CVE-2023-3897

CVE-2023-3897 affects 42Gears SureMDM On-premise for Windows, version 6.31 and earlier. The root cause is CAPTCHA bypass that enables attacker to enumerate local usernames via error messages, leading to information disclosure. Impact is limited to credential/identity exposure as described in sour...

PT-2023-26709 · 42Gears · Suremdm

Name of the Vulnerable Software and Affected Versions: SureMDM On-premise versions 6.31 and below Description: The issue allows for username enumeration through bypassing CAPTCHA in the On-premise SureMDM Solution on Windows deployment. This enables an attacker to enumerate local user information...

CVE-2023-3897: Observable Discrepancy

Username enumeration is possible through Bypassing CAPTCHA in On-premise SureMDM Solution on Windows deployment allows attacker to enumerate local user information via error message. This issue affects SureMDM On-premise: 6.31 and below version...

42Gears SureMDM 安全漏洞

42gears Mobility Systems 42Gears SureMDM is an asset management platform for mobile devices from 42gears Mobility Systems, USA. The platform is primarily used to monitor and manage enterprise mobile devices. A security vulnerability exists in 42gears Mobility Systems 42Gears SureMDM version 6.31...

Wifi Soft Unibox Administration 3.0 & 3.1 - SQL Injection Vulnerability

Exploit Title: Wifi Soft Unibox Administration 3.0 & 3.1 Login Page - Sql Injection Google Dork: intext:"Unibox Administration 3.1", intext:"Unibox 3.0" Exploit Author: Ansh Jain @sudoark Author Contact : email protected Vendor Homepage: https://www.wifi-soft.com/ Software Link:...

Easy Captcha <= 1.0 - Missing Authorization

Description The plugin does not have authorisation in various AJAX actions, which could allow unauthenticated users to call them and perform unauthorised actions...

Easy Captcha <= 1.0 - Reflected Cross-Site Scripting

Description The plugin does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

WordPress CAPTCHA 4WP Plugin <= 7.0.5 is vulnerable to Cross Site Scripting (XSS)

Software CAPTCHA 4WP Type Plugin Vulnerable versions = 7.0.5 Fixed in 7.0.6 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority High CVSS severity High 7.1 Developer Melapress PSID 538e2b5c193e Credits Rafie Muhammad Patchstack Required privilege...

CVE-2023-37758

D-LINK DIR-815 v1.01 was discovered to contain a buffer overflow via the component /web/captcha.cgi...

CVE-2023-33312

Unauth. Reflected Cross-Site Scripting XSS vulnerability in wppal Easy Captcha plugin = 1.0 versions...

CVE-2023-33312

Unauth. Reflected Cross-Site Scripting XSS vulnerability in wppal Easy Captcha plugin = 1.0 versions...

Cross site scripting

Unauth. Reflected Cross-Site Scripting XSS vulnerability in wppal Easy Captcha plugin = 1.0 versions...

CVE-2023-33312

CVE-2023-33312 is an unauthenticated, reflected XSS vulnerability in WordPress plugin Easy Captcha (

CVE-2023-33312 WordPress Easy Captcha Plugin <= 1.0 is vulnerable to Cross Site Scripting (XSS)

Unauth. Reflected Cross-Site Scripting XSS vulnerability in wppal Easy Captcha plugin = 1.0 versions...

D-LINK DIR-815 安全漏洞

The D-Link DIR-815 is a wireless router from China-based AUO D-Link. A security vulnerability exists in the D-LINK DIR-815 v1.01, which stems from the discovery of a contained buffer overflow vulnerability via component /web/captcha.cgi...

WordPress Plugin Easy Captcha 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting vulnerability...

WordPress Easy Math Captcha for CF7 Plugin <= 1.0.0 is vulnerable to Cross Site Scripting (XSS)

Software Easy Math Captcha for CF7 Type Plugin Vulnerable versions = 1.0.0 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID c64d705fa07e Credits Rafie Muhammad Patchstac...

WordPress Turnstile Cloudflare CAPTCHA - A friendly, free CAPTCHA replacement Plugin <= 1.0.1 is vulnerable to Cross Site Scripting (XSS)

Software Turnstile Cloudflare CAPTCHA - A friendly, free CAPTCHA replacement Type Plugin Vulnerable versions = 1.0.1 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID...

PT-2023-24283

Name of the Vulnerable Software and Affected Versions wppal Easy Captcha plugin versions prior to 1.0 Description The issue is related to an Unauth. Reflected Cross-Site Scripting XSS vulnerability. This allows for malicious scripts to be injected into a website, potentially leading to unauthoriz...

CVE-2023-37758

The CVE-2023-37758 entry affects D-LINK DIR-815 v1.01 with a buffer overflow in the /web/captcha.cgi component. The issue is described consistently across multiple sources (NVD/Red Hat/CVE List and related databases). The root cause is a buffer overflow in the captcha.cgi handler, enabling potent...