Lucene search
+L

313 matches found

Kitploit
Kitploit
•added 2021/01/17 8:30 p.m.•162 views

ImHex - A Hex Editor For Reverse Engineers, Programmers And People That Value Their Eye Sight When Working At 3 AM.

A Hex Editor for Reverse Engineers, Programmers and people that value their eye sight when working at 3 AM. Features Featureful hex view Byte patching Patch management Copy bytes as feature Bytes Hex string C, C++, C, Rust, Python, Java & JavaScript array ASCII-Art hex view HTML self contained di...

7AI score
SaveExploits0References11
Veracode
Veracode
•added 2021/01/08 4:05 a.m.•16 views

Regular Expression Denial Of Service (ReDoS)

tinymce is vulnerable to regular expression denial of service. The vulnerability allows malicious ruby code samples to cause a denial of service condition in the browser while performing syntax highlighting...

2.5AI score
SaveExploits0
OSV
OSV
•added 2021/01/06 7:25 p.m.•35 views

GHSA-H96F-FC7C-9R55 Regex denial of service vulnerability in codesample plugin

Impact A regex denial of service ReDoS vulnerability was discovered in a dependency of the codesample plugin. The vulnerability allowed poorly formed ruby code samples to lock up the browser while performing syntax highlighting. This impacts users of the codesample plugin using TinyMCE 5.5.1 or...

7.1AI score
SaveExploits0References3
Github Security Blog
Github Security Blog
•added 2021/01/06 7:25 p.m.•40 views

Regex denial of service vulnerability in codesample plugin

Impact A regex denial of service ReDoS vulnerability was discovered in a dependency of the codesample plugin. The vulnerability allowed poorly formed ruby code samples to lock up the browser while performing syntax highlighting. This impacts users of the codesample plugin using TinyMCE 5.5.1 or...

0.2AI score
SaveExploits0References4Affected Software1
OpenVAS
OpenVAS
•added 2020/12/31 12:00 a.m.•27 views

Debian: Security Advisory (DLA-2511-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.7CVSS9.6AI score0.01323EPSS
SaveExploits0References4
Veracode
Veracode
•added 2020/11/17 3:40 p.m.•29 views

Cross-Site Scripting (XSS)

markdown-it-highlightjs is vulnerable to Cross-Site Scripting XSS. An attacker is able to inject and execute arbitrary JavaScript in a user's browser via the lang parameter in the code highlighting feature...

2.4AI score
SaveExploits0
CNVD
CNVD
•added 2020/11/17 12:00 a.m.•27 views

Valeriangalliat Markdown It Highlightjs Cross-Site Scripting Vulnerability

Valeriangalliat Markdown It Highlightjs is Valeriangalliat individual developers of a Js code base for Web page Markdown highlighting . A cross-site scripting vulnerability exists in markdown-it-highlightjs versions prior to 3.3.1, which stems from the ability to insert malicious JavaScript as th...

6.5CVSS6.3AI score0.01362EPSS
SaveExploits1References1
NVD
NVD
•added 2020/11/16 12:15 p.m.•42 views

CVE-2020-7773

This affects the package markdown-it-highlightjs before 3.3.1. It is possible insert malicious JavaScript as a value of lang in the markdown-it-highlightjs Inline code highlighting feature. const markdownItHighlightjs = require"markdown-it-highlightjs"; const md = require'markdown-it'; const...

6.5CVSS6.5AI score0.01362EPSS
SaveExploits1References3
CVE
CVE
•added 2020/11/16 12:00 p.m.•68 views

CVE-2020-7773

This CVE affects the JavaScript package markdown-it-highlightjs before version 3.3.1 . The vulnerability stems from the ability to inject malicious JavaScript through the lang value used in the package’s inline code highlighting feature, enabling XSS in affected renderings (example payload shown ...

6.5CVSS6.3AI score0.01362EPSS
SaveExploits1References3Affected Software1
Cvelist
Cvelist
•added 2020/11/16 12:00 p.m.•45 views

CVE-2020-7773 Cross-site Scripting (XSS)

This affects the package markdown-it-highlightjs before 3.3.1. It is possible insert malicious JavaScript as a value of lang in the markdown-it-highlightjs Inline code highlighting feature. const markdownItHighlightjs = require"markdown-it-highlightjs"; const md = require'markdown-it'; const...

6.5CVSS6.5AI score0.01362EPSS
SaveExploits1References3
Mend
Mend
•added 2020/11/16 12:00 p.m.•3 views

CVE-2020-7773

This affects the package markdown-it-highlightjs before 3.3.1. It is possible insert malicious JavaScript as a value of lang in the markdown-it-highlightjs Inline code highlighting feature. const markdownItHighlightjs = require"markdown-it-highlightjs"; const md = require'markdown-it'; const...

7.1CVSS0.01362EPSS
SaveExploits1References3
Snyk
Snyk
•added 2020/11/16 11:33 a.m.•14 views

Cross-site Scripting (XSS)

Overview markdown-it-highlightjs is a Preset to use highlight.js with markdown-it. Affected versions of this package are vulnerable to Cross-site Scripting XSS. It is possible insert malicious JavaScript as a value of lang in the markdown-it-highlightjs Inline code highlighting feature. const...

6.5CVSS5.3AI score0.01362EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2020/11/16 12:00 a.m.•3 views

PT-2020-19784

Name of the Vulnerable Software and Affected Versions markdown-it-highlightjs versions prior to 3.3.1 Description This issue allows malicious JavaScript to be inserted as a value of lang in the markdown-it-highlightjs Inline code highlighting feature. The vulnerability can be exploited by...

6.5CVSS0.01362EPSS
SaveExploits1References8
CNNVD
CNNVD
•added 2020/11/16 12:00 a.m.•29 views

Valeriangalliat Markdown It Highlightjs 跨站脚本漏洞

Valeriangalliat Markdown It Highlightjs is Valeriangalliat individual developers of a Js code base for Web page Markdown highlighting . A cross-site scripting vulnerability exists in markdown-it-highlightjs versions prior to 3.3.1, which stems from the ability to insert malicious JavaScript as th...

6.5CVSS6.3AI score0.01362EPSS
SaveExploits1References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/11/16 12:00 a.m.•5 views

CVE-2020-7773: Improper Neutralization of Input During Web Page Generation

This affects the package markdown-it-highlightjs before 3.3.1. It is possible insert malicious JavaScript as a value of lang in the markdown-it-highlightjs Inline code highlighting feature. const markdownItHighlightjs = require"markdown-it-highlightjs"; const md = require'markdown-it'; const...

6.5CVSS5.8AI score0.01362EPSS
SaveExploits1References2
OpenVAS
OpenVAS
•added 2020/10/07 12:00 a.m.•36 views

Fedora: Security Advisory for gitit (FEDORA-2020-1eaffe0013)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

6.5CVSS6.5AI score0.01566EPSS
SaveExploits0References2
Fedora
Fedora
•added 2020/10/06 3:07 p.m.•20 views

[SECURITY] Fedora 31 Update: gitit-0.12.3.2-4.fc31

Gitit is a wiki backed by a git, darcs, or mercurial filestore. Pages and uploaded files can be modified either directly via the VCS's command-line t ools or through the wiki's web interface. Pandoc is used for markup processing, so pages may be written in extended markdown, reStructuredText,...

6.5CVSS0.1AI score0.01566EPSS
SaveExploits0
Fedora
Fedora
•added 2020/10/06 3:02 p.m.•50 views

[SECURITY] Fedora 32 Update: gitit-0.12.3.2-6.fc32

Gitit is a wiki backed by a git, darcs, or mercurial filestore. Pages and uploaded files can be modified either directly via the VCS's command-line t ools or through the wiki's web interface. Pandoc is used for markup processing, so pages may be written in extended markdown, reStructuredText,...

6.5CVSS0.1AI score0.01566EPSS
SaveExploits0
Fedora
Fedora
•added 2020/09/29 12:17 a.m.•48 views

[SECURITY] Fedora 33 Update: gitit-0.13.0.0-4.fc33

Gitit is a wiki backed by a git, darcs, or mercurial filestore. Pages and uploaded files can be modified either directly via the VCS's command-line t ools or through the wiki's web interface. Pandoc is used for markup processing, so pages may be written in extended markdown, reStructuredText,...

6.5CVSS0.1AI score0.01566EPSS
SaveExploits0
OpenVAS
OpenVAS
•added 2020/09/29 12:00 a.m.•24 views

Fedora: Security Advisory for gitit (FEDORA-2020-c39d7a562c)

The remote host is missing an update for the SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.5CVSS6.5AI score0.01566EPSS
SaveExploits0References2
Rows per page
Query Builder