Pimcore – Path traversal vulnerability

Pimcore is an open source Web content management platform for creating and managing Web applications from the Austrian company Pimcore. The platform integrates Web content management, e-commerce frameworks and product information management applications. pimcore versions prior to 10.3.2 contain a...

CVE-2021-25057

The Translation Exchange WordPress plugin through 1.0.14 was vulnerable to Authenticated Stored Cross-Site Scripting XSS within the Project Key text field found in the plugin's settings...

CVE-2021-25057

The Translation Exchange WordPress plugin through 1.0.14 was vulnerable to Authenticated Stored Cross-Site Scripting XSS within the Project Key text field found in the plugin's settings...

CVE-2021-25057

CVE-2021-25057 concerns the Translation Exchange WordPress plugin (versions up to 1.0.14). Multiple sources corroborate an Authenticated Stored Cross-Site Scripting (XSS) flaw in the Project Key setting field, allowing stored XSS when an authenticated user saves crafted content. The vulnerability...

CVE-2021-25057 Translation Exchange <= 1.0.14 - Authenticated Stored Cross-Site Scripting (XSS)

The Translation Exchange WordPress plugin through 1.0.14 was vulnerable to Authenticated Stored Cross-Site Scripting XSS within the Project Key text field found in the plugin's settings...

PT-2022-9613

Name of the Vulnerable Software and Affected Versions The Translation Exchange WordPress plugin versions prior to 1.0.15 Description The issue concerns an Authenticated Stored Cross-Site Scripting XSS vulnerability within the Project Key text field found in the plugin's settings. Recommendations...

CVE-2021-25057: Improper Neutralization of Input During Web Page Generation

The Translation Exchange WordPress plugin through 1.0.14 was vulnerable to Authenticated Stored Cross-Site Scripting XSS within the Project Key text field found in the plugin's settings...

WordPress Plugin Translation Exchange Cross-Site Script Vulnerability

WordPress is a blogging platform developed by the Wordpress Foundation using the PHP language. A cross-site scripting vulnerability exists in versions prior to WordPress plugin Translation Exchange 1.0.14, which stems from a lack of filtering and escaping in the "Project Keywords" text box in the...

unicorn:fuzz_emu_mips_32be: Crash in gen_mftr

Detailed Report: https://oss-fuzz.com/testcase?key=5685634277179392 Project: unicorn Fuzzing Engine: honggfuzz Fuzz Target: fuzzemumips32be Job Type: honggfuzzasanunicorn Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x62e000032214 Crash State: genmftr gencp0 mipstrtranslateinsn...

unicorn:fuzz_emu_arm_arm: Index-out-of-bounds in gen_uc_tracecode

Detailed Report: https://oss-fuzz.com/testcase?key=5906338050342912 Project: unicorn Fuzzing Engine: libFuzzer Fuzz Target: fuzzemuarmarm Job Type: libfuzzerubsanunicorn Platform Id: linux Crash Type: Index-out-of-bounds Crash Address: Crash State: genuctracecode thumbtrtranslateinsn...

WordPress plugin cross-site scripting vulnerability

WordPress is the Wordpress Foundation's set of blogging platform developed using the PHP language . The platform supports setting up personal blog sites on PHP and MySQL servers.WordPress plugin is an open source application plugin for WordPress. A cross-site scripting vulnerability exists in the...

Translation Exchange <= 1.0.14 - Authenticated Stored Cross-Site Scripting (XSS)

The plugin was vulnerable to Authenticated Stored Cross-Site Scripting XSS within the Project Key text field found in the plugin's settings. 1. Click on Use on translation exchange connector 2. In Basic Settings,insert following payload in Project Key text field. "alert55 3. Click Save Changes...

Translation Exchange <= 1.0.14 - Authenticated Stored Cross-Site Scripting (XSS)

The plugin was vulnerable to Authenticated Stored Cross-Site Scripting XSS within the Project Key text field found in the plugin's settings. PoC 1. Click on Use on translation exchange connector 2. In Basic Settings,insert following payload in Project Key text field. " 3. Click Save Changes...

WordPress Translation Exchange plugin <= 1.0.14 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability

Authenticated Stored Cross-Site Scripting XSS vulnerability discovered by Rutuja D Shirke in WordPress Translation Exchange plugin versions = 1.0.14. Solution Deactivate and delete. This plugin has been closed as of January 3, 2022 and is not available for download. This closure is temporary,...

Cross-site Scripting (XSS)

oro/platform is vulnerable to cross-site scripting. The vulnerability exists due to the lack of sanitization in the translations management function which allows an attacker to inject javascript payload via the Upload translation file...

GHSA-RRGW-3HG3-9X8C XSS vulnerability in translations

Summary An attacker with admin privileges and access to Translations management functionality may add JS payload to translation values via: - Translation management UI. - Translations downloaded via the Crowdin service may also contain JS strings used for XSS attacks, for a successful attack...

PT-2022-28278

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned, so the information cannot be provided. Description The issue allows an attacker with admin privileges and access to Translations management functionality to add a JS payload to translation values...

CVE-2021-30269

Possible null pointer dereference due to lack of TLB validation for user provided address in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music, Snapdragon Wired...

PT-2025-8442

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.15.5-00057-gaebcd29c8ed7-dirty Description A vulnerability in the Linux kernel has been resolved, which caused a kernel oops when removing the max9286 module. The issue occurred because the I2C client data did...

Experts Detail Logging Tool of DanderSpritz Framework Used by Equation Group Hackers

Cybersecurity researchers have offered a detailed glimpse into a system called DoubleFeature that's dedicated to logging the different stages of post-exploitation stemming from the deployment of DanderSpritz, a full-featured malware framework used by the Equation Group. DanderSpritz came to light...