PT-2018-8250

Name of the Vulnerable Software and Affected Versions: Firefox versions prior to 53 Description: The issue involves a mechanism to spoof the Firefox for Android address bar using a "javascript:" URI. This occurs because the base domain is parsed incorrectly on Firefox for Android, resulting in th...

Cross site scripting

The validator module before 1.1.0 for Node.js allows remote attackers to bypass the cross-site scripting XSS filter via a crafted javascript URI...

CVE-2013-7452

The validator module before 1.1.0 for Node.js allows remote attackers to bypass the cross-site scripting XSS filter via a crafted javascript URI...

UBUNTU-CVE-2013-7452

The validator module before 1.1.0 for Node.js allows remote attackers to bypass the cross-site scripting XSS filter via a crafted javascript URI...

CVE-2013-7452

The validator module before 1.1.0 for Node.js allows remote attackers to bypass the cross-site scripting XSS filter via a crafted javascript URI...

CVE-2013-7452

The validator module before 1.1.0 for Node.js allows remote attackers to bypass the cross-site scripting XSS filter via a crafted javascript URI...

CVE-2013-7452

Removed by vendor...

CVE-2013-7452: Improper Neutralization of Input During Web Page Generation

The validator module before 1.1.0 for Node.js allows remote attackers to bypass the cross-site scripting XSS filter via a crafted javascript URI...

Airmail 3.0.2 Cross Site Scripting

Airmail is a popular email client on iOS and OS X. I found a vulnerability in airmail of the latest version which could cause a file:// xss and arbitrary file read. Author: redrain, [email protected] Date: 2016-08-15 Version: 3.0.2 and earlier Platform: OS X and iOS Site: http://airmailapp.com/...

Airmail 3.0.2 - Cross-Site Scripting

Exploit for macOS platform in category web applications Airmail is a popular email client on iOS and OS X. I found a vulnerability in airmail of the latest version which could cause a file:// xss and arbitrary file read. Author: redrain, email protected Date: 2016-08-15 Version: 3.0.2 and earlier...

PT-2017-5758

Name of the Vulnerable Software and Affected Versions: validator module versions prior to 1.1.0 Description: The issue allows remote attackers to bypass the cross-site scripting XSS filter via a crafted javascript URI. This could potentially lead to malicious script execution. Recommendations: Fo...

Disucz X3.2 多处反射型XSS漏洞（函数缺陷导致）

简要描述： 某函数缺陷导致的 XSS。 详细说明： member.php?mod=logging&action=login&referer=javascript://www.discuz.net/ 欢迎您回来，Newbie xx，现在将转入登录前页面setTimeout"window.location.href ='javascript://www.discuz.net/';", 2000;setTimeout"window.location.href ='javascript://www.discuz.net/';", 2000; 如果您的浏览器没有自动跳转，请点击此链接...

DEBIAN-CVE-2012-6684

Cross-site scripting XSS vulnerability in the RedCloth library 4.2.9 for Ruby and earlier allows remote attackers to inject arbitrary web script or HTML via a javascript: URI...

CVE-2012-6684

Cross-site scripting XSS vulnerability in the RedCloth library 4.2.9 for Ruby and earlier allows remote attackers to inject arbitrary web script or HTML via a javascript: URI...

Cross site scripting

Cross-site scripting XSS vulnerability in the RedCloth library 4.2.9 for Ruby and earlier allows remote attackers to inject arbitrary web script or HTML via a javascript: URI...

UBUNTU-CVE-2012-6684

Cross-site scripting XSS vulnerability in the RedCloth library 4.2.9 for Ruby and earlier allows remote attackers to inject arbitrary web script or HTML via a javascript: URI...

CVE-2012-6684

Cross-site scripting XSS vulnerability in the RedCloth library 4.2.9 for Ruby and earlier allows remote attackers to inject arbitrary web script or HTML via a javascript: URI...

CVE-2012-6684

Cross-site scripting XSS vulnerability in the RedCloth library 4.2.9 for Ruby and earlier allows remote attackers to inject arbitrary web script or HTML via a javascript: URI...

PT-2015-3535

Name of the Vulnerable Software and Affected Versions RedCloth library versions 4.2.9 and earlier Description The issue allows remote attackers to inject arbitrary web script or HTML via a javascript: URI, which can lead to cross-site scripting XSS attacks. This enables attackers to execute...

CVE-2012-6684: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the RedCloth library 4.2.9 for Ruby and earlier allows remote attackers to inject arbitrary web script or HTML via a javascript: URI...