171 matches found
nahsra__antisamy_CVE-2016-10006_1-5-3
antisamy 一个用于对来自不可信来源的 HTML 进行快速、可配置净化的库。 换一种说法就是：它是一个 API，可帮助你确保客户端不会在其个人资料、评论等提交的 HTML 中提供恶意代码， 这些 HTML 会被持久化存储在服务器上。在 Web 应用中，“恶意代码”通常指“JavaScript”。大多数情况下，层叠样式表只有在调用 JavaScript 时才会被视为恶意。 然而，在很多情况下，“正常”的 HTML 和 CSS 也可能被以恶意方式利用。 使用方法 首先，从 Maven 添加依赖： root@kitploit: org.owasp.antisamy antisamy...
nahsra__antisamy_CVE-2022-29577_1-6-6-1
AntiSamy 一个用于对来自不可信来源的 HTML 执行快速、可配置清洗的库。支持 Java 7 及以上版本。 换一种说法：它是一个 API，可帮助您确保客户端在其个人资料、评论等中提供的 HTML 中不包含恶意代码，这些内容会持久化存储在服务器上。在 Web 应用中，“恶意代码”通常指“JavaScript”。大多数情况下，级联样式表（CSS）只有在调用 JavaScript 时才会被视为恶意。然而，在很多情况下，“正常”的 HTML 和 CSS 也可能被以恶意方式使用。 如何使用 1. 导入依赖 首先，从 Maven 添加依赖： root@kitploit:...
nahsra__antisamy_CVE-2017-14735_1-5-6
AntiSamy 用于快速、可配置地清理来自不可信来源的HTML的库。支持Java 8+。 另一种说法可能是：这是一个API，帮助您确保客户端在其个人资料、评论等中提供的HTML中不包含恶意代码，这些代码会被持久化在服务器上。对于Web应用程序而言，“恶意代码”通常指“JavaScript”。大多数情况下，层叠样式表仅在调用JavaScript时才被视为恶意。然而，在很多情况下，“正常”的HTML和CSS也可能被恶意使用。 重要！- 1.7.0版本中的API破坏性变更...
VUL4J-60
antisamy 一个用于对来自不受信任来源的 HTML 执行快速、可配置清理的库。 换句话说：它是一个 API，可帮助你确保客户端不会在用于个人资料、评论等并持久化在服务器上的 HTML 中提供恶意的负载代码。对于 Web 应用而言，“恶意代码”通常指“JavaScript”。大多数情况下，级联样式表只有在调用 JavaScript 时才会被视为恶意。然而，在许多情况下，“正常的”HTML 和 CSS 也可能被以恶意的方式利用。 如何使用 首先，从 Maven 添加依赖： root@kitploit: org.owasp.antisamy antisamy 1.5.5 如何构建...
EUVD-2018-0515
Malware in sbrugna...
EUVD-2021-1654
Malware in sbrugna...
EUVD-2018-0657
Malware in sbrugna...
EUVD-2022-1609
Malicious code in bioql PyPI...
EUVD-2022-1842
Malicious code in bioql PyPI...
EUVD-2024-0305
Malicious code in bioql PyPI...
EUVD-2023-2788
Malicious code in bioql PyPI...
EUVD-2024-0472
Malicious code in bioql PyPI...
Linux Distros Unpatched Vulnerability : CVE-2024-23635
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - AntiSamy is a library for performing fast, configurable cleansing of HTML coming from untrusted sources. Prior to 1.7.5, there is a potential for a mutation XSS...
CVE-2024-23635
AntiSamy is a library for performing fast, configurable cleansing of HTML coming from untrusted sources. Prior to 1.7.5, there is a potential for a mutation XSS mXSS vulnerability in AntiSamy caused by flawed parsing of the HTML being sanitized. To be subject to this vulnerability the...
CVE-2023-51652
OWASP AntiSamy .NET is a library for performing cleansing of HTML coming from untrusted sources. Prior to version 1.2.0, there is a potential for a mutation cross-site scripting mXSS vulnerability in AntiSamy caused by flawed parsing of the HTML being sanitized. To be subject to this vulnerabilit...
CVE-2023-43643
AntiSamy is a library for performing fast, configurable cleansing of HTML coming from untrusted sources. Prior to version 1.7.4, there is a potential for a mutation XSS mXSS vulnerability in AntiSamy caused by flawed parsing of the HTML being sanitized. To be subject to this vulnerability the...
CVE-2022-28367
OWASP AntiSamy before 1.6.6 allows XSS via HTML tag smuggling on STYLE content with crafted input. The output serializer does not properly encode the supposed Cascading Style Sheets CSS content...
CVE-2022-28366
Certain Neko-related HTML parsers allow a denial of service via crafted Processing Instruction PI input that causes excessive heap memory consumption. In particular, this issue exists in HtmlUnit-Neko through 2.26, and is fixed in 2.27. This issue also exists in CyberNeko HTML through 1.9.22 also...
CVE-2022-29577
OWASP AntiSamy before 1.6.7 allows XSS via HTML tag smuggling on STYLE content with crafted input. The output serializer does not properly encode the supposed Cascading Style Sheets CSS content. NOTE: this issue exists because of an incomplete fix for CVE-2022-28367...
Linux Distros Unpatched Vulnerability : CVE-2023-43643
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - AntiSamy is a library for performing fast, configurable cleansing of HTML coming from untrusted sources. Prior to version 1.7.4, there is a potential for a...