EUVD-2015-8391

Malware in sbrugna...

ZEIT Next.js 资源管理错误漏洞

ZEIT Next.js is an open source web application framework from ZEIT based on Vue.js, Node.js, Webpack and Babel.js. Next.js suffers from a security vulnerability that could allow bad actors to trigger a denial of service attack against anyone using the i18n feature...

CVE-2015-8510: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the internationalization feature in the default homescreen app in Mozilla Firefox OS before 2.5 allows user-assisted remote attackers to inject arbitrary web script or HTML via a crafted web site that is mishandled during "Add to home screen" bookmarking...