CVE-2022-28366

CVE-2022-28366 affects Neko HTML parsers used by HtmlUnit-Neko (up to 2.26; fixed in 2.27) and by CyberNeko HTML (up to 1.9.22; 1.9.22 is the last release). The issue is a denial of service via crafted Processing Instruction input that leads to excessive heap memory consumption. OWASP AntiSamy be...

CVE-2022-28366

Certain Neko-related HTML parsers allow a denial of service via crafted Processing Instruction PI input that causes excessive heap memory consumption. In particular, this issue exists in HtmlUnit-Neko through 2.26, and is fixed in 2.27. This issue also exists in CyberNeko HTML through 1.9.22 also...

HtmlUnit 安全漏洞

HtmlUnit is an open source java page analysis tool that reads a page and can be used effectively to analyze the content on the page using HtmlUnit. A security vulnerability exists in HtmlUnit Neko 2.26 that allows denial of service via crafted Processing Instruction PI input, which can lead to...

PT-2022-18975 · Owasp +2 · Owasp Antisamy +4

Name of the Vulnerable Software and Affected Versions: HtmlUnit-Neko versions 2.26 and earlier CyberNeko HTML versions 1.9.22 and earlier OWASP AntiSamy versions 1.6.6 and earlier Description: Certain Neko-related HTML parsers allow a denial of service via crafted Processing Instruction PI input...

[SECURITY] Fedora 29 Update: nekovm-2.2.0-8.fc29

Neko is a high-level dynamically typed programming language which can also be used as an embedded scripting language. It has been designed to provide a common run-time for several different languages. Neko is not only very easy to learn and use, but also has the flexibility of being able to exten...

neko-miku.com XSS vulnerability

Open Bug Bounty ID: OBB-462229 Description| Value ---|--- Affected Website:| neko-miku.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat She...

neko-miku.com XSS vulnerability

Vulnerable URL: http://neko-miku.com/index.php?search=%22%3E%3Csvg%2Fonload%3Dalert%2Fopenbugbounty%2F%3E Details: Description| Value ---|--- Patched:| Yes, at 25.10.2017 Latest check for patch:| 25.10.2017 05:27 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank|...

neko-miku.com XSS vulnerability

Vulnerable URL: http://neko-miku.com/index.php?search=%22%3E%3Csvg%2Fonload%3Dalert%28%2FXSSPOSED%2F%29%3E Details: Description| Value ---|--- Patched:| Yes, at 27.07.2017 Latest check for patch:| 27.07.2017 08:05 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank|...