PT-2019-8503

Name of the Vulnerable Software and Affected Versions my-wp-translate plugin versions prior to 1.0.4 Description The issue concerns a CSRF problem. Recommendations For versions prior to 1.0.4, update to version 1.0.4 or later to resolve the issue...

PT-2019-8502

Name of the Vulnerable Software and Affected Versions my-wp-translate plugin versions prior to 1.0.4 Description The issue allows for cross-site scripting XSS, which is a type of attack that can be used to steal user data or take control of user sessions. Recommendations For versions prior to...

CVE-2017-18569: Cross-Site Request Forgery (CSRF)

The my-wp-translate plugin before 1.0.4 for WordPress has CSRF...

CVE-2017-18568: Improper Neutralization of Input During Web Page Generation

The my-wp-translate plugin before 1.0.4 for WordPress has XSS...

WordPress Loco Translate 2.2.1 Local File Inclusion

Exploit Title: Wordpress Loco Translate Version 2.2.1 Plugin LFI Google Dork: N/A Date: 03 / 26 / 2019 Exploit Author: Ali S. Ahmad S4R1N Vendor Homepage: https://localise.biz/ Software Link: https://wordpress.org/plugins/loco-translate/ Version: Version 2.2.1 Tested on: Debian GNU/Linux 9 Docker...

WordPress Plugin Loco Translate 2.2.1 - Local File Inclusion

WordPress Plugin Loco Translate 2.2.1 - Local File Inclusion Exploit Title: Wordpress Loco Translate Version 2.2.1 Plugin LFI Google Dork: N/A Date: 03 / 26 / 2019 Exploit Author: Ali S. Ahmad S4R1N Vendor Homepage: https://localise.biz/ Software Link: https://wordpress.org/plugins/loco-translate...

WordPress Loco Translate 2.2.1 Plugin - Local File Inclusion Vulnerability

Exploit for php platform in category web applications Exploit Title: Wordpress Loco Translate Version 2.2.1 Plugin LFI Exploit Author: Ali S. Ahmad S4R1N Vendor Homepage: https://localise.biz/ Software Link: https://wordpress.org/plugins/loco-translate/ Version: Version 2.2.1 Tested on: Debian...

WordPress Plugin Loco Translate 2.2.1 - Local File Inclusion

Exploit Title: Wordpress Loco Translate Version 2.2.1 Plugin LFI Google Dork: N/A Date: 03 / 26 / 2019 Exploit Author: Ali S. Ahmad S4R1N Vendor Homepage: https://localise.biz/ Software Link: https://wordpress.org/plugins/loco-translate/ Version: Version 2.2.1 Tested on: Debian GNU/Linux 9 Docker...

Loco Translate < 2.2.2 - Authenticated LFI

WordPress plugin Loco Translate version appears to have an Authenticated LFI Vulnerability under the 'Edit Template' Functionality. The following vulnerability can be exploited by any user with access to the plugin access can range from Admin to Subscriber WPScanTeam Note: Was not able to reprodu...

gdal/gdal_vector_translate_fuzzer: Heap-use-after-free in VSIFCloseL

Project: https://github.com/OSGeo/gdal.git Detailed report: https://oss-fuzz.com/testcase?key=5767757281361920 Project: gdal Fuzzer: aflgdalvectortranslatefuzzer Fuzz target binary: gdalvectortranslatefuzzer Job Type: aflasangdal Platform Id: linux Crash Type: Heap-use-after-free READ 8 Crash...

Clever Phishing Attack Enlists Google Translate to Spoof Login Page

UPDATE Recently-discovered phishing emails scoop up victims’ Facebook and Google credentials and hides its malicious landing page via a novel method – Google Translate. The phishing campaign uses a two-stage attack to target both Google and Facebook usernames and passwords, according to researche...

Phishing Attacks Against Facebook / Google via Google Translate

When it comes to phishing, criminals put a lot of effort into making their attacks look legitimate, while putting pressure on their victims to take action. In today's post, we're going to examine a recent phishing attempt against me personally...

Cross-Site Scripting (XSS)

angular-gettext is vulnerable to cross-site scripting. interpolationContext is passed to getString or getPlural functions in dist/angular-gettext.js and src/directive.js, which allows attackers to inject arbitrary Javascript code into a victim's browser when the attribute...

CVE-2018-17046

translate man before 2018-08-21 has XSS via containers/outputBox/outputBox.vue and store/index.js...

CVE-2018-17046

translate man before 2018-08-21 has XSS via containers/outputBox/outputBox.vue and store/index.js...

CVE-2018-17046

translate man before 2018-08-21 has XSS via containers/outputBox/outputBox.vue and store/index.js...

translate man cross-site scripting vulnerability

translate man is a browser plugin that can call the Google Translate interface. A cross-site scripting vulnerability exists in versions of translate man prior to 2018-08-21. A remote attacker can exploit the vulnerability to execute malicious code with the help of the...

PT-2018-13860

Name of the Vulnerable Software and Affected Versions translate man versions prior to 2018-08-21 Description The issue is related to a security problem where there is XSS via certain files, specifically containers/outputBox/outputBox.vue and store/index.js. Recommendations For versions prior to...

gdal/gdal_vector_translate_fuzzer: Bad-cast to VSIVirtualHandle from invalid vptr in VSIFWriteL

Project: https://github.com/OSGeo/gdal.git Detailed report: https://oss-fuzz.com/testcase?key=5769514363912192 Project: gdal Fuzzer: libFuzzergdalvectortranslatefuzzer Fuzz target binary: gdalvectortranslatefuzzer Job Type: libfuzzerubsangdal Platform Id: linux Crash Type: Bad-cast Crash Address:...

gdal/gdal_vector_translate_fuzzer: Bad-cast to OGRMultiPolygon from OGRGeometryCollection in OGRMultiPolygon* cpl::down_cast<OGRMultiPolygon*, OGRGeometry>

Project: https://github.com/OSGeo/gdal.git Detailed report: https://oss-fuzz.com/testcase?key=4755222246195200 Project: gdal Fuzzer: libFuzzergdalvectortranslatefuzzer Fuzz target binary: gdalvectortranslatefuzzer Job Type: libfuzzerubsangdal Platform Id: linux Crash Type: Bad-cast Crash Address:...