PT-2020-10248

Name of the Vulnerable Software and Affected Versions TOTOLINK A3002RU versions 2.0.0 and earlier TOTOLINK A702R versions 2.1.3 and earlier TOTOLINK N301RT versions 2.1.6 and earlier TOTOLINK N302R versions 3.4.0 and earlier TOTOLINK N300RT versions 3.4.0 and earlier TOTOLINK N200RE versions 4.0....

CVE-2019-19825: Improper Authentication

On certain TOTOLINK Realtek SDK based routers, the CAPTCHA text can be retrieved via an "topicurl":"setting/getSanvas" POST to the boafrm/formLogin URI, leading to a CAPTCHA bypass. Also, the CAPTCHA text is not needed once the attacker has determined valid credentials. The attacker can perform...

CVE-2013-4982

AVTECH AVN801 DVR has a security bypass via the administration login captcha...

Design/Logic Flaw

AVTECH AVN801 DVR has a security bypass via the administration login captcha...

CVE-2013-4982

CVE-2013-4982 affects AVTECH AVN801 DVRs; authentication bypass is possible by using the login=quick parameter to bypass the login verification code, potentially granting unauthorized access to feeds or device settings. The issue stems from bypassing the admin login captcha, enabling access witho...

CVE-2013-4982

AVTECH AVN801 DVR has a security bypass via the administration login captcha...

PT-2019-6983

Name of the Vulnerable Software and Affected Versions AVTECH AVN801 DVR affected versions not specified Description The issue concerns a security bypass via the administration login captcha. Recommendations At the moment, there is no information about a newer version that contains a fix for this...

CVE-2013-4982: Improper Authentication

AVTECH AVN801 DVR has a security bypass via the administration login captcha...

Logic Flaw Vulnerability in National College Expert Sharing Network

The National University Expert Sharing Network is a national university procurement expert sharing platform, including Fudan University, Peking University has Tsinghua University and many other universities. There is a logic flaw vulnerability in the National University Expert Sharing Network,...

Logic Flaw Vulnerability in Airport A-CDM System at Flymate Technologies Ltd.

Feiyou Technology is a company specializing in providing civil aviation and through flight service data, with data centers and analysis systems such as global flight dynamics data, global aircraft data, flight delay intelligent analysis data, flight punctuality analysis data system, ground...

CVE-2019-15987

A vulnerability in web interface of the Cisco Webex Event Center, Cisco Webex Meeting Center, Cisco Webex Support Center, and Cisco Webex Training Center could allow an unauthenticated, remote attacker to guess account usernames. The vulnerability is due to missing CAPTCHA protection in certain...

Design/Logic Flaw

A vulnerability in web interface of the Cisco Webex Event Center, Cisco Webex Meeting Center, Cisco Webex Support Center, and Cisco Webex Training Center could allow an unauthenticated, remote attacker to guess account usernames. The vulnerability is due to missing CAPTCHA protection in certain...

CVE-2019-15987 Cisco WebEx Centers Username Enumeration Information Disclosure Vulnerability

A vulnerability in web interface of the Cisco Webex Event Center, Cisco Webex Meeting Center, Cisco Webex Support Center, and Cisco Webex Training Center could allow an unauthenticated, remote attacker to guess account usernames. The vulnerability is due to missing CAPTCHA protection in certain...

CVE-2019-15987 Cisco WebEx Centers Username Enumeration Information Disclosure Vulnerability

A vulnerability in web interface of the Cisco Webex Event Center, Cisco Webex Meeting Center, Cisco Webex Support Center, and Cisco Webex Training Center could allow an unauthenticated, remote attacker to guess account usernames. The vulnerability is due to missing CAPTCHA protection in certain...

CVE-2019-15987: Improper Authentication

A vulnerability in web interface of the Cisco Webex Event Center, Cisco Webex Meeting Center, Cisco Webex Support Center, and Cisco Webex Training Center could allow an unauthenticated, remote attacker to guess account usernames. The vulnerability is due to missing CAPTCHA protection in certain...

Cisco WebEx Centers Username Enumeration Information Disclosure Vulnerability

A vulnerability in web interface of the Cisco Webex Event Center, Cisco Webex Meeting Center, Cisco Webex Support Center, and Cisco Webex Training Center could allow an unauthenticated, remote attacker to guess account usernames. The vulnerability is due to missing CAPTCHA protection in certain...

PT-2019-4486

Name of the Vulnerable Software and Affected Versions Cisco Webex Event Center affected versions not specified Cisco Webex Meeting Center affected versions not specified Cisco Webex Support Center affected versions not specified Cisco Webex Training Center affected versions not specified...

PayPal: Token leak in security challenge flow allows retrieving victim's PayPal email and plain text password

A bug was identified whereby sensitive, unique tokens were being leaked in a JS file used by the recaptcha implementation. In certain cases, a user must solve a CAPTCHA challenge after authenticating. When the security challenge is completed, the authentication request is replayed to log in. The...

PT-2019-8922

Name of the Vulnerable Software and Affected Versions Easy!Appointments version 1.3.0 Description The issue is related to a Guessable CAPTCHA problem. There is no information provided about the estimated number of potentially affected devices worldwide or real-world incidents where this issue was...

TYPO3 freeCap CAPTCHA Input Validation Error Vulnerability

TYPO3 is a free and open source content management system framework CMS/CMF from the TYPO3 Association in Switzerland. freeCap CAPTCHA is used in one of the CAPTCHA extension plugins. A security vulnerability exists in TYPO3 freeCap CAPTCHA version 2.4.5 and earlier and version 2.5.2 and earlier...