EUVD-2021-19517

Malware in sbrugna...

CVE-2021-43817: Improper Neutralization of Input During Web Page Generation

Collabora Online is a collaborative online office suite based on LibreOffice technology. In affected versions a reflected XSS vulnerability was found in Collabora Online. An attacker could inject unescaped HTML into a variable as they created the Collabora Online iframe, and execute scripts insid...

CVE-2021-32745: Improper Neutralization of Input During Web Page Generation

Collabora Online is a collaborative online office suite. A reflected XSS vulnerability was found in Collabora Online prior to version 6.4.9-5. An attacker could inject unescaped HTML into a variable as they created the Collabora Online iframe, and execute scripts inside the context of the Collabo...

Google Chrome DoS

The vulnerability of the LocalFrame::isURLAllowed function core/frame/LocalFrame.cpp in the Google Chrome browser component exists due to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to trigger a service failure by using a specially crafted Java scrip...

Examples teach you to understand the net horse-vulnerability warning-the black bar safety net

The main code is as follows: SCRIPT language=”JavaScript” window. status=”completed”; evalfunctionp,a,c,k,e,de=functioncreturn c. toString3 6;if!”. replace/^/,Stringwhilec–dc. toStringa=kc||c. toStringak=functionereturn de;e=functionreturn’\\w+’;c=1;whilec–ifkcp=p. replacenew...