Gpt-Agreement-Payment

简体中文 | English Gpt-Agreement-Payment End-to-end replay tool for ChatGPT Plus / Team subscription agreements: reverse-engineered from packet capture the entire chain Stripe Checkout → PayPal / GoPay / QRIS → ChatGPT manual-approval → Codex OAuth + PKCE and implemented as a runnable client. Include...

hcaptcha-challenger

hCaptcha Challenger 🚀 Gracefully face hCaptcha challenge with multimodal large language model. Introduction Does not rely on any Tampermonkey script. Does not use any third-party anti-captcha services. Just implement some interfaces to make AI vs AI possible. Documentation: English | 简体中文 | Русск...

CVE-2026-113667

ApostropheCMS is an open-source Node.js content management system. Prior to 1.5.5 of the Form add-on, 1.2.1 of login-recaptcha, and 1.3.0 of login-hcaptcha, these three CAPTCHA integrations interpolate an unencoded user-supplied response token into the provider verification request. Crafted token...

ApostropheCMS: CAPTCHA response token not URL-encoded

Summary Form and login CAPTCHA verification interpolate the user-supplied widget token unencoded into the server-side verification URL/body, allowing a crafted token to inject query parameters into the reCAPTCHA/hCaptcha verify request. Details - packages/form/lib/recaptcha.js:39 — recaptchaUri =...

CVE-2026-113667

ApostropheCMS, an open-source Node.js content management system, contains a vulnerability in three CAPTCHA integrations: Form , login-recaptcha , and login-hcaptcha . The flaw exists because these components interpolate an unencoded user-supplied response token into the provider verification requ...

CVE-2026-113667 ApostropheCMS: CAPTCHA response token not URL-encoded

ApostropheCMS is an open-source Node.js content management system. Prior to 1.5.5 of the Form add-on, 1.2.1 of login-recaptcha, and 1.3.0 of login-hcaptcha, these three CAPTCHA integrations interpolate an unencoded user-supplied response token into the provider verification request. Crafted token...

CVE-2026-113667 ApostropheCMS: CAPTCHA response token not URL-encoded

ApostropheCMS is an open-source Node.js content management system. Prior to 1.5.5 of the Form add-on, 1.2.1 of login-recaptcha, and 1.3.0 of login-hcaptcha, these three CAPTCHA integrations interpolate an unencoded user-supplied response token into the provider verification request. Crafted token...

fpx (>=0.4.0, <=0.4.9), hcaptcha-challenger (>=0.4.2, <=0.4.2.1) +4 more potentially affected by CVE-2026-85078 via sanic (22.6.2)

sanic PYPI version 22.6.2 is affected by a known vulnerability. The following packages have a transitive dependency on sanic and may be impacted: - fpx =0.4.0, =0.4.2, =0.4.0, =2.2.0, =3.4.5.dev8, =3.4.10.dev2 Source cves: CVE-2026-85078 Source advisory: OSV:PYSEC-2026-4162...

CVE-2026-103347

Unauthenticated Bypass Vulnerability in hCaptcha for WP = 5.3.0 versions...

EUVD-2026-90846

Unauthenticated Bypass Vulnerability in hCaptcha for WP = 5.3.0 versions...

CVE-2026-103347 WordPress hCaptcha for WP plugin <= 5.3.0 - Bypass Vulnerability vulnerability

Unauthenticated Bypass Vulnerability in hCaptcha for WP = 5.3.0 versions...

CVE-2026-103347

The hCaptcha for WP plugin for WordPress (versions

CVE-2026-103347 WordPress hCaptcha for WP plugin <= 5.3.0 - Bypass Vulnerability vulnerability

Unauthenticated Bypass Vulnerability in hCaptcha for WP = 5.3.0 versions...

WordPress hCaptcha for WP plugin <= 5.3.0 - Bypass Vulnerability vulnerability

Bypass Vulnerability vulnerability discovered by bamper1 in WordPress Plugin hCaptcha for WP versions = 5.3.0...

CVE-2026-103347: Authentication Bypass by Spoofing

Unauthenticated Bypass Vulnerability in hCaptcha for WP = 5.3.0 versions...

PT-2026-103878

Unauthenticated Bypass Vulnerability in hCaptcha for WP = 5.3.0 versions...

Broken Gates: Re-Evaluating Web Bot Defenses in the Age of LLM Agents

LLM-based browser agents are rapidly changing the threat landscape for web security. Unlike traditional automation frameworks that execute predefined scripts, these agents can autonomously navigate websites, reason about page content, and interact with web interfaces using natural-language...

CVE-2026-25315

Missing Authorization vulnerability in hcaptcha hCaptcha for WP hcaptcha-for-forms-and-more allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects hCaptcha for WP: from n/a through = 4.21.1...

CVE-2026-25315

Missing Authorization vulnerability in hcaptcha hCaptcha for WP hcaptcha-for-forms-and-more allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects hCaptcha for WP: from n/a through = 4.21.1...

CVE-2026-25315 WordPress hCaptcha for WP plugin <= 4.21.1 - Broken Access Control vulnerability

Missing Authorization vulnerability in hcaptcha hCaptcha for WP hcaptcha-for-forms-and-more allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects hCaptcha for WP: from n/a through = 4.21.1...