2415 matches found
Defeating audio captcha systems
Hi all, Some days ago I wrote an advisory which demonstrates how the Peter's Math Antispam Spinoff plugin for wordpress http://www.theblog.ca/math-anti-spam can be defeated by its audio file. It's hard to summarize, you better read the advisory, but in a very small nutshell, the flaw its about no...
WordPress Plugin Peters Math Anti-Spam 0.1.6 - Audio CAPTCHA Security Bypass
WordPress Plugin Peters Math Anti-Spam 0.1.6 - Audio CAPTCHA Security Bypass source: https://www.securityfocus.com/bid/27287/info Peter's Math Anti-Spam for WordPress is prone to a security-bypass vulnerability. This issue occurs when presenting a visitor with challenge data to determine if they...
WordPress Plugin Peter's Math Anti-Spam 0.1.6 - Audio CAPTCHA Security Bypass
source: https://www.securityfocus.com/bid/27287/info Peter's Math Anti-Spam for WordPress is prone to a security-bypass vulnerability. This issue occurs when presenting a visitor with challenge data to determine if they are a legitimate user or an automaton. The challenge data is poorly obfuscate...
CVE-2008-0206
Multiple cross-site scripting XSS vulnerabilities in captcha\captcha.php in the Captcha! 2.5d and earlier plugin for WordPress allow remote attackers to inject arbitrary web script or HTML via the 1 captchattffolder, 2 captchanumchars, 3 captchattfrange, or 4 captchasecret parameter...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in captcha\captcha.php in the Captcha! 2.5d and earlier plugin for WordPress allow remote attackers to inject arbitrary web script or HTML via the 1 captchattffolder, 2 captchanumchars, 3 captchattfrange, or 4 captchasecret parameter...
CVE-2008-0206: Improper Neutralization of Input During Web Page Generation
Multiple cross-site scripting XSS vulnerabilities in captcha\captcha.php in the Captcha! 2.5d and earlier plugin for WordPress allow remote attackers to inject arbitrary web script or HTML via the 1 captchattffolder, 2 captchanumchars, 3 captchattfrange, or 4 captchasecret parameter...
Evilsentinel <= 1.0.9 (multiple vulnerabilities) Disable Exploit
No description provided by source. !/usr/bin/php -q -d shortopentag=on ? echo ' Evilsentinel = 1.0.9 Disable Exploit by BlackHawk [email protected] http://itablackhawk.altervista.org Thanks to rgod for the php code and Marty for the Love '; if $argc3 echo "Usage: php ".$argv0." Host Path newma...
Evilsentinel 1.0.9 - Multiple Vulnerabilities Disable
Evilsentinel 1.0.9 - Multiple Vulnerabilities Disable !/usr/bin/php -q -d shortopentag=on Thanks to rgod for the php code and Marty for the Love '; if $argc / errorreporting0; iniset"maxexecutiontime",0; iniset"defaultsockettimeout",5; function quickdump$string $re...
CVE-2008-0206
CVE-2008-0206 affects the WordPress Captcha plugin (Captcha! 2.5d and earlier). It describes multiple XSS vulnerabilities in captcha.php, exploitable via the parameters: captcha_ttffolder, captcha_numchars, captcha_ttfrange, and captcha_secret. Remote attackers could inject arbitrary web script o...
evilsentinel-disable.txt
!/usr/bin/php -q -d shortopentag=on Thanks to rgod for the php code and Marty for the Love '; if $argc / errorreporting0; iniset"maxexecutiontime",0; iniset"defaultsockettimeout",5; functi...
Evilsentinel <= 1.0.9 (multiple vulnerabilities) Disable Exploit
Exploit for unknown platform in category web applications ================================================================ Evilsentinel = 1.0.9 multiple vulnerabilities Disable Exploit ================================================================ !/usr/bin/php -q -d shortopentag=on ? echo '...
CVE-2008-0206
Multiple cross-site scripting XSS vulnerabilities in captcha\captcha.php in the Captcha! 2.5d and earlier plugin for WordPress allow remote attackers to inject arbitrary web script or HTML via the 1 captchattffolder, 2 captchanumchars, 3 captchattfrange, or 4 captchasecret parameter...
WordPress Captcha Plugin <= 2.5 - Multiple XSS
Because of these vulnerabilities, the attackers can inject arbitrary web script or HTML. Solution Update the plugin...
Nucleus CMS 3.0.1 - myid SQL Injection
Nucleus CMS 3.0.1 - myid SQL Injection source: https://www.securityfocus.com/bid/27127/info Nucleus CMS is prone to an SQL-injection weakness because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Attackers can exploit this issue in conjunction with other...
Nucleus CMS 3.0.1 - 'myid' SQL Injection
source: https://www.securityfocus.com/bid/27127/info Nucleus CMS is prone to an SQL-injection weakness because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Attackers can exploit this issue in conjunction with other weaknesses in the application to bypass...
Raiders: CAPTCHA cracking-vulnerability warning-the black bar safety net
The so-called verification code, is a string of randomly generated numbers or symbols, to generate a picture, the pictures of Riga on some interference pixel to prevent OCR, and by the user to visually identify where the verification code information, The input form submission site verification,...
Code crack power slightly-vulnerability warning-the black bar safety net
Topic, please master to continue。。。。。。 The so-called verification code, is a string of randomly generated numbers or symbols, to generate a picture, the pictures of Riga on some interference pixel to prevent OCR, and by the user to visually identify where the verification code information, The...
Vulnerability in Drupal Captcha
Здравствуйте 3APA3A! Сообщаю вам о найденной мною Insufficient Anti-automation уязвимости в плагине Captcha для Drupal. Данная капча уязвима для captcha token bypass method. Уязвимость я нашёл в плагине reCaptcha для Drupal который является под-плагином для плагина Captcha. Как сообщил Ben Maurer...
Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc. Drupal Captcha: CAPTCHA bypass...
MoBiC-29: WP-ContactForm CAPTCHA bypass
Здравствуйте 3APA3A! Сообщаю вам о найденной мною Insufficient Anti-automation уязвимости в плагине WP-ContactForm новой версии со встроенной капчей. Это плагин для WordPress. Данный плагин с капчей уязвим для сonstant value bypass method. Insufficient Anti-automation: Эксплоит:...