healthcare medical

English

The domain 'weather-widgets.com' uses the commercial generic top-level domain (.com) without a subdomain. The registrable portion 'weather-widgets' spans 15 characters containing 5 vowels alongside nine consonants; it also includes one hyphen. It segments into 3 words: weather, widget, s. Median word length is six characters. No strong language cues emerged from the frequency lists.

html/26/a7/26a74b30-eb60-4d87-b3ae-d106fd0ff822.html.gz

require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers

aa3224c31598ee550b7c4585e4cf189693f53e0ccd42e76831c038a7686c26a9

335f60cc84db721ce3dab92e12cebae491849788e69b91daad53cdf41c90c7e7

7c22fb7bbfb66d1de9d4a346755187517f4c20184d7b99f516507b159ec0b76b

e4bf411611a715a5752d6e80345cd5fa56731a8ff96e54e5212024337a1c6984

47b68dce8cb6805ad5b3ea4d27af92a241f4e29a5c12a274c852e4346a0500b4

81aa1d23ad575ea70f6011930e2726c1afc624058c14243849ec8d332f1101f8

XSS in the `altField` option of the Datepicker widget

XSS in the `of` option of the `.position()` util

XSS Vulnerability on text options of jQuery UI datepicker

XSS when refreshing a checkboxradio with an HTML-like initial text label 

Versions of jquery prior to 1.9.0 are vulnerable to Cross-Site Scripting. The load method fails to recognize and remove "<script>" HTML tags that contain a whitespace character, i.e: "</script >", which results in the enclosed script logic to be executed. This allows attackers to execute arbitrary JavaScript in a victim's browser.


## Recommendation

Upgrade to version 1.9.0 or later.

jQuery 1.x and 2.x are End-of-Life and no longer receiving security updates

jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishandles jQuery.extend(true, {}, ...) because of Object.prototype pollution

passing HTML containing <option> elements from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute untrusted code.

Regex in its jQuery.htmlPrefilter sometimes may introduce XSS

60092e6aa9c50f77980f7a0371ff6a4e6b38a16206567c27c686334a9a3c03e0

Instructions on using the AnythingWeather Widgets.

description

viewport

html/26/a7/26a74b30-eb60-4d87-b3ae-d106fd0ff822_nodriver.html.gz

Using the AnythingWeather Widgets

GoDaddy.com, LLC

WEATHER-WIDGETS.COM

Amazon EC2 Abuse

IP Management

Amazon AWS Network Operations

Amazon.com, Inc.

AWS RPKI Management POC

IP Routing

Amazon EC2 Network Operations

AMAZON-ZPDX


      $('#homeButton').click(function(){ window.location = '/aw-widgets/' });
      $('#adminButton').click(function(){ window.location = '/aw-widgets/admin' });
    

Requests	IP Address	Location	AS Autonomous System
9	44.233.229.43	Boardman, Oregon, United States	AS16509AMAZON-02
8	142.250.184.202	United States	AS15169GOOGLE
17	2	-	-

Security Scan Report: weather-widgets.com

Summary

AI Security Verdict

Safe Website

Safety Factors

Details

Screenshot

Page Load Overview

Language Analysis

Primary Language

Detection Details

Website Classification

Primary Category

All Detected Categories

Detected Features

Domain & IP Information

Detected Technologies6

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

ssdeep (Context Triggered Piecewise Hashing)

sdhash (Similarity Digest Hashing)

Image Hashes

Perceptual Hashes

Other Hashes

Scan History