+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Beginner Hacking (https://hackforums.net/forumdisplay.php?fid=4)
+---- Thread: CVE-2025-40916 - Mojolicious::Plugin::CaptchaPNG Weak Random Number Generation (/showthread.php?tid=6300649)
CVE-2025-40916 - Mojolicious::Plugin::CaptchaPNG Weak Random Number Generation - Stanley - Jun 17, 2025
CVE-2025-40916 - Mojolicious::Plugin::CaptchaPNG Weak Random Number Generation
CVE ID : CVE-2025-40916
Published : June 16, 2025, 11:15 a.m. | 21 hours, 54 minutes ago
Description : Mojolicious::Plugin::CaptchaPNG version 1.05 for Perl uses a weak random number source for generating the captcha.
That version uses the built-in rand() function for generating the captcha text as well as image noise, which is insecure.
Severity: 9.1 | CRITICAL
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
https://cvefeed.io/vuln/detail/CVE-2025-40916
RE: CVE-2025-40916 - Mojolicious::Plugin::CaptchaPNG Weak Random Number Generation - skull - Jun 17, 2025
I must admit, being able to calculate and bypass captcha, not a 9.1 score in my opinion.
Also, this website includes so many ads..
RE: CVE-2025-40916 - Mojolicious::Plugin::CaptchaPNG Weak Random Number Generation - Chornaya Magiya - Jun 17, 2025
(Jun 17, 2025 03:10 PM)skull Wrote: I must admit, being able to calculate and bypass captcha, not a 9.1 score in my opinion.
Also, this website includes so many ads..
I believe for that plugin is 9.1 since cmon it kills all purpose of that plugin haha ✌😎