Skip to content

Commit d35c311

Browse files
benharviebenharvie
authored
Merge pull request #245 from benharvie/10/08-bounties
Bounty upload (10/08)
2 parents 843dea7 + fbe760a commit d35c311

Some content is hidden

Large Commits have some content hidden by default. Use the searchbox below for content that may be hidden.

42 files changed

+838
-68
lines changed

‎bounties/npm/angular-redactor/1/README.md‎

Lines changed: 3 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,3 @@
1+
# Overview
2+
3+
`angular-redactor` is an angular directive for the Redactor editor, this package is vulnerable to Cross-site Scripting (XSS) attacks when HTML content mode is used.

‎bounties/npm/angular-redactor/1/bounty.json‎

Lines changed: 7 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,7 @@
1+
{
2+
"ForkURL": "",
3+
"Bounty": {
4+
"Credit": 650,
5+
"Cash": 25
6+
}
7+
}

‎bounties/npm/angular-redactor/1/vulnerability.json‎

Lines changed: 49 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,49 @@
1+
{
2+
"PackageVulnerabilityID": 1,
3+
"DisclosureDate": "2020-08-10",
4+
"AffectedVersionRange": "*",
5+
"Summary": "Cross-site Scripting (XSS)",
6+
"Contributor": {
7+
"Discloser": "",
8+
"Fixer": ""
9+
},
10+
"Package": {
11+
"Registry": "npm",
12+
"Name": "angular-redactor",
13+
"URL": "https://www.npmjs.com/package/angular-redactor",
14+
"Downloads": "77682"
15+
},
16+
"CWEs": [{
17+
"ID": "CWE-79",
18+
"Description": ""
19+
}],
20+
"CVSS": {
21+
"Version": "3.1",
22+
"AV": "N",
23+
"AC": "L",
24+
"PR": "N",
25+
"UI": "R",
26+
"S": "U",
27+
"C": "H",
28+
"I": "N",
29+
"A": "N",
30+
"E": "",
31+
"RL": "",
32+
"RC": "",
33+
"Score": "6.5"
34+
},
35+
"CVEs": [
36+
"CVE-2018-13339"
37+
],
38+
"Repository": {
39+
"URL": "https://github.com/TylerGarlick/angular-redactor",
40+
"Codebase": [
41+
"JavaScript"
42+
]
43+
},
44+
"Permalinks": [],
45+
"References": [{
46+
"Description": "GitHub Issue",
47+
"URL": "https://github.com/TylerGarlick/angular-redactor/issues/77"
48+
}]
49+
}

‎bounties/npm/hexo-admin/1/README.md‎

Lines changed: 5 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,5 @@
1+
# Overview
2+
3+
`hexo-admin` is a Admin Interface for Hexo, this package are vulnerable to Cross-site Scripting (XSS).
4+
5+
It fails to sanitize rendered markdown, allowing attackers to execute arbitrary JavaScript code in a browser when they create a new post.

‎bounties/npm/hexo-admin/1/bounty.json‎

Lines changed: 7 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,7 @@
1+
{
2+
"ForkURL": "",
3+
"Bounty": {
4+
"Credit": 650,
5+
"Cash": 25
6+
}
7+
}

‎bounties/npm/hexo-admin/1/vulnerability.json‎

Lines changed: 54 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,54 @@
1+
{
2+
"PackageVulnerabilityID": 1,
3+
"DisclosureDate": "2020-08-10",
4+
"AffectedVersionRange": "*",
5+
"Summary": "Cross-site Scripting (XSS)",
6+
"Contributor": {
7+
"Discloser": "Chintan",
8+
"Fixer": ""
9+
},
10+
"Package": {
11+
"Registry": "npm",
12+
"Name": "hexo-admin",
13+
"URL": "https://www.npmjs.com/package/hexo-admin",
14+
"Downloads": "22903"
15+
},
16+
"CWEs": [{
17+
"ID": "CWE-79",
18+
"Description": ""
19+
}],
20+
"CVSS": {
21+
"Version": "3.1",
22+
"AV": "N",
23+
"AC": "L",
24+
"PR": "N",
25+
"UI": "R",
26+
"S": "U",
27+
"C": "H",
28+
"I": "N",
29+
"A": "N",
30+
"E": "",
31+
"RL": "",
32+
"RC": "",
33+
"Score": "6.5"
34+
},
35+
"CVEs": [
36+
""
37+
],
38+
"Repository": {
39+
"URL": "https://github.com/jaredly/hexo-admin",
40+
"Codebase": [
41+
"JavaScript"
42+
]
43+
},
44+
"Permalinks": [],
45+
"References": [{
46+
"Description": "GitHub Issue",
47+
"URL": "https://github.com/jaredly/hexo-admin/issues/185"
48+
},
49+
{
50+
"Description": "www.npmjs.com",
51+
"URL": "https://www.npmjs.com/advisories/1211"
52+
}
53+
]
54+
}

‎bounties/npm/jquery-confirm/1/README.md‎

Lines changed: 12 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,12 @@
1+
# Overview
2+
3+
`jquery-confirm` is a multipurpose plugin for jquery alert, confirm & dialog.
4+
5+
This package is vulnerable to Cross-site Scripting (XSS), HTML can be injected via. `setIcon` and `closeIconClass`.
6+
7+
# Proof of Concept
8+
9+
```
10+
// This shows succesful script execution: alert(0) is executed:
11+
$.confirm().setIcon('"><img src onerror="alert(0)"><"')
12+
```

‎bounties/npm/jquery-confirm/1/bounty.json‎

Lines changed: 7 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,7 @@
1+
{
2+
"ForkURL": "",
3+
"Bounty": {
4+
"Credit": 630,
5+
"Cash": 25
6+
}
7+
}

‎bounties/npm/jquery-confirm/1/vulnerability.json‎

Lines changed: 49 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,49 @@
1+
{
2+
"PackageVulnerabilityID": 1,
3+
"DisclosureDate": "2020-08-10",
4+
"AffectedVersionRange": "*",
5+
"Summary": "Cross-site Scripting (XSS)",
6+
"Contributor": {
7+
"Discloser": "Rob--W",
8+
"Fixer": ""
9+
},
10+
"Package": {
11+
"Registry": "npm",
12+
"Name": "jquery-confirm",
13+
"URL": "https://www.npmjs.com/package/jquery-confirm",
14+
"Downloads": "247261"
15+
},
16+
"CWEs": [{
17+
"ID": "CWE-79",
18+
"Description": ""
19+
}],
20+
"CVSS": {
21+
"Version": "3.1",
22+
"AV": "N",
23+
"AC": "L",
24+
"PR": "N",
25+
"UI": "R",
26+
"S": "U",
27+
"C": "L",
28+
"I": "L",
29+
"A": "L",
30+
"E": "",
31+
"RL": "",
32+
"RC": "",
33+
"Score": "6.3"
34+
},
35+
"CVEs": [
36+
""
37+
],
38+
"Repository": {
39+
"URL": "https://github.com/craftpip/jquery-confirm",
40+
"Codebase": [
41+
"JavaScript"
42+
]
43+
},
44+
"Permalinks": [],
45+
"References": [{
46+
"Description": "GitHub Issue",
47+
"URL": "https://github.com/craftpip/jquery-confirm/issues/508"
48+
}]
49+
}

‎bounties/npm/node-dns-sync/1/README.md‎

Lines changed: 3 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,3 @@
1+
# Overview
2+
3+
`dns-sync` is a dns resolver implemented in Node.js, This package is vulnerable to Regular Expression Denial of Service (ReDoS) attacks.

0 commit comments

Comments
 (0)