2081 matches found
CVE-2013-4982
AVTECH AVN801 DVR has a security bypass via the administration login captcha...
Logic Flaw Vulnerability in National College Expert Sharing Network
The National University Expert Sharing Network is a national university procurement expert sharing platform, including Fudan University, Peking University has Tsinghua University and many other universities. There is a logic flaw vulnerability in the National University Expert Sharing Network,...
Logic Flaw Vulnerability in Airport A-CDM System at Flymate Technologies Ltd.
Feiyou Technology is a company specializing in providing civil aviation and through flight service data, with data centers and analysis systems such as global flight dynamics data, global aircraft data, flight delay intelligent analysis data, flight punctuality analysis data system, ground...
CVE-2019-15987
A vulnerability in web interface of the Cisco Webex Event Center, Cisco Webex Meeting Center, Cisco Webex Support Center, and Cisco Webex Training Center could allow an unauthenticated, remote attacker to guess account usernames. The vulnerability is due to missing CAPTCHA protection in certain...
Design/Logic Flaw
A vulnerability in web interface of the Cisco Webex Event Center, Cisco Webex Meeting Center, Cisco Webex Support Center, and Cisco Webex Training Center could allow an unauthenticated, remote attacker to guess account usernames. The vulnerability is due to missing CAPTCHA protection in certain...
CVE-2019-15987 Cisco WebEx Centers Username Enumeration Information Disclosure Vulnerability
A vulnerability in web interface of the Cisco Webex Event Center, Cisco Webex Meeting Center, Cisco Webex Support Center, and Cisco Webex Training Center could allow an unauthenticated, remote attacker to guess account usernames. The vulnerability is due to missing CAPTCHA protection in certain...
CVE-2019-15987 Cisco WebEx Centers Username Enumeration Information Disclosure Vulnerability
A vulnerability in web interface of the Cisco Webex Event Center, Cisco Webex Meeting Center, Cisco Webex Support Center, and Cisco Webex Training Center could allow an unauthenticated, remote attacker to guess account usernames. The vulnerability is due to missing CAPTCHA protection in certain...
Cisco WebEx Centers Username Enumeration Information Disclosure Vulnerability
A vulnerability in web interface of the Cisco Webex Event Center, Cisco Webex Meeting Center, Cisco Webex Support Center, and Cisco Webex Training Center could allow an unauthenticated, remote attacker to guess account usernames. The vulnerability is due to missing CAPTCHA protection in certain...
PayPal: Token leak in security challenge flow allows retrieving victim's PayPal email and plain text password
A bug was identified whereby sensitive, unique tokens were being leaked in a JS file used by the recaptcha implementation. In certain cases, a user must solve a CAPTCHA challenge after authenticating. When the security challenge is completed, the authentication request is replayed to log in. The...
TYPO3 freeCap CAPTCHA Input Validation Error Vulnerability
TYPO3 is a free and open source content management system framework CMS/CMF from the TYPO3 Association in Switzerland. freeCap CAPTCHA is used in one of the CAPTCHA extension plugins. A security vulnerability exists in TYPO3 freeCap CAPTCHA version 2.4.5 and earlier and version 2.5.2 and earlier...
CVE-2019-16699
The CVE-2019-16699 issue affects the TYPO3 sr_freecap (freeCap CAPTCHA) extension, versions 2.4.5 and earlier and 2.5.2 and earlier. The root cause is improper sanitization of user input, which allows an attacker to trigger arbitrary Extbase actions and achieve Remote Code Execution (RCE). Public...
Remote Code Execution in extension "freeCap CAPTCHA" (sr_freecap)
The extension fails to sanitize user input which allows to execute arbitrary Extbase actions resulting in Remote Code Execution...
TYPO3 freeCap CAPTCHA Extension CVE-2019-16699 Remote Code Execution Vulnerability
Description TYPO3 freeCap CAPTCHA extension is prone to a remote code-execution vulnerability. A remote attacker can leverage this issue to execute arbitrary code within the context of the application. Successful exploits will compromise the application and possibly the underlying system. Version...
Kartpay: bypass captcha in the form forgot password
Summary: In this issue I can bypass Captcha Protection in the Forgot Password form. Browsers Verified In: firefox url: https://affiliate.kartpay.com/ url vulnerable: https://affiliate.kartpay.com/forgotpassword Steps To Reproduce: 1-Enter your email in the forgot password parameter. 2-complet...
Knowage CAPTCHA Bypass Vulnerability
Knowage is a suite of open source tools for modern business analytics. A CAPTCHA bypass vulnerability exists in Knowage 6.1.1 and earlier versions. The vulnerability stems from the registration page not invalidating a valid CAPTCHA token. An attacker can exploit this vulnerability to bypass CAPTC...
CVE-2019-13190
In Knowage through 6.1.1, the sign up page does not invalidate a valid CAPTCHA token. This allows for CAPTCHA bypass in the signup page...
CVE-2019-13190
In Knowage through 6.1.1, the sign up page does not invalidate a valid CAPTCHA token. This allows for CAPTCHA bypass in the signup page...
Design/Logic Flaw
In Knowage through 6.1.1, the sign up page does not invalidate a valid CAPTCHA token. This allows for CAPTCHA bypass in the signup page...
