UniGUI Framework - Detect

Checks for the presence of UniGUI framework and extracts its version along with the Sencha Ext JS version. !/usr/bin/env python3 -- coding: utf-8 -- """Checks for the presence of UniGUI framework and extracts its version along with the Sencha Ext JS version.""" import re from kittysploit import...

EUVD-2018-19729

Malware in sbrugna...

CVE-2018-8046

The getTip method of Action Columns of Sencha Ext JS 4 to 6 before 6.6.0 is vulnerable to XSS attacks, even when passed HTML-escaped data. This framework brings no built-in XSS protection, so the developer has to ensure that data is correctly sanitized. However, the getTip method of Action Column...

Cross site scripting

The getTip method of Action Columns of Sencha Ext JS 4 to 6 before 6.6.0 is vulnerable to XSS attacks, even when passed HTML-escaped data. This framework brings no built-in XSS protection, so the developer has to ensure that data is correctly sanitized. However, the getTip method of Action Column...

CVE-2018-8046

The getTip method of Action Columns of Sencha Ext JS 4 to 6 before 6.6.0 is vulnerable to XSS attacks, even when passed HTML-escaped data. This framework brings no built-in XSS protection, so the developer has to ensure that data is correctly sanitized. However, the getTip method of Action Column...

CVE-2018-8046

The CVE-2018-8046 issue affects Sencha Ext JS 4–6 prior to 6.6.0. The getTip() method in Action Columns unescapes HTML-escaped data, enabling cross-site scripting if tooltips contain user-controlled content. Public information confirms vulnerability details and that a fix was released in 6.6.0 (w...

PT-2018-18404

Name of the Vulnerable Software and Affected Versions: Sencha Ext JS versions 4 through 6.5.3 Description: The issue concerns the getTip method of Action Columns, which is susceptible to cross-site scripting XSS attacks. This occurs even when HTML-escaped data is passed, as the method un-escapes...

CVE-2018-8046: Improper Neutralization of Input During Web Page Generation

The getTip method of Action Columns of Sencha Ext JS 4 to 6 before 6.6.0 is vulnerable to XSS attacks, even when passed HTML-escaped data. This framework brings no built-in XSS protection, so the developer has to ensure that data is correctly sanitized. However, the getTip method of Action Column...