NPM: linkify-it: Quadratic-complexity DoS via the `mailto:` validator scan-loop on attacker text

NPM: linkify-it: Quadratic-complexity DoS via the mailto: validator scan-loop on attacker text vulnerability discovered by ? in WordPress Npm linkify-it versions = 5.0.1...

Bleach linkify(parse_email=True) CPU exhaustion via unbounded email regex scanning

Summary Bleach 6.3.0 exposes a documented email-linkification path through bleach.linkify..., parseemail=True. The implementation scans attacker-controlled text with EMAILRE.finditer over the full character token and has no length, timeout, or linear prefilter before applying the dot-atom email...

UBUNTU-CVE-2021-29975

Through a series of DOM manipulations, a message, over which the attacker had control of the text but not HTML or formatting, could be overlaid on top of another domain with the new domain correctly shown in the address bar resulting in possible user confusion. This vulnerability affects Firefox ...

Algolia: text injection can be used in phishing 404 page should not include attacker text

Hello i want to report a text injection and a missconfiguration of the 404 page which can be used in phishing the bug exists at : https://www.algolia.com/test/%2f../It%20has%20been%20changed%20by%20a%20new%20one%20https://www.crowdcurity.com%20so%20go%20to%20the%20new%20one%20since%20this%20one...