CVE-2018-13433

Boostnote v0.11.7 allows XSS during highlighting of Markdown text, as demonstrated by an onerror attribute of an IMG element...

CVE-2018-13433

Boostnote v0.11.7 allows XSS during highlighting of Markdown text, as demonstrated by an onerror attribute of an IMG element...

CVE-2018-13433

CVE-2018-13433 affects Boostnote v0.11.7, where XSS is possible during Markdown highlighting, demonstrated via an onerror attribute on an IMG element. The connected sources confirm the vulnerability pattern but do not provide explicit exploit details, affected versions beyond v0.11.7, or remediat...

CVE-2018-13433

Boostnote v0.11.7 allows XSS during highlighting of Markdown text, as demonstrated by an onerror attribute of an IMG element...

PT-2018-11820

Name of the Vulnerable Software and Affected Versions Boostnote version 0.11.7 Description The issue allows for XSS during the highlighting of Markdown text. This can be demonstrated by an onerror attribute of an IMG element, such as an onerror attribute, which can lead to the execution of...

CVE-2018-13433: Improper Neutralization of Input During Web Page Generation

Boostnote v0.11.7 allows XSS during highlighting of Markdown text, as demonstrated by an onerror attribute of an IMG element...

Cross-site Scripting (XSS)

joplin is vulnerable to cross-site scripting XSS attacks. The library does not sanitize input when converting markdown files to html, allowing a malicious user to inject and execute arbitrary Javascript...

CVE-2018-1000543

Akiee version 0.0.3 contains a XSS leading to code execution due to the use of node integration vulnerability in "Details" of a task is not validated that can result in XSS leading to abritrary code execution. This attack appear to be exploitable via The attacker tricks the victim into opening a...

Cross site scripting

Akiee version 0.0.3 contains a XSS leading to code execution due to the use of node integration vulnerability in "Details" of a task is not validated that can result in XSS leading to abritrary code execution. This attack appear to be exploitable via The attacker tricks the victim into opening a...

CVE-2018-1000543

Akiee version 0.0.3 contains a XSS leading to code execution due to the use of node integration vulnerability in "Details" of a task is not validated that can result in XSS leading to abritrary code execution. This attack appear to be exploitable via The attacker tricks the victim into opening a...

PT-2018-9439

Name of the Vulnerable Software and Affected Versions Akiee version 0.0.3 Description The issue is related to a XSS vulnerability that can lead to code execution. This is due to the lack of validation in the "Details" of a task, which can result in XSS and subsequently allow for arbitrary code...

CVE-2018-1000543: Improper Neutralization of Input During Web Page Generation

Akiee version 0.0.3 contains a XSS leading to code execution due to the use of node integration vulnerability in "Details" of a task is not validated that can result in XSS leading to abritrary code execution. This attack appear to be exploitable via The attacker tricks the victim into opening a...

Marked Module Denial of Service Vulnerability

marked module is a Markdown compiler for browsers, servers and command line interfaces. A security vulnerability exists in the marked module. An attacker could exploit this vulnerability to cause a denial of service...

DISCOUNT Denial of Service Vulnerability

DISCOUNT is a Markdown markup language implementation. A security vulnerability exists in the 'quoteblock' function of the markdown.c file of the libmarkdown.a static link library in DISCOUNT. A remote attacker can exploit this vulnerability to cause a denial of service heap-based buffer...

DEBIAN-CVE-2018-12495

The quoteblock function in markdown.c in libmarkdown.a in DISCOUNT 2.2.3a allows remote attackers to cause a denial of service heap-based buffer over-read via a crafted file...

UBUNTU-CVE-2018-12495

The quoteblock function in markdown.c in libmarkdown.a in DISCOUNT 2.2.3a allows remote attackers to cause a denial of service heap-based buffer over-read via a crafted file...

Remarkable Cross-Site Scripting Vulnerability

Remarkable is a Markdown a markup language parser. A cross-site scripting vulnerability exists in Remarkable 1.6.2 and earlier versions. A remote attacker can exploit this vulnerability to execute JavaScript code...

Liberapay: Punny code Detection Parsing should be implemented on Markdown

Hello Liberapay Security Team, Description When we insert any URL in Markdown Box in liberapay.com/profilename/edit/statement, it reflects on our main profile page. There was main issue which I discovered was about Punny code parsing method which was not enabled on Markdown. Step to Reproduce For...

Remarkable Cross-Site Scripting Vulnerability

markdown is a Markdown parser. A cross-site scripting vulnerability exists in versions prior to remarkable 1.4.1, which stems from the program failing to properly whitelist link protocols. A remote attacker can exploit this vulnerability to inject content...

CVE-2017-16019

GitBook is a command line tool and Node.js library for building beautiful books using GitHub/Git and Markdown or AsciiDoc. Stored Cross-Site-Scripting XSS is possible in GitBook before 3.2.2 by including code outside of backticks in any ebook. This code will be executed on the online reader...