1849 matches found
Replay Attack
auth0 is vulnerable to replay attacks. The authentication renew request does not include a nonce, which would allow an attacker to replay an old renewAuth request to obtain a valid session...
WordPress Cross-Site Request Forgery Vulnerability (CNVD-2017-07305)
WordPress is a blogging platform developed using the PHP language by the WordPress Software Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. A cross-site request forgery vulnerability exists in the File System Certificates dialog in WordPress version...
DEBIAN-CVE-2017-9064
In WordPress before 4.7.5, a Cross Site Request Forgery CSRF vulnerability exists in the filesystem credentials dialog because a nonce is not required for updating credentials...
PT-2017-18680
Name of the Vulnerable Software and Affected Versions WordPress versions prior to 4.7.5 Description A Cross Site Request Forgery CSRF issue exists in the filesystem credentials dialog. This occurs because a nonce is not required for updating credentials. Recommendations For versions prior to 4.7....
CVE-2016-1000032
TGCaptcha2 version 0.3.0 is vulnerable to a replay attack due to a missing nonce allowing attackers to use a single solved CAPTCHA multiple times...
Information disclosure
TGCaptcha2 version 0.3.0 is vulnerable to a replay attack due to a missing nonce allowing attackers to use a single solved CAPTCHA multiple times...
CVE-2016-1000032
TGCaptcha2 version 0.3.0 is vulnerable to a replay attack due to a missing nonce allowing attackers to use a single solved CAPTCHA multiple times...
PT-2016-4496
Name of the Vulnerable Software and Affected Versions TGCaptcha2 version 0.3.0 Description The issue is related to a missing nonce, which enables attackers to reuse a single solved CAPTCHA multiple times, effectively bypassing the CAPTCHA's security mechanism. Recommendations For TGCaptcha2 versi...
CVE-2016-1000032: Improper Access Control
TGCaptcha2 version 0.3.0 is vulnerable to a replay attack due to a missing nonce allowing attackers to use a single solved CAPTCHA multiple times...