Cross-Site Scripting (XSS)

summernote is vulnerable to cross-site scripting XSS attacks. The library does not sanitise user input when attaching a link to an image, allowing a malicious user to inject and execute arbitrary code on their own browser...

Discourse: XSS Vulnerability on Image link parser

I found a XSS Cross-Site Scripting vulnerability, and it is present in the markdown parser when it tries to parse an image URL. To reproduce the vulnerability you need to add a fake image url like: http://host/path/to/image'onerror=alert1;//.png As you can see, we have an invalid image URL which...

The use of the picture behind a link hidden hung it.-vulnerability warning-the black bar safety net

I also don't know dove gray is what the time, the mesh horse is very popular, and when I finally know the Dove gray is what time, Pirates of the QQ software in the use of the mailbox the received the letter, and when I use dove gray successful on-line and caught the first broilers of the time, th...

Ubuntu 4.10 / 5.04 / 5.10 : mozilla-firefox, firefox vulnerabilities (USN-271-1)

Web pages with extremely long titles caused subsequent launches of Firefox browser to hang for up to a few minutes, or caused Firefox to crash on computers with insufficient memory. CVE-2005-4134 Igor Bukanov discovered that the JavaScript engine did not properly declare some temporary variables...

EUVD-2005-4673

Internet Explorer 6 for Windows XP Service Pack 2 allows remote attackers to spoof the URL in the status bar via the title in an image in a link to a trusted site within a form to the malicious site...

CVE-2005-4678

Apple Safari 2.0.2 (416.12) is affected by CVE-2005-4678. The vulnerability allows remote attackers to spoof the status bar URL by abusing the title attribute of an image inside a link to a trusted site within a form to the malicious site. The note indicates provenance is from third-party informa...

CVE-2005-4679

This CVE affects Internet Explorer 6 for Windows XP SP2 . The vulnerability allows remote attackers to spoof the URL in the status bar by abusing the title attribute of an image linked to a trusted site within a form, leading to potential user deception. The description does not specify affected ...

CVE-2005-3699

Opera Web Browser 8.50 and 8.0 through 8.0.2 allows remote attackers to spoof the URL in the status bar via the title in an image in a link to a trusted site within a form to the malicious site...

Microsoft Internet Explorer 4/5/6 - Embedded Image URI Obfuscation

source: https://www.securityfocus.com/bid/10308/info It has been reported that Microsoft Internet Explorer is prone to a URI obfuscation weakness that may hide the true contents of a URI link. The issue occurs when an image is contained within a properly formatted HREF tag. This weakness could be...