JVN#93727681: BestWebSoft Captcha plugin vulnerable to CAPTCHA authentication bypass

Captcha provided by BestWebSoft is a plugin for WordPress. Captcha contains a CAPTCHA authentication bypass vulnerability CWE-254. Impact If this vulnerability is exploited, an attacker may be able to successfully login to WordPress and access an administrative interface without authentication...

MantisBT 1.2.x < 1.2.19 Multiple Vulnerabilities

According to its version number, the MantisBT application hosted on the remote web server is 1.2.x prior to 1.2.19. It is, therefore, affected by the following vulnerabilities : - An XSS vulnerability exists in 'admin/install.php' that allows remote attackers to inject arbitrary script data via t...

MantisBT 1.2.x < 1.2.19 Multiple Vulnerabilities

Binary data 8903.prm...

phpwind can bypass the verification code to continue the violent crack users, demo demo-a vulnerability warning-the black bar safety net

First came to phpwind official website to see, found phpwind has been updated to 9. 0, website is the latest program ! 1. png Then came the landing place can be seen, the site has CAPTCHA restrictions, sank half） ! 2. png Then pick an account login see, the input error will find that there are th...

ecshop background a brute-force CAPTCHA bypass-vulnerability warning-the black bar safety net

ecshop background of violence crack Detailed description: ! 选区 092.jpg Login request for code area username=admin&password=admin888&captcha=1 1 1 1&act=signin Request remove cookie in ECSCPID=parameter Service the end it will not verify the CAPTCHA directly to verify that the account password is...

mantisbt: multiple issues

CVE-2014-9571 cross-side scripting Cross-site scripting XSS vulnerability in admin/install.php allows remote attackers to inject arbitrary web script or HTML via the 1 adminusername or 2 adminpassword parameter. - CVE-2014-9572 information disclosure It was discovered that mantisbt does not...

ecshop a CAPTCHA bypass logic vulnerability-vulnerability warning-the black bar safety net

Although the code is encrypted, but logically there is a point problem The problem ..\includes\clscaptcha.php By the verification function can be seen directly returned, and no authentication failure processing function checkword$word $recorded = isset$SESSION$this-sessionword ?...

Facebook Linkshim Bypass Vulnerability

This Bypasses the l.php in facebook and granting you full control to send links in your victims without the captcha. It will also be masked by on.fb.me Speaking of Bypass it does not redirect the victim to the warning page. Usage Info You just need some fast moves to create this exploit before it...

CVE-2014-8034

Cisco WebEx Meetings Server 1.5 presents the same CAPTCHA challenge for each login attempt, which makes it easier for remote attackers to obtain access via a brute-force approach of guessing usernames, aka Bug ID CSCuj40321...

Design/Logic Flaw

Cisco WebEx Meetings Server 1.5 presents the same CAPTCHA challenge for each login attempt, which makes it easier for remote attackers to obtain access via a brute-force approach of guessing usernames, aka Bug ID CSCuj40321...

CVE-2014-8034

Cisco WebEx Meetings Server 1.5 is affected by CVE-2014-8034 due to a login CAPTCHA that does not refresh between attempts, enabling unauthenticated remote attackers to perform brute-force username guessing and enumerate valid accounts. Cisco’s advisory confirms the vulnerability and that updated...

CVE-2014-8034

Cisco WebEx Meetings Server 1.5 presents the same CAPTCHA challenge for each login attempt, which makes it easier for remote attackers to obtain access via a brute-force approach of guessing usernames, aka Bug ID CSCuj40321...

CVE-2014-8034: Undefined Security Weakness

Cisco WebEx Meetings Server 1.5 presents the same CAPTCHA challenge for each login attempt, which makes it easier for remote attackers to obtain access via a brute-force approach of guessing usernames, aka Bug ID CSCuj40321...

PT-2015-3996

Name of the Vulnerable Software and Affected Versions Cisco WebEx Meetings Server version 1.5 Description The issue allows remote attackers to gain access via a brute-force approach by guessing usernames, as the same CAPTCHA challenge is presented for each login attempt. Recommendations For Cisco...

Cisco WebEx Meetings Server User Enumeration Vulnerability

A vulnerability in Cisco WebEx Meetings Server could allow an unauthenticated, remote attacker to guess valid user accounts on the targeted system. The vulnerability exists because the affected software fails to refresh the CAPTCHA on the login page. An attacker could exploit this vulnerability b...

WordPress Google Captcha Plugin <= 1.12 - BYPASS

Because of this vulnerability, attackers can bypass the CAPTCHA protection mechanism and obtain administrative access via unspecified vectors. Solution Update the plugin...

Debian DSA-3120-1 : mantis - security update

Multiple security issues have been found in the Mantis bug tracking system, which may result in phishing, information disclosure, CAPTCHA bypass, SQL injection, cross-site scripting or the execution of arbitrary PHP code. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text a...

[SECURITY] [DSA 3120-1] mantis security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3120-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff January 06, 2015 http://www.debian.org/security/faq -...

DSA-3120-1 mantis - security update

Bulletin has no description...

Debian: Security Advisory (DSA-3120-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...