（CVE-2025-15005）CouchCMS reCAPTCHA组件硬编码加密密钥漏洞

Description

PoC

None yet. Search at https://trap.biu.life/?ref=rss

References

• https://nvd.nist.gov/vuln/detail/CVE-2025-15005
• https://access.redhat.com/security/cve/cve-2025-15005
• https://github.com/advisories/GHSA-7v96-f75p-x544
• https://feedly.com/cve/CVE-2025-15005
• https://cve.imfht.com/detail/CVE-2025-15005?lang=en
• https://radar.offseq.com/threat/cve-2025-15005-use-of-hard-coded-cryptographic-key-849c0d51
• https://cve.imfht.com/detail/CVE-2025-15005

Related Vulnerabilities

• PoCwp-googlecaptcha-fpd: WordPress Plugin reCaptcha by BestWebSoft (google-captcha) - Full Path Disclosure
• PoCCVE-2018-7662: CouchCMS <= 2.0 - Path Disclosure
• PoCCVE-2018-7662: Couchcms 2.0 Dictionary Disclosure
• PoCgoogle-recaptcha-csp-bypass: Content-Security-Policy Bypass - Google reCAPTCHA
• PoCgstatic-recaptcha-csp-bypass: Content-Security-Policy Bypass - GStatic reCAPTCHA
• PoCrecaptcha-net-csp-bypass: Content-Security-Policy Bypass - reCAPTCHA Net
• WordPress plugin ReCaptcha Integration for WordPress 跨站脚本漏洞