CVE-2017-1000054

Rocket.Chat version 0.8.0 and newer is vulnerable to XSS in the markdown link parsing code for messages...

CVE-2017-1000054

Rocket.Chat version 0.8.0 and newer is vulnerable to XSS in the markdown link parsing code for messages...

PT-2017-10764 · Rocket.Chat · Rocket.Chat

Name of the Vulnerable Software and Affected Versions: Rocket.Chat versions 0.8.0 and newer Description: The issue concerns an XSS vulnerability in the markdown link parsing code for messages. Recommendations: For Rocket.Chat versions 0.8.0 and newer, at the moment, there is no information about ...

Flexport year in Hackerone is report 6 an interesting vulnerability-vulnerability warning-the black bar safety net

! A year ago the Internet freight forwarders company Flexport in order to improve its customer data security, with our HackerOne platform to establish a cooperative relationship. HackerOne as a global well-known bug Bounty gold one, allowing all the security enthusiasts and professional penetrati...

CVE-2015-3295

markdown-it before 4.1.0 does not block data: URLs...

CVE-2015-3295

markdown-it before 4.1.0 does not block data: URLs...

DEBIAN-CVE-2015-3295

markdown-it before 4.1.0 does not block data: URLs...

CVE-2015-3295

markdown-it before 4.1.0 does not block data: URLs...

CVE-2015-3295

markdown-it before 4.1.0 does not block data: URLs...

CVE-2015-3295

markdown-it before 4.1.0 does not block data: URLs, enabling potential HTML injection when rendering user-provided content. Affected: markdown-it versions prior to 4.1.0. Root cause: failure to block data: URLs in the rendering process. Impact: authoring or rendering content could lead to uninten...

PT-2017-6658

Name of the Vulnerable Software and Affected Versions markdown-it versions prior to 4.1.0 Description The issue concerns markdown-it not blocking data: URLs. Recommendations For versions prior to 4.1.0, update to version 4.1.0 or later to resolve the issue...

CVE-2015-3295: Improper Access Control

markdown-it before 4.1.0 does not block data: URLs...

CVE-2017-9337

The Markdown on Save Improved plugin 2.5 for WordPress has a stored XSS vulnerability in the content of a post...

Cross site scripting

The Markdown on Save Improved plugin 2.5 for WordPress has a stored XSS vulnerability in the content of a post...

PT-2017-18852

Name of the Vulnerable Software and Affected Versions Markdown on Save Improved plugin version 2.5 for WordPress Description The issue is related to a stored XSS vulnerability in the content of a post. Recommendations For Markdown on Save Improved plugin version 2.5, update to a newer version tha...

CVE-2017-9337: Improper Neutralization of Input During Web Page Generation

The Markdown on Save Improved plugin 2.5 for WordPress has a stored XSS vulnerability in the content of a post...

WordPress Markdown on Save Improved Plugin Cross-Site Scripting Vulnerability

WordPress is the WordPress Software Foundation a set of blogging platform using PHP language development, the platform supports in PHP and MySQL server set up a personal blog site.Markdown on Save Improved is one of the editor plugin. A cross-site scripting vulnerability exists in the posting...

Cross-site Scripting (XSS)

github.com/gogits/gogs is vulnerable to cross-site scripting XSS attacks. The library does not sanitize markdown before rendering it, allowing an attacker to execute arbitrary code via markdown comments...

Cross-site Scripting (XSS)

github.com/koding/koding is susceptible to cross-site scripting XSS attacks. It happens because markdown display is not properly encoded to prevent XSS attack...

Dropbox: Dropbox Paper - Markdown XSS

Hello, Today I took a look at Dropbox Paper and noticed there is an option to export/download the project as a Markdown or word docx document. I noticed it doesn't filter any kind of Markdown escaping, meaning when parsed after download will let us execute client side code. equivallent to arbrita...