IDAsec - IDA plugin for reverse-engineering and dynamic interactions with the Binsec platform

IDA plugin for reverse-engineering and dynamic interactions with the Binsec platform Features Decoding an instruction in DBA IR Loading execution traces generated by Pinsec Triggering analyzes on Binsec and retrieving results Dependencies protobuf ZMQ capstone for trace disassembly graphviz to dr...

Cross-site Scripting

plotly-js is vulnerable to cross-site scripting XSS attacks. The vulnerability exists due the lack of URI encoding in the href field that defines the special popup attribute...

CVE-2017-1000006

Plotly, Inc. plotly.js versions prior to 1.16.0 are vulnerable to an XSS issue...

Cross site scripting

Plotly, Inc. plotly.js versions prior to 1.16.0 are vulnerable to an XSS issue...

CVE-2017-1000006

Plotly, Inc. plotly.js versions prior to 1.16.0 are vulnerable to an XSS issue...

CVE-2017-1000006

Plotly, Inc. plotly.js versions prior to 1.16.0 are vulnerable to an XSS issue...

CVE-2017-1000006

Summary: CVE-2017-1000006 affects Plotly’s plotly.js versions prior to 1.16.0, introducing a cross-site scripting (XSS) vulnerability. Component/affected software: plotly.js (Plotly, Inc.). Root cause / nature: XSS in rendering of plots; vulnerable to injection that can lead to script execution i...

PT-2017-10717

Name of the Vulnerable Software and Affected Versions Plotly, Inc. plotly.js versions prior to 1.16.0 Description The issue concerns cross-site scripting. If an attacker can convince a user to visit a malicious plot on a site using this package, affected versions of plotly.js are vulnerable...

WordPress Plotly Plugin HTML Injection Vulnerability

WordPress is the WordPress Software Foundation's set of blogging platform developed using the PHP language , the platform supports in PHP and MySQL server set up personal blog site . Plotly is one of the plugin to the Wordpress site embedded Plotly charts . An HTML injection vulnerability exists ...

WordPress Plotly 1.0.2 Cross Site Scripting

Details ================ Software: Plotly Version: 1.0.2 Homepage: http://wordpress.org/plugins/wp-plotly/ Advisory report: https://security.dxw.com/advisories/stored-xss-in-plotly-allows-less-privileged-users-to-insert-arbitrary-javascript-into-posts/ CVE: CVE-2015-5484 CVSS: 6.5 Medium;...

Plotly <= 1.0.2 - Authenticated Stored Cross-Site Scripting (XSS)

The Plotly WordPress plugin was affected by an Authenticated Stored Cross-Site Scripting XSS security vulnerability...