English

__utmb

__utmt

__utmc

__utmz

__utma

You're looking at domain 'solutions.brightcove.com' on the commercial generic top-level domain (.com), featuring subdomain 'solutions'. Count 10 characters in 'brightcove' with 3 vowels and 7 consonants. Breaking it apart gives two words: bright, cove. Expect 5 characters per word on average. No strong language cues emerged from the frequency lists.

html/45/72/4572acf1-ddea-49d8-80c3-891a9f548720.html.gz

script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascnsrsgac:215:0

object-src 'none';base-uri 'self';script-src 'nonce-48AA7J6ALt0j4H7DrwAGQw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other

script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascnsrsgac:205:0

b7a4abaaf4d098aa06822e4b3a5d00532fa5051b48bc427efbea4b02c7c08d6b

4f175ba1a86dca89a1b1c8cded4cb6d76acc15e976cba8bdc3c8c95820adf716

2051d61446d4dbffb03727031022a08c84528ab44d203a7669c101e5fbdd5515

5ad5171287c6d8cd3f604df3559129c28c5aaea6cc67ccdef3d0a509dbdd7a64

ca3f1bca37369a2147d4b7b5deb5c48fe516a02fc579a5fae3a42be4d88e67ac

d40efcac911d8964f3728eaa767de281306ff55ba9377435a3364d4d1e1613f6

297ca9748cbbe4f3c7b1b11a564ae106f95083c5d3432f0dbda973ac8c4cadca

0025b3e4a979e41ac209bbb1cf9d43e27a96373ecba69e54160e9e0b460db5ee

f211624997d4de43ddd7f58478d6ca46d2cc05f1237d5a28e83d404d7665585b

1259ea99bd76596239bfd3102c679eb0a5052578dc526b0452f4d42f8bcdd45f

parseHTML() executes scripts in event handlers

jQuery 1.x and 2.x are End-of-Life and no longer receiving security updates

jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishandles jQuery.extend(true, {}, ...) because of Object.prototype pollution

passing HTML containing <option> elements from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute untrusted code.

Regex in its jQuery.htmlPrefilter sometimes may introduce XSS

A prototype pollution vulnerability in handlebars is exploitable if an attacker can control the template

Disallow calling helperMissing and blockHelperMissing directly

Regular Expression Denial of Service in Handlebars

Affected versions of `handlebars` are vulnerable to Denial of Service. The package's parser may be forced into an endless loop while processing specially-crafted templates. This may allow attackers to exhaust system resources leading to Denial of Service.


## Recommendation

Upgrade to version 4.4.5 or later.

Versions of `handlebars` prior to 3.0.8 or 4.5.2 are vulnerable to Arbitrary Code Execution. The package's lookup helper fails to properly validate templates, allowing attackers to submit templates that execute arbitrary JavaScript in the system. It can be used to run arbitrary code in a server processing Handlebars templates or on a victim's browser (effectively serving as Cross-Site Scripting).

The following template can be used to demonstrate the vulnerability:  
```{{#with "constructor"}}
	{{#with split as |a|}}
		{{pop (push "alert('Vulnerable Handlebars JS');")}}
		{{#with (concat (lookup join (slice 0 1)))}}
			{{#each (slice 2 3)}}
				{{#with (apply 0 a)}}
					{{.}}
				{{/with}}
			{{/each}}
		{{/with}}
	{{/with}}
{{/with}}```


## Recommendation

Upgrade to version 3.0.8, 4.5.2 or later.

Handlebars before 3.0.8 and 4.x before 4.5.3 is vulnerable to Arbitrary Code Execution. The lookup helper fails to properly validate templates, allowing attackers to submit templates that execute arbitrary JavaScript. This can be used to run arbitrary code on a server processing Handlebars templates or in a victim's browser (effectively serving as XSS).

Versions of `handlebars` prior to 3.0.8 or 4.5.3 are vulnerable to Arbitrary Code Execution. The package's lookup helper fails to properly validate templates, allowing attackers to submit templates that execute arbitrary JavaScript in the system. It is due to an incomplete fix for a [previous issue](https://www.npmjs.com/advisories/1316). This vulnerability can be used to run arbitrary code in a server processing Handlebars templates or on a victim's browser (effectively serving as Cross-Site Scripting)

Remote code execution in handlebars when compiling templates

2e448f6c43e99bb05af795e06b6dee824101bffb0101b2c6cfa9362460c14f36

7b802ed7968e781c0d062e3a9c205cb04966d67c57bb73dd758b01d6c4bd573b

8b59df74e10d9f5211b0c5e227d17677cf1d0f00c085e9fcfde2c1dce3c1f218

publisher documentation and training videos

viewport

html/45/72/4572acf1-ddea-49d8-80c3-891a9f548720_nodriver.html.gz

Brightcove Learning Services Solutions

Network Solutions, LLC

BRIGHTCOVE.COM

Amazon EC2 Abuse

IP Management

Amazon AWS Network Operations

Amazon.com, Inc.

AWS RPKI Management POC

IP Routing

Amazon EC2 Network Operations

AMAZON-CF

<![CDATA[//><!]]>

 (function() { var cx = '017969773216783359937:o1ckbxwaxt4'; var gcse = document.createElement('script'); gcse.type = 'text/javascript'; gcse.async = true; gcse.src = (document.location.protocol == 'https:' ? 'https:' : 'http:') + '//cse.google.com/cse.js?cx=' + cx; var s = document.getElementsByTagName('script')[0]; s.parentNode.insertBefore(gcse, s); })(); 

Requests	IP Address	Location	AS Autonomous System
7	52.222.236.118	United States	AS15169
3	142.250.184.206	United States	AS15169GOOGLE
3	192.237.167.147	United States	AS19994RACKSPACE
3	142.251.141.72	United States	AS15169GOOGLE
3	104.17.25.14	United States	AS13335CLOUDFLARENET
3	3.174.46.3	United States	AS16509AMAZON-02
3	18.245.86.22	United States	Unknown
25	7	-	-

Security Scan Report: solutions.brightcove.com

Summary

AI Security Verdict

Safe Website

Safety Factors

Details

Screenshot

Page Load Overview

Language Analysis

Primary Language

Detection Details

Website Classification

Primary Category

All Detected Categories

Detected Features

Domain & IP Information

Detected Technologies7

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

ssdeep (Context Triggered Piecewise Hashing)

sdhash (Similarity Digest Hashing)

Image Hashes

Perceptual Hashes

Other Hashes

Scan History