-
# Summary
ThinkSAAS version 3.7.0 contains multiple stored Cross-Site Scripting (XSS) vulnerabilities.
These vulnerabilities occur due to the lack of proper filtering of input variables in the `app…
-
With results of the traces we should be able to determine which category of bug it is. A classifier needs to match function calls and parameters, then output appropriate Tags. e.g.
- str_replace = Fil…
-
This is a very handy solution, but I read this while learning about CSPs:
"Don't create a middleware that replaces all script tags with "script nonce=..." because attacker-injected scripts will th…
-
a short summary of how `capa explorer web` can be used to display results from a configured host
mr-tz updated
2 weeks ago
-
Vulnerable Library - jsoup-1.14.3.jar
jsoup is a Java library for working with real-world HTML. It provides a very convenient API for fetching URLs and extracting and manipulating data, using the be…
-
Hi.
I would like to raise a security issue which is described in CVE-2021-3163. Is there any fix for that or do someone know an ETA when that security issue will be fixed?
Thanks in advance.
-
## CVE-2015-9251 - Medium Severity Vulnerability
Vulnerable Library - jquery-2.1.1.min.js
JavaScript library for DOM operations
Library home page: https://cdnjs.cloudflare.com/ajax/libs/jquery/2.1.1…
-
### Checklist
- [X] I've looked at the [documentation](https://summernote.org/deep-dive/) to make sure the behavior isn't documented and expected.
- [X] I'm sure this is an issue with Summernote, not…
-
Findings for SCA, Medium, [TheRedHatter/javagoof:todolist-web-struts/pom.xml]:Cross-site Scripting (XSS)
## Component Details
- **Exploit Maturity**: no-known-exploit
- **Vulnerable Package**: -
- *…
-
## WS-2017-0117 - Medium Severity Vulnerability
Vulnerable Library - angular-v1.3.0
Path to dependency file: /rekall-gui/manuskript/static/bower.json
Path to vulnerable library: /rekall-gui/manuskr…