Cross-Site Scripting

Overview Versions of mermaid prior to 8.2.3 are vulnerable to Cross-Site Scripting. If malicious input such as A"" is provided to the application, it will execute the code instead of rendering it as text due to improper output encoding. Recommendation Upgrade to version 8.2.3 or later References ...

GitLab: DoS on the Issue page by exploiting Mermaid.

Summary: An attacker could exploit Mermaid available in Markdown and cause DoS. Description: Markdown supported by GitLab can generate diagrams and flowcharts from text using Mermaid. An Attacker can exploit this function to prevent users from successfully accessing some functions. For example, y...

Mermaid Fashion Show Free - Base64 encoded String, Exported ContentProvider, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Mermaid Fashion Show Free published at the 'play' market has multiple vulnerabilities...

Mermaid Princess Spa & Salon - Dynamic Code Loading, External URLs, Native code usage vulnerabilities

HackApp vulnerability scanner discovered that application Mermaid Princess Spa & Salon published at the 'play' market has multiple vulnerabilities...

Mermaid Ava and Friends - Customized SSL, Dangerous filesystem permissions, Hardcoded secrets vulnerabilities

HackApp vulnerability scanner discovered that application Mermaid Ava and Friends published at the 'play' market has multiple vulnerabilities...

Mermaid Princess - Dangerous filesystem permissions, Insecure KeyStore vulnerabilities

HackApp vulnerability scanner discovered that application Mermaid Princess published at the 'play' market has multiple vulnerabilities...

Mermaid Puzzles for Toddlers - Dynamic Code Loading, External URLs, Native code usage vulnerabilities

HackApp vulnerability scanner discovered that application Mermaid Puzzles for Toddlers published at the 'play' market has multiple vulnerabilities...

The Little Mermaid - Base64 encoded String, External URLs, Native code usage vulnerabilities

HackApp vulnerability scanner discovered that application The Little Mermaid published at the 'play' market has multiple vulnerabilities...

Mermaid Princess - WebView SSL handling enabled, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Mermaid Princess published at the 'play' market has multiple vulnerabilities...

Mermaid puzzle - Dangerous filesystem permissions, MIT license, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Mermaid puzzle published at the 'play' market has multiple vulnerabilities...

Mermaid Salon - Dynamic Code Loading, Exported components, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application Mermaid Salon published at the 'play' market has multiple vulnerabilities...

Ocean Princess - Mermaid Salon - Dangerous filesystem permissions, WebView SSL handling enabled, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Ocean Princess - Mermaid Salon published at the 'play' market has multiple vulnerabilities...

Magic Mermaid Salon - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Magic Mermaid Salon published at the 'play' market has multiple vulnerabilities...

Mermaid Birth Baby Games - Dangerous filesystem permissions, Insecure KeyStore vulnerabilities

HackApp vulnerability scanner discovered that application Mermaid Birth Baby Games published at the 'play' market has multiple vulnerabilities...

mermaid bathing girls games - Dynamic Code Loading, External URLs, Native code usage vulnerabilities

HackApp vulnerability scanner discovered that application mermaid bathing girls games published at the 'play' market has multiple vulnerabilities...

Anime Mermaid Girls Puzzle - Dangerous filesystem permissions, Dynamic Code Loading, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application Anime Mermaid Girls Puzzle published at the 'play' market has multiple vulnerabilities...

CVE-2006-6217

PHP remote file inclusion vulnerability in formdisp.php in the Mermaid 1.2 module for PHP-Nuke allows remote attackers to execute arbitrary PHP code via a URL in the modulename parameter...

CVE-2006-6217

PHP remote file inclusion vulnerability in formdisp.php in the Mermaid 1.2 module for PHP-Nuke allows remote attackers to execute arbitrary PHP code via a URL in the modulename parameter...

CVE-2006-6217

The CVE describes a PHP remote file inclusion vulnerability in formdisp.php of the Mermaid 1.2 module for PHP-Nuke, allowing remote attackers to execute arbitrary PHP code via a URL supplied in the module_name parameter. Affected software: Mermaid 1.2 module for PHP-Nuke. Root cause: improper han...

PHP-Nuke Mermaid Module V1.2 (formdisp.php) Remote File Include Exploit

No description provided by source. !/usr/bin/perl PHP-Nuke Mermaid Module V1.2 formdisp.php Remote File Include Exploit SiberSavascilar.CoM secuirty - Hacking Bug Found & coded By CrackersChild [email protected] Kullanimi perl cra.pl target cmd shell location cmd shell variable pe...