary code on the server...

CVE-2022-2184

The CVE-2022-2184 entry concerns the WordPress CAPTCHA 4WP plugin prior to version 7.1.0. Affected software: CAPTCHA 4WP WordPress plugin (versions before 7.1.0). Root cause: an input flow enables reaching a sensitive require_once call within an admin-side template, which CSRF can abuse. Impact: ...

PT-2022-15165 · WordPress · Captcha 4Wp

Name of the Vulnerable Software and Affected Versions: CAPTCHA 4WP WordPress plugin versions prior to 7.1.0 Description: The issue allows user input to reach a sensitive require once call in one of its admin-side templates. This can be exploited by attackers via a Cross-Site Request Forgery attac...

WordPress plugin CAPTCHA 4WP 路径遍历漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A path traversal...

Remote Code Execution (RCE)

scu-captcha is vulnerable to remote code execution. An attacker can inject and execute malicious code through the malicious request packages as the library does not properly remove malicious packages from many mirror sites...

CVE-2022-34983

The scu-captcha package in PyPI v0.0.1 to v0.0.4 included a code execution backdoor inserted by a third party...

CVE-2022-34983

The scu-captcha package in PyPI v0.0.1 to v0.0.4 included a code execution backdoor inserted by a third party...

PYSEC-2022-43166

The scu-captcha package in PyPI v0.0.1 to v0.0.4 included a code execution backdoor inserted by a third party...

PYSEC-2022-43166

The scu-captcha package in PyPI v0.0.1 to v0.0.4 included a code execution backdoor inserted by a third party...

CVE-2022-34983

CVE-2022-34983 affects the PyPI package scu-captcha, versions 0.0.1–0.0.4, where a backdoor inserted by a third party enables code execution. Multiple sources (Veracode) describe the impact as remote code execution and note the library can execute malicious code via tampered packages on mirrors. ...

SCU-Captcha 安全漏洞

SCU-Captcha is the SCU JWC CAPTCHA recognition model, based on Pytorch, which has been released on PYPI. A security vulnerability exists in SCU-Captcha that stems from the presence of a code execution backdoor inserted by a third party...

WordPress plugin Contact Form 7 Captcha Cross-Site Scripting Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...