Cross-Site Scripting(XSS)

Ajax.NET Professional is vulnerable to Cross Site Scripting XSS. The vulnerability is due to the missing data validation in the parse function of core.js. This could allow an attacker to execute arbitrary Javascript...

Prototype Pollution

utilities is vulnerable to Prototype Pollution. The vulnerability exists in the mix function of utilities/lib/core.js when the object is merged, which allows an attacker to cause prototype pollution...

CVE-2023-26102

All versions of the package rangy are vulnerable to Prototype Pollution when using the extend function in file rangy-core.js.The function uses recursive merge which can lead an attacker to modify properties of the Object.prototype...

Prototype Pollution

fast-json-patch is vulnerable to prototype pollution. The vulnerability exists in the applyOperation function of core.js, due to the improper checks for the key variable which allows an attacker to modify object prototype attributes...

Denial Of Service (DoS)

file-type is vulnerable to denial of service. The vulnerability exists in the FileTypeParser function in core.js due to a lack of input sanitization in the file type detector which allows an attacker to cause an application crash by sending mkv file...

Cross-site Scripting (XSS)

ajaxnetprofessional is vulnerable to cross-site scripting attacks. The vulnerability exists due to lack of input validation in parse function of AjaxPro/core.js in when parsing json input which allows a malicious attacker to inject and execute arbitrary javascript...

Design/Logic Flaw

An issue was discovered in Joomla! before 3.9.3. Inadequate parameter handling in JavaScript code core.js writeDynaList could lead to an XSS attack vector...

[20190205] - Core - XSS Issue in core.js writeDynaList

Inadequate parameter handling in JS code could lead to an XSS attack vector...

vBulletin v4.0.4 adserver Javascript (forumdisplay.php) Code Execution

Exploit for php platform in category web applications ====================================================================== vBulletin v4.0.4 adserver Javascript forumdisplay.php Code Execution ======================================================================...