Malicious code in santana-baileys (npm)

Source: amazon-inspector a01fc218f60217e160355fc41c6006c25da2197ea1fec2b3402df38e125e4252 santana-baileys is a fork of the Baileys WhatsApp library. lib/Socket/messages-send.js line 425 and again at line 436 reconstructs a destination URL from a decimal char-code array via...

JavaScript CharCode Encoder

Encodes JavaScript using String.fromCharCode with numeric ASCII values from kittysploit import class ModuleEncoder: info = "name": "JavaScript CharCode Encoder", "description": "Encodes JavaScript using String.fromCharCode with numeric ASCII values", "author": "KittySploit Team", "platform":...

CVE-2024-39242

A cross-site scripting XSS vulnerability in skycaiji v2.8 allows attackers to execute arbitrary web scripts or HTML via a crafted payload using evalString.fromCharCode...

CVE-2024-39242: Improper Neutralization of Input During Web Page Generation

A cross-site scripting XSS vulnerability in skycaiji v2.8 allows attackers to execute arbitrary web scripts or HTML via a crafted payload using evalString.fromCharCode...

Dijitals CMS Cross Site Scripting

Exploit Title: Dijitals CMS XSS Vulnerabilities Date: 10.06.2010 Author: Valentin Category: webapps/0day Version: latest version Tested on: CVE : Code : :::::::::::::::::::::::::::::::::::::: 0x1 :::::::::::::::::::::::::::::::::::::: General Information Advisory/Exploit Title = Dijitals CMS XSS...

CVE-2007-3708: Undefined Security Weakness

Cross-site scripting XSS vulnerability in CodeIgniter 1.5.3 before 20070626 allows remote attackers to inject arbitrary web script or HTML via 1 String.fromCharCode and 2 malformed nested tag manipulations in an unspecified component, related to insufficient sanitization by the xssclean function...