PT-2024-17413 · WordPress · Advanced Google Recaptcha Plugin

Name of the Vulnerable Software and Affected Versions: Advanced Google reCAPTCHA plugin for WordPress versions up to 1.25 Description: The issue arises because the plugin does not utilize a strong unique key when generating an unblock request. This makes it possible for unauthenticated attackers ...

WordPress Advanced Google reCAPTCHA plugin <= 1.25 - Brute Force Protection IP Unblock vulnerability

Brute Force Protection IP Unblock vulnerability discovered by Max Boll b0lli in WordPress Plugin Advanced Google reCAPTCHA versions = 1.25...

CVE-2024-40495

A vulnerability was discovered in Linksys Router E2500 with firmware 2.0.00, allows authenticated attackers to execute arbitrary code via the hndparentalctrlunblock function...

Linksys E2500 安全漏洞

The Linksys E2500 is an E-Series wireless router from Linksys, Inc. A security vulnerability exists in the Linksys E2500 version 2.0.00 that originates from allowing an authenticated attacker to execute arbitrary code via the hndparentalctrlunblock function...

PT-2024-28878

Name of the Vulnerable Software and Affected Versions Linksys Router E2500 version 2.0.00 Description A vulnerability was discovered that allows authenticated attackers to execute arbitrary code via the hnd parentalctrl unblock function. Recommendations For Linksys Router E2500 version 2.0.00,...

CVE-2023-29656

An improper authorization vulnerability in Darktrace mobile app Android prior to version 6.0.15 allows disabled and low-privilege users to control "antigena" actionsblock/unblock traffic from the mobile application. This vulnerability could create a "shutdown", blocking all ingress or egress...

A User Can Unblock Themself

Description PUT /api/v1/users/id API doesn't properly check the authorizaion. Proof of Concept 1. admin Enable user registration functionality. 2. user Register new user and login as them. 3. user Create OAuth client. 4. admin Block the new user on admin panel. 5. user Send the following request:...

Blocklist contract lack an unblock mechanism

Lines of code Vulnerability details Impact In Blocklist contract, the manager can block a contract from accessing VotingEscrow by calling the block function. If the manager calls the block function on a contract due to some misunderstanding, the manager cannot resume the contract's access to...

comicpunch.unblock.ws Improper Access Control vulnerability

Security Researcher geeknik Helped patch 8525 vulnerabilities Received 8 Coordinated Disclosure badges Received 20 recommendations , a holder of 8 badges for responsible and coordinated disclosure, found a security vulnerability affecting comicpunch.unblock.ws website and its users. Following...

unblock-sites.info Cross Site Scripting vulnerability

Security Researcher analogmind Helped patch 37 vulnerabilities Received 1 Coordinated Disclosure badges , a holder of 1 badges for responsible and coordinated disclosure, found a security vulnerability affecting unblock-sites.info website and its users. Following coordinated and responsible...

unblock.racing XSS vulnerability

Open Bug Bounty ID: OBB-656721 Description| Value ---|--- Affected Website:| unblock.racing Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

us.unblock.webcam XSS vulnerability

Open Bug Bounty ID: OBB-656702 Description| Value ---|--- Affected Website:| us.unblock.webcam Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

onlinebootycall.com XSS vulnerability

Open Bug Bounty ID: OBB-602555 Description| Value ---|--- Affected Website:| onlinebootycall.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

unblock-us.com XSS vulnerability

Open Bug Bounty ID: OBB-455518 Description| Value ---|--- Affected Website:| unblock-us.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat...

How to Re-Enable Camera when it is Blocked by Restriction policy

How to Remove Restriction Policy from the iOS Devices without Re-enrolling. For Eg:- Customer has pushed the camera restriction policy to the Delivery Group to block the camera access for the users and now want to remove the unblock the camera to their end users by moving into other delivery grou...

Linux Ad & Malware Blocking Script: Hostsblock

Hostsblock is a bash script designed to take advantage of /etc/hosts file to provide system-wide blocking of internet advertisements, malicious domains, trackers, and other undesirable content. To do so, it downloads a configurable set of blocklists and processes their entries into a single...

kernel security, bug fix, and enhancement update

3.10.0-514.21.1.OL7 - Oracle Linux certificates Alexey Petrenko - Oracle Linux RHCK Module Signing Key was compiled into kernel [email protected] - Update x509.genkey bug 24817676 3.10.0-514.21.1 - kernel sched/core: Fix an SMP ordering race in trytowakeup vs...

Xfinity Gateway - Cross-Site Request Forgery

Xfinity Gateway - Cross-Site Request Forgery EXPLOIT TITLE: CSRF RCE XFINITY WEB GATEWAY AUTHOR: Pabstersac DATE: 1ST OF AUGUST 2016 CVE: N/A CATEGORY: REMOTE CONTACT: [email protected] IF ANYONE HAS COMMUNICATION WITH VENDOR PLEASE NOTIFY THEM SINCE THEY HAVE IGNORED ME. CSRF FOR COMCAST...

Unblock Casual - Customized SSL, Dangerous filesystem permissions, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application Unblock Casual published at the 'play' market has multiple vulnerabilities...

Unblock Ball - Customized SSL, Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Unblock Ball published at the 'play' market has multiple vulnerabilities...