280 matches found
Design/Logic Flaw
In Materialize through 1.0.0, XSS is possible via the Tooltip feature...
CVE-2019-11002
In Materialize through 1.0.0, XSS is possible via the Tooltip feature...
CVE-2019-11004
In Materialize through 1.0.0, XSS is possible via the Toast feature...
CVE-2019-11003
In Materialize through 1.0.0, XSS is possible via the Autocomplete feature...
CVE-2019-11004
Materialize (up to 1.0.0) is vulnerable to cross-site scripting via the Toast feature. The issue is XSS in the Toast UI component, allowing injection of arbitrary JavaScript into a victim’s browser. Connected sources confirm this across multiple feeds (including Red Hat/EUVD/GHSA references). The...
CVE-2019-11004
In Materialize through 1.0.0, XSS is possible via the Toast feature...
CVE-2019-11004
In Materialize through 1.0.0, XSS is possible via the Toast feature...
CVE-2019-11003
In Materialize through 1.0.0, XSS is possible via the Autocomplete feature...
CVE-2019-11003
In Materialize through 1.0.0, XSS is possible via the Autocomplete feature...
CVE-2019-11003
Materialize up to version 1.0.0 is susceptible to Cross-Site Scripting via the Autocomplete feature. The root cause is insufficient sanitization of user input in the Autocomplete component, enabling arbitrary JavaScript execution when rendered. Affected: Materialize (frontend framework) using the...
CVE-2019-11002
In Materialize through 1.0.0, XSS is possible via the Tooltip feature...
CVE-2019-11002
Materialize up to 1.0.0 is vulnerable to Cross-Site Scripting via the Tooltip component. The vulnerability arises from insufficient sanitization of user input in the tooltip, allowing attacker-controlled content to be rendered as JavaScript. Multiple sources (including Red Hat/Veracode and OSV/PR...
CVE-2019-11002
In Materialize through 1.0.0, XSS is possible via the Tooltip feature...
CVE-2019-11003: Improper Neutralization of Input During Web Page Generation
In Materialize through 1.0.0, XSS is possible via the Autocomplete feature...
PT-2019-12133
Name of the Vulnerable Software and Affected Versions Materialize versions prior to 1.0.1 materialize-css affected versions not specified Description The issue allows for Cross-Site Scripting XSS due to insufficient sanitization of user input in the autocomplete component. This enables an attacke...
CVE-2019-11004: Improper Neutralization of Input During Web Page Generation
In Materialize through 1.0.0, XSS is possible via the Toast feature...
PT-2019-12134
Name of the Vulnerable Software and Affected Versions Materialize version 1.0.0 Description The issue allows for cross-site scripting XSS via the Toast feature. Recommendations For version 1.0.0, at the moment, there is no information about a newer version that contains a fix for this vulnerabili...
PT-2019-12132
Name of the Vulnerable Software and Affected Versions Materialize versions prior to 1.0.1 materialize-css all versions Description The issue allows for Cross-Site Scripting XSS due to insufficient sanitization of user input in the tooltip component. This enables an attacker to execute arbitrary...
CVE-2019-11002: Improper Neutralization of Input During Web Page Generation
In Materialize through 1.0.0, XSS is possible via the Tooltip feature...
WebMap - Nmap Web Dashboard And Reporting
A Web Dashbord for Nmap XML Report Usage You should use this with docker, just by sending this command: $ mkdir /tmp/webmap $ docker run -d \ --name webmap \ -h webmap \ -p 8000:8000 \ -v /tmp/webmap:/opt/xml \ rev3rse/webmap $ now you can run Nmap and save the XML Report on /tmp/webmap $ nmap -s...