83 matches found
WordPress Font Farsi Plugin <= 1.6.6 is vulnerable to Cross Site Scripting (XSS)
Software Font Farsi Type Plugin Vulnerable versions = 1.6.6 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-1752 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID cc13461114f8 Credits Bob Matyas Required privilege...
WordPress Plugin Font Farsi 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL. WordPress plugin is an application plugin. A security vulnerability exists in...
PT-2024-18276 · WordPress · Font Farsi
Name of the Vulnerable Software and Affected Versions: Font Farsi WordPress plugin versions 1.6.6 and earlier Description: The issue allows high privilege users, such as admins, to perform Stored Cross-Site Scripting attacks, even when the unfiltered html capability is disallowed, for example, in...
Font Farsi <= 1.6.6 - Admin+ Stored XSS in Settings
Description The plugin does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup PoC 1. Go to...
Font Farsi <= 1.6.6 - Admin+ Stored XSS in Settings
Description The plugin does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup 1. Go to...
SUSE CVE-2010-3770
Multiple cross-site scripting XSS vulnerabilities in the rendering engine in Mozilla Firefox before 3.5.16 and 3.6.x before 3.6.13, and SeaMonkey before 2.0.11, allow remote attackers to inject arbitrary web script or HTML via 1 x-mac-arabic, 2 x-mac-farsi, or 3 x-mac-hebrew characters that may b...
Meta Takes Down Fake Facebook and Instagram Accounts Linked to Pro-U.S. Influence Operation
Meta Platforms on Tuesday said it took down a network of accounts and pages across Facebook and Instagram that were operated by people associated with the U.S. military to spread narratives that depicted the country in a favorable light in the Middle East and Central Asia. The network, which...
Novel remote access trojan CodeRAT uncovered
Threat Level Attack Report For a detailed threat advisory, download the pdf file here Summary CodeRAT is a remote access trojan RAT. The malicious operation, which appears to have originated in Iran, employed a Word document with a Microsoft Dynamic Data Exchange DDE exploit to target...
Hackers Using Microsoft MSHTML Flaw to Spy on Targeted PCs with Malware
A new Iranian threat actor has been discovered exploiting a now-addressed critical flaw in the Microsoft Windows MSHTML platform to target Farsi-speaking victims with a previously undocumented PowerShell-based information stealer designed to harvest extensive details from infected machines. "The...
Cisco Configuration Importer
This module imports a Cisco IOS or NXOS device configuration. شما به این سطح از خدمات دسترسی ندارید - شکن meta name="twitter:label1" content="زمان تقر...
farsi.msi.com XSS vulnerability
Vulnerable URL: https://farsi.msi.com/search/...
Farsi Keyboard - External URLs vulnerabilities
HackApp vulnerability scanner discovered that application Farsi Keyboard published at the 'play' market has multiple vulnerabilities...
VoA Farsi - Dynamic Code Loading, External URLs, Unsafe deleting vulnerabilities
HackApp vulnerability scanner discovered that application VoA Farsi published at the 'play' market has multiple vulnerabilities...
فکاهی جدید افغانی Farsi Jokes - Corrupted files, External URLs, SQLite database found vulnerabilities
HackApp vulnerability scanner discovered that application فکاهی جدید افغانی Farsi Jokes published at the 'play' market has multiple vulnerabilities...
German-Farsi Dictionary - Dangerous filesystem permissions, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application German-Farsi Dictionary published at the 'play' market has multiple vulnerabilities...
German Persian (Farsi) diction - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities
HackApp vulnerability scanner discovered that application German Persian Farsi diction published at the 'play' market has multiple vulnerabilities...
Ziggurat Farsi CMS SQL Injection Vulnerability
No description provided by source. Hello. Thank You For Your Perfect Web Site. Title : Ziggurat Farsi CMS SQL Injection Vulnerability Author: Arash Saadatfar InformatioN Title : Ziggurat Farsi CMS SQL Injection Vulnerability Author : Arash Saadatfar ExploiT Vulnerable File :...
Ziggurrat Farsi CMS 'bck' Parameter Directory Traversal Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/39534/info Ziggurat Farsi CMS is prone to a directory-traversal vulnerability because it fails to sufficiently sanitize user-supplied input. Exploiting this issue will allow an attacker to view arbitrary files within the...
Ziggurat Farsi CMS 'id' Parameter Unspecified Cross Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/39311/info Ziggurat Farsi CMS is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the...
Zigurrat Farsi CMS 'manager/textbox.asp' SQL Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/38719/info Zigurrat Farsi CMS is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to...