Lucene search
+L

579 matches found

Patchstack
Patchstack
•added 2025/03/24 1:07 p.m.•9 views

WordPress Translator plugin <= 0.3 - CSRF to Stored XSS vulnerability

CSRF to Stored XSS vulnerability discovered by Nguyen Xuan Chien in WordPress Plugin Translator versions = 0.3...

7.1CVSS6.2AI score0.00163EPSS
SaveExploits0Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/03/24 12:00 a.m.•0 views

CVE-2025-30621: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in kornelly Translator translator allows Stored XSS.This issue affects Translator: from n/a through = 0.3...

7.1CVSS5.8AI score0.00163EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/03/24 12:00 a.m.•9 views

WordPress plugin Translator 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site reques...

7.1CVSS8.3AI score0.00163EPSS
SaveExploits0References2
OSV
OSV
•added 2025/03/03 4:47 p.m.•13 views

CVE-2025-25303 Server-Side Request Forgery (SSRF) in MouseTooltipTranslator

The MouseTooltipTranslator Chrome extension allows mouseover translation of any language at once. The MouseTooltipTranslator browser extension is vulnerable to SSRF attacks. The pdf.mjs script uses the URL parameter from the current URL as the file to download and display to the extension user...

6.9CVSS6.8AI score
SaveExploits0References5
RedhatCVE
RedhatCVE
•added 2025/02/06 4:20 a.m.•18 views

CVE-2021-4452

The Google Language Translator plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via multiple parameters in versions up to, and including, 6.0.9 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers to inject arbitrary we...

7.1CVSS6AI score0.00513EPSS
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/12/13 12:00 a.m.•1 views

CVE-2024-54306: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in aitool AIKCT Engine Chatbot, ChatGPT, Gemini, GPT-4o Best AI Chatbot ai-seo-translator allows Cross Site Request Forgery.This issue affects AIKCT Engine Chatbot, ChatGPT, Gemini, GPT-4o Best AI Chatbot: from n/a through = 1.6.2...

4.3CVSS5.8AI score0.00233EPSS
SaveExploits0References1
NVD
NVD
•added 2024/12/09 1:15 p.m.•44 views

CVE-2023-50375

Missing Authorization vulnerability in edo888 Google Language Translator google-language-translator allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Google Language Translator: from n/a through = 6.0.19...

5.3CVSS0.00542EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/12/09 11:29 a.m.•32 views

CVE-2023-50375 WordPress Translate WordPress – Google Language Translator plugin <= 6.0.19 - Broken Access Control vulnerability

Missing Authorization vulnerability in edo888 Google Language Translator google-language-translator allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Google Language Translator: from n/a through = 6.0.19...

5.3CVSS0.00542EPSS
SaveExploits0References1
CVE
CVE
•added 2024/12/09 11:29 a.m.•67 views

CVE-2023-50375

CVE-2023-50375 affects the WordPress Google Language Translator plugin (versions

5.3CVSS5.8AI score0.00542EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/12/09 11:29 a.m.•13 views

CVE-2023-50375 WordPress Translate WordPress – Google Language Translator plugin <= 6.0.19 - Broken Access Control vulnerability

Missing Authorization vulnerability in edo888 Google Language Translator google-language-translator allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Google Language Translator: from n/a through = 6.0.19...

5.3CVSS5.1AI score0.00542EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2024/12/09 12:00 a.m.•13 views

WordPress plugin Google Language Translator 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

5.3CVSS6.7AI score0.00542EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2024/12/09 12:00 a.m.•20 views

PT-2024-13930 · Google · Google Language Translator

Name of the Vulnerable Software and Affected Versions: Google Language Translator versions 6.0.19 and earlier Description: The issue is related to a Missing Authorization vulnerability in Translate AI Multilingual Solutions Google Language Translator, which allows exploiting incorrectly configure...

5.3CVSS6.9AI score0.00542EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/12/09 12:00 a.m.•3 views

CVE-2023-50375: Missing Authorization

Missing Authorization vulnerability in edo888 Google Language Translator google-language-translator allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Google Language Translator: from n/a through = 6.0.19...

5.3CVSS5.9AI score0.00542EPSS
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2024/12/03 6:03 p.m.•9 views

Malicious code in genz-translator (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 983b5b328e433d81113b3e170f313aba83ae5eff0ecd515fc9865ca3a5be1ee9 Installing the package installs a reverse shell. As the mentioned domain doesn't seem to exist, it may be a test designed for an internal usage --- Category:...

7.6AI score
SaveExploits0References1
OSV
OSV
•added 2024/12/03 6:03 p.m.•9 views

MAL-2024-12275 Malicious code in genz-translator (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 983b5b328e433d81113b3e170f313aba83ae5eff0ecd515fc9865ca3a5be1ee9 Installing the package installs a reverse shell. As the mentioned domain doesn't seem to exist, it may be a test designed for an internal usage --- Category:...

7.5AI score
SaveExploits0References1
BDU FSTEC
BDU FSTEC
•added 2024/11/26 12:00 a.m.•23 views

The vulnerability of the file conversion tools between different formats—PS/IGES Parasolid Translator and the simulation modeling application Simcenter Femap—allows a perpetrator to execute arbitrary code.

The vulnerability of the file conversion tools between different formats, such as PS/IGES Parasolid Translator and the simulation application Simcenter Femap, is related to reading data beyond the acceptable range in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary...

7.8CVSS7.6AI score0.0039EPSS
SaveExploits0References5Affected Software2
BDU FSTEC
BDU FSTEC
•added 2024/11/26 12:00 a.m.•18 views

The vulnerability of the file conversion tools between different formats—PS/IGES Parasolid Translator and the simulation modeling application Simcenter Femap—allows a perpetrator to execute arbitrary code.

The vulnerability of the file conversion tools between different formats, such as PS/IGES Parasolid Translator and the simulation application Simcenter Femap, is related to errors in data type mixing. Exploiting this vulnerability can allow attackers to execute arbitrary code using specially...

7.8CVSS7.6AI score0.0039EPSS
SaveExploits0References5Affected Software2
BDU FSTEC
BDU FSTEC
•added 2024/11/26 12:00 a.m.•24 views

The vulnerability of the file conversion tools between different formats—PS/IGES Parasolid Translator and the simulation modeling application Simcenter Femap—allows a perpetrator to execute arbitrary code.

The vulnerability of the file conversion tools between different formats, such as PS/IGES Parasolid Translator and the simulation application Simcenter Femap, is related to reading data beyond the acceptable range in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary...

7.8CVSS7.6AI score0.0039EPSS
SaveExploits0References5Affected Software2
BDU FSTEC
BDU FSTEC
•added 2024/11/26 12:00 a.m.•14 views

The vulnerability of the file conversion tools between different formats—PS/IGES Parasolid Translator and the simulation modeling application Simcenter Femap—allows a perpetrator to execute arbitrary code.

The vulnerability of the file conversion tools between different formats, such as PS/IGES Parasolid Translator and the simulation application Simcenter Femap, is related to reading data beyond the acceptable range in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary...

7.8CVSS7.6AI score0.0039EPSS
SaveExploits0References5Affected Software2
Github Security Blog
Github Security Blog
•added 2024/11/20 6:23 p.m.•47 views

github.com/rancher/steve's users can issue watch commands for arbitrary resources

Impact A vulnerability has been discovered in Steve API Kubernetes API Translator in which users can watch resources they are not allowed to access, when they have at least some generic permissions on the type. For example, a user who can get a single secret in a single namespace can get all...

7.7CVSS7.3AI score0.00475EPSS
SaveExploits0References6Affected Software1
Rows per page
Query Builder