CVE-2019-16699

The CVE-2019-16699 issue affects the TYPO3 sr_freecap (freeCap CAPTCHA) extension, versions 2.4.5 and earlier and 2.5.2 and earlier. The root cause is improper sanitization of user input, which allows an attacker to trigger arbitrary Extbase actions and achieve Remote Code Execution (RCE). Public...

PT-2019-14775

Name of the Vulnerable Software and Affected Versions sr freecap aka freeCap CAPTCHA extension versions 2.4.5 and below sr freecap aka freeCap CAPTCHA extension version 2.5.2 and below Description The issue allows execution of arbitrary Extbase actions, resulting in Remote Code Execution due to t...

Remote Code Execution in extension "freeCap CAPTCHA" (sr_freecap)

The extension fails to sanitize user input which allows to execute arbitrary Extbase actions resulting in Remote Code Execution...

TYPO3 freeCap CAPTCHA Extension CVE-2019-16699 Remote Code Execution Vulnerability

Description TYPO3 freeCap CAPTCHA extension is prone to a remote code-execution vulnerability. A remote attacker can leverage this issue to execute arbitrary code within the context of the application. Successful exploits will compromise the application and possibly the underlying system. Version...

PT-2019-6607

Name of the Vulnerable Software and Affected Versions IceWarp Webclient versions prior to 10.2.1 Description The issue is related to a non-persistent XSS vulnerability via an HTTP POST request to the "webmail/basic/" endpoint with the parameter dlgcaptchauid. This affects versions prior to 10.2.1...

CVE-2010-5337: Improper Neutralization of Input During Web Page Generation

IceWarp Webclient before 10.2.1 has XSS via an HTTP POST request: webmail/basic/ with the parameter dlgcaptchacontroller is non-persistent in 10.1.3 and 10.2.0...

CVE-2010-5339: Improper Neutralization of Input During Web Page Generation

IceWarp Webclient before 10.2.1 has XSS via an HTTP POST request: webmail/basic/ with the parameter dlgcaptchauid is non-persistent in 10.1.3 and 10.2.0...

PT-2019-6605

Name of the Vulnerable Software and Affected Versions IceWarp Webclient versions prior to 10.2.1 Description The issue is related to a non-persistent XSS vulnerability via an HTTP POST request to the "webmail/basic/" endpoint with the parameter dlgcaptchacontroller. This affects versions prior to...

CVE-2010-5338: Improper Neutralization of Input During Web Page Generation

IceWarp Webclient before 10.2.1 has XSS via an HTTP POST request: webmail/basic/ with the parameter dlgcaptchaaction is non-persistent in 10.1.3 and 10.2.0...

PT-2019-6606

Name of the Vulnerable Software and Affected Versions IceWarp Webclient versions prior to 10.2.1 Description The issue is related to a non-persistent XSS vulnerability via an HTTP POST request to the "webmail/basic/" endpoint with the parameter dlgcaptchaaction. This vulnerability is present in...

Kartpay: bypass captcha in the form forgot password

Summary: In this issue I can bypass Captcha Protection in the Forgot Password form. Browsers Verified In: firefox url: https://affiliate.kartpay.com/ url vulnerable: https://affiliate.kartpay.com/forgotpassword Steps To Reproduce: 1-Enter your email in the forgot password parameter. 2-complet...

Knowage CAPTCHA Bypass Vulnerability

Knowage is a suite of open source tools for modern business analytics. A CAPTCHA bypass vulnerability exists in Knowage 6.1.1 and earlier versions. The vulnerability stems from the registration page not invalidating a valid CAPTCHA token. An attacker can exploit this vulnerability to bypass CAPTC...

CVE-2019-13190

In Knowage through 6.1.1, the sign up page does not invalidate a valid CAPTCHA token. This allows for CAPTCHA bypass in the signup page...

CVE-2019-13190

In Knowage through 6.1.1, the sign up page does not invalidate a valid CAPTCHA token. This allows for CAPTCHA bypass in the signup page...

Design/Logic Flaw

In Knowage through 6.1.1, the sign up page does not invalidate a valid CAPTCHA token. This allows for CAPTCHA bypass in the signup page...

CVE-2019-13190

In Knowage through 6.1.1, the sign up page does not invalidate a valid CAPTCHA token. This allows for CAPTCHA bypass in the signup page...

CVE-2019-13190

In Knowage through 6.1.1, the sign up page does not invalidate a valid CAPTCHA token. This allows for CAPTCHA bypass in the signup page...

CVE-2019-13190

Knowage up to version 6.1.1 contains a CAPTCHA bypass vulnerability where the signup page does not invalidate a valid CAPTCHA token, enabling bypass of CAPTCHA on registration. This affects the sign-up functionality and stems from the CAPTCHA token validation flaw described across multiple source...

CVE-2019-13190: Improper Authentication

In Knowage through 6.1.1, the sign up page does not invalidate a valid CAPTCHA token. This allows for CAPTCHA bypass in the signup page...

PT-2019-13179

Name of the Vulnerable Software and Affected Versions Knowage versions prior to 6.1.2 Description The issue concerns the sign up page, where a valid CAPTCHA token is not invalidated. This allows for CAPTCHA bypass, potentially enabling unauthorized access. Recommendations For versions prior to...