2566 matches found
CVE-2018-20988
The wpgform plugin before 0.94 for WordPress has eval injection in the CAPTCHA calculation...
CVE-2018-20988
The wpgform plugin before 0.94 for WordPress has eval injection in the CAPTCHA calculation...
Code injection
The wpgform plugin before 0.94 for WordPress has eval injection in the CAPTCHA calculation...
CVE-2018-20988
The wpgform plugin before 0.94 for WordPress has eval injection in the CAPTCHA calculation...
CVE-2018-20988
The wpgform plugin before 0.94 for WordPress has eval injection in the CAPTCHA calculation...
CVE-2018-20988
CVE-2018-20988 affects the WordPress Google Forms (wpgform) plugin prior to 0.94. The issue is an eval injection in the CAPTCHA calculation, as described across multiple sources (NVD, Red Hat, CNVD, CVE list, etc.). The connected documents do not provide explicit exploitation details, affected pr...
PT-2019-10425
Name of the Vulnerable Software and Affected Versions wpgform plugin versions prior to 0.94 Description The issue concerns eval injection in the CAPTCHA calculation of the wpgform plugin. Recommendations For versions prior to 0.94, update to version 0.94 or later to resolve the issue...
CVE-2018-20988: Improper Control of Generation of Code
The wpgform plugin before 0.94 for WordPress has eval injection in the CAPTCHA calculation...
CVE-2019-13983
Directus 7 API before 2.2.2 has insufficient anti-automation, as demonstrated by lack of a CAPTCHA in core/Directus/Services/AuthService.php and endpoints/Auth.php...
CVE-2019-13983
Directus 7 API before 2.2.2 has insufficient anti-automation, as demonstrated by lack of a CAPTCHA in core/Directus/Services/AuthService.php and endpoints/Auth.php...
CVE-2019-13983
Directus 7 API before 2.2.2 has insufficient anti-automation, as demonstrated by lack of a CAPTCHA in core/Directus/Services/AuthService.php and endpoints/Auth.php...
CVE-2019-13983
Directus 7 API before 2.2.2 is affected by insufficient anti-automation due to lack of CAPTCHA in core/Directus/Services/AuthService.php and endpoints/Auth.php. This creates a risk of automated login attempts (brute force). The evidence across multiple sources confirms the vulnerability in Direct...
CVE-2019-13983
Directus 7 API before 2.2.2 has insufficient anti-automation, as demonstrated by lack of a CAPTCHA in core/Directus/Services/AuthService.php and endpoints/Auth.php...
PT-2019-13512
Name of the Vulnerable Software and Affected Versions Directus versions prior to 2.2.2 Description The issue is related to insufficient anti-automation measures. Specifically, it is demonstrated by the lack of a CAPTCHA in core/Directus/Services/AuthService.php and endpoints/Auth.php, which are A...
Kartpay: Captcha protection Bypass on Forgot password page
The Captcha system was implemented by Validation of Captcha was missed out during the forgot password. so it was found out and fixed has been released to the system. Captcha bypass by removing the token and forward the response...
Protection Mechanism Bypass
MantisBT is vulnerable to protection mechanism bypass. It leads to the bypass of CAPTCHA protection mechanism since the publickey parameter value is treated as the key to the CAPTCHA answer, demonstrating the attack via entering the publickey value 0 for E4652...
MobOk Malware Hides in Photo Editors on Google Play, Siphons Cash
A powerful money-siphoning malware known as MobOk has been found hiding in seemingly legitimate photo editing apps available on the Google Play store. The Pink Camera and Pink Camera 2 apps, now removed, had been installed around 10,000 times, according to researchers at Kaspersky. They included...
ADC AAA ReCaptcha fails with error at login page after upgrade or initial setup with "Error for site owner: Invalid Site Key"
Upgrade from 12.1.49.x to 50.x+ or 13.x re-captcha causes error at login page. Setup for ReCaptcha on 12.1.50.x + or 13.0.x causes error at login page. Error on login is "Error for site owner: Invalid Site Key" ns.log has error message - 0-PPE-2: default AAATM Message 16977 0: "nFactor: Could not...
WTCMS Denial of Service Vulnerability
WTCMS is a ThinkPHP-based content management system CMS. A denial of service vulnerability exists in WTCMS version 1.0, which can be exploited by remote attackers to cause a denial of service resource consumption with the help of specially sized captcha images...