Denial of Service (DoS)

Overview Affected versions of this package are vulnerable to Denial of Service DoS due to excessive resource consumption in handleclosebracket. PoC python3 -c 'print"" 10000' Details Denial of Service DoS describes a family of attacks, all aimed at making a system inaccessible to its intended and...

UBUNTU-CVE-2023-22486

cmark-gfm is GitHub's fork of cmark, a CommonMark parsing and rendering library and program in C. Versions prior to 0.29.0.gfm.7 contain a polynomial time complexity issue in handleclosebracket that may lead to unbounded resource exhaustion and subsequent denial of service. This vulnerability has...

LiquidityPool:getAmountToTransfer() has incorrect calculation due to incorrect bracket placement

Lines of code Vulnerability details Impact In the scenario where the transfer fee exceeds the equilibrium fee, the excess gets credited to the incentive pool. The incentive pool fee added is incentivePooltokenAddress = incentivePooltokenAddress + amount transferFeePerc -...

Nordaaker Convos 跨站脚本漏洞

Nordaaker Convos is an open source web browser-based multi-user chat application from Nordaaker, Norway. Nordaaker Convos suffers from a cross-site scripting vulnerability that stems from the software's lack of effective filtering and escaping of tabbed bracket quotes in the chat window, resultin...

GHSA-RQF8-8C89-MW29 Cross-site Scripting in curly-bracket-parser

This affects all versions of package curly-bracket-parser. When used as a template library, it does not properly sanitize the user input...

Cross-site Scripting in curly-bracket-parser

This affects all versions of package curly-bracket-parser. When used as a template library, it does not properly sanitize the user input...

Cross-site Scripting (XSS)

curly-bracket-parser is vulnerable to cross-site scripting. An attacker is able to inject and execute arbitrary Javascript in a user's browser when used as a template library due to lack of user input sanitization...

CVE-2021-23416

This affects all versions of package curly-bracket-parser. When used as a template library, it does not properly sanitize the user input...

CVE-2021-23416

CVE-2021-23416 : Cross-site Scripting in curly-bracket-parser affects all versions when used as a template library due to improper sanitization of user input. The vulnerability enables injection of malicious scripts through template processing. Public advisories (GHSA/OSV) corroborate XSS across ...

CVE-2021-23416

This affects all versions of package curly-bracket-parser. When used as a template library, it does not properly sanitize the user input...

Cross-site Scripting (XSS)

Overview curly-bracket-parser is a Simple parser to replace variables inside templates/strings and files. Affected versions of this package are vulnerable to Cross-site Scripting XSS. When used as a template library, it does not properly sanitize the user input. PoC const express = require'expres...

Unable to type the left bracket "[" in published desktop via Workspace app for HTML5

Users cannot type left square bracket "" in published desktop Accessing published desktop via Workspace app for HTML5 through Mozilla Firefox...

Cross-Site Scripting in bracket-template

All versions of bracket-template are vulnerable to stored cross-site scripting XSS. This is exploitable when a variable passed in via a GET parameter is used in a template. Recommendation No fix is currently available for this vulnerability. It is our recommendation to not install or use this...

GHSA-JJ6G-7J8P-7GF2 Cross-Site Scripting in bracket-template

All versions of bracket-template are vulnerable to stored cross-site scripting XSS. This is exploitable when a variable passed in via a GET parameter is used in a template. Recommendation No fix is currently available for this vulnerability. It is our recommendation to not install or use this...

pcre: Out-of-bounds read in compile_bracket_matchingpath function (8.41/3)

The compilebracketmatchingpath function in pcrejitcompile.c in PCRE through 8.x before revision 1680 e.g., the PHP 7.1.1 bundled version allows remote attackers to cause a denial of service out-of-bounds read and application crash via a crafted regular expression...

GHSA-488M-6GH8-9J36 bracket-template vulnerable to reflected XSS

bracket-template suffers from reflected XSS possible when variable passed via GET parameter is used in template...

Bracket-template Cross-Site Scripting Vulnerability

bracket-template is a JavaScript template library for modern browsers. A cross-site scripting vulnerability exists in bracket-template. This vulnerability can be exploited by a remote attacker to inject malicious code via GET parameters...

CVE-2018-3735

bracket-template suffers from reflected XSS possible when variable passed via GET parameter is used in template...

CVE-2018-3735

bracket-template suffers from reflected XSS possible when variable passed via GET parameter is used in template...

PT-2018-16159 · Bracket · Bracket-Template

Name of the Vulnerable Software and Affected Versions: bracket-template affected versions not specified Description: The issue is related to reflected XSS, which can occur when a variable passed via a GET parameter is used in a template. Recommendations: At the moment, there is no information abo...