4 matches found
Cross Site Scripting (XSS)
quill-mention is vulnerable to Cross Site Scripting. The vulnerability is due to mention.js and quill.mention.js as there is no escaping or sanitization for the list items which are rendered using innerHTML. This allows an attacker to insert a malicious script in innerHTML. When the script is...
Daylight Studio Fuel CMS SQL Injection Vulnerability
Daylight Studio Fuel CMS is a content management system based on CodeIgniter. A security vulnerability exists in Daylight Studio Fuel CMS version 1.4.9, which stems from an SQL injection vulnerability in the file Basemodulemodel.php that allows remote attackers to execute arbitrary code via the c...
Portable Malware Analysis Sandbox: Noriben
Portable Malware Analysis Sandbox Noriben is a Python-based script that works in conjunction with Sysinternals Procmon to automatically collect, analyze, and report on runtime indicators of malware. In a nutshell, it allows you to run your malware, hit a keypress, and get a simple text report of...
