Cross-site Scripting (XSS)

materialize is vulnerable to cross-site scripting XSS attacks. A remote attacker is able to inject arbitrary Javascript into a victim's browser via the Tooltip feature...

Authorization

In Materialize through 1.0.0, XSS is possible via the Toast feature...

CVE-2019-11003

In Materialize through 1.0.0, XSS is possible via the Autocomplete feature...

CVE-2019-11004

In Materialize through 1.0.0, XSS is possible via the Toast feature...

CVE-2019-11004

In Materialize through 1.0.0, XSS is possible via the Toast feature...

CVE-2019-11002

In Materialize through 1.0.0, XSS is possible via the Tooltip feature...

Security feature bypass

In Materialize through 1.0.0, XSS is possible via the Autocomplete feature...

CVE-2019-11003

In Materialize through 1.0.0, XSS is possible via the Autocomplete feature...

Design/Logic Flaw

In Materialize through 1.0.0, XSS is possible via the Tooltip feature...

CVE-2019-11002

In Materialize through 1.0.0, XSS is possible via the Tooltip feature...

CVE-2019-11004

Materialize (up to 1.0.0) is vulnerable to cross-site scripting via the Toast feature. The issue is XSS in the Toast UI component, allowing injection of arbitrary JavaScript into a victim’s browser. Connected sources confirm this across multiple feeds (including Red Hat/EUVD/GHSA references). The...

CVE-2019-11004

In Materialize through 1.0.0, XSS is possible via the Toast feature...

CVE-2019-11003

In Materialize through 1.0.0, XSS is possible via the Autocomplete feature...

CVE-2019-11003

Materialize up to version 1.0.0 is susceptible to Cross-Site Scripting via the Autocomplete feature. The root cause is insufficient sanitization of user input in the Autocomplete component, enabling arbitrary JavaScript execution when rendered. Affected: Materialize (frontend framework) using the...

CVE-2019-11002

Materialize up to 1.0.0 is vulnerable to Cross-Site Scripting via the Tooltip component. The vulnerability arises from insufficient sanitization of user input in the tooltip, allowing attacker-controlled content to be rendered as JavaScript. Multiple sources (including Red Hat/Veracode and OSV/PR...

CVE-2019-11002

In Materialize through 1.0.0, XSS is possible via the Tooltip feature...

WebMap - Nmap Web Dashboard And Reporting

A Web Dashbord for Nmap XML Report Usage You should use this with docker, just by sending this command: $ mkdir /tmp/webmap $ docker run -d \ --name webmap \ -h webmap \ -p 8000:8000 \ -v /tmp/webmap:/opt/xml \ rev3rse/webmap $ now you can run Nmap and save the XML Report on /tmp/webmap $ nmap -s...