finance banking

finance/banking

English

The domain 'gomaxfincunion.com' uses the commercial generic top-level domain (.com) without a subdomain. Count 14 characters in 'gomaxfincunion' containing six vowels alongside eight consonants. Tokenizing the label suggests five words: go, max, f, inc, union. Median word length is 3 characters. No strong language cues emerged from the frequency lists.

firstname

lastname

currency

account_type

occupation

gender

marital_status

country

address

city

state

zipcode

email

username

phone

account_pin

password

con_password

confirm_ssn

document_type

front_page

back_page

reset_btn

submit

registerForm

query

gtrans

vote

html/7d/4c/7d4c753a-e588-4dfa-9015-8ecf2942464f.html.gz

require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/rosetta

require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes

aa57c7b88ebe07a0ab4922004f63ce0468b3946a3620f49a711ccfedc2093ce7

85556761a8800d14ced8fcd41a6b8b26bf012d44a318866c0d81a62092efd9bf

a213e3bcd0da14b65aac4c7329a995898a07bdbe3f8b4542d286b50cfbc91041

3675f226f985b64eea6ae8544d5496a32d19993aae1ac4a3fa101263ef3206f7

0e24697d795236d0b673f19da3d12a174f65039d90490c089ebd8f56f2127afc

58ff07b8e8840772419cd6ce798c3b7e1e4e8d39efddab72f82407bfcd51e565

06f930d0dcda4ac5bee3d224523ce57899dff1a7ea0b8d3e18dccc627d306c83

a4ec9d558eeb7bc7359fe7c4820deea2c951fdd8bd34cb0e15727412c7f6c634

dfa8eec1b9bca04c2568b54524800ce1d16b8dc4f8d70fc5d5e998a161640b34

193aa4e8c74782571fe80c33c69f93978a955c3fb7644f2135c747d98e575696

a6e7c8756667f3f480f1eff498654d182c65f0576c3828af374c4d74ffb55bd1

ab2d81d45430bda61ce61ed5556dfd0b83b613d592288f91d93fbb0c24b20d60

f0fb3769cc69d61957b52c434ccace34582e351c33d877348ad09df1faf925c8

b74992cf774d5abd5835f52b242d393c8a83f5b23857e2444797664e142dbd1b

faece9f8b739341a9082602ef320e3daf77ffd32747f5a54ab980fc4fa055f45

8ce8fa96a7d2d0ff71dbc362e7289a49b19e303ab92684486b0e16faf7cc16a3

7d2c4f45781edb76e79487b4f3bd7a7bb1ca0beee7df51c17150a5769730f7d6

1c1c2ec41829211636686ac910a1f090d201a4508f15b05425af99196169b808

e3414f979119f198d602006e67fce8956948983d6899c8d9cc17eebffc32c479

62552cf53f90a70a1b012f1a57e12878f6d3e3d9004f13fd9a0f4a1e6e47d736

7c209ce50b76600257f47c0a47333504478e9c89793713cc7d113bbb688c3eda

fc790761edb79b954a5e6853774ed96db936a3729b78d4b72dad5e79ce395c54

### Impact

Affected versions of this package are vulnerable to Prototype Pollution.  A malicious HTML code block can be crafted that will result in prototype pollution of the base object's prototype during highlighting.  If you allow users to insert custom HTML code blocks into your page/app via parsing Markdown code blocks (or similar) and do not filter the language names the user can provide you may be vulnerable. 

The pollution should just be harmless data but this can cause problems for applications not expecting these properties to exist and can result in strange behavior or application crashes, i.e. a potential DOS vector. 

_If your website or application does not render user provided data it should be unaffected._

### Patches

Versions 9.18.2 and 10.1.2 and newer include fixes for this vulnerability.  If you are using version 7 or 8 you are encouraged to upgrade to a newer release.

### Workarounds

#### Patch your library

Manually patch your library to create null objects for both `languages` and `aliases`:

```js
const HLJS = function(hljs) {
  // ...
  var languages = Object.create(null);
  var aliases = Object.create(null);
```

#### Filter out bad data from end users:

Filter the language names that users are allowed to inject into your HTML to guarantee they are valid.

### References

* [What is Prototype Pollution?](https://codeburst.io/what-is-prototype-pollution-49482fc4b638)
* https://github.com/highlightjs/highlight.js/pull/2636

### For more information

If you have any questions or comments about this advisory:

* Please file an issue against [highlight.js](https://github.com/highlightjs/highlight.js/issues/)

### Impact: Potential ReDOS vulnerabilities (exponential and polynomial RegEx backtracking)

[oswasp](https://owasp.org/www-community/attacks/Regular_expression_Denial_of_Service_-_ReDoS): 

> The Regular expression Denial of Service (ReDoS) is a Denial of Service attack, that exploits the fact that most Regular Expression implementations may reach extreme situations that cause them to work very slowly (exponentially related to input size). An attacker can then cause a program using a Regular Expression to enter these extreme situations and then hang for a very long time.

If are you are using Highlight.js to highlight user-provided data you are possibly vulnerable.  On the client-side (in a browser or Electron environment) risks could include lengthy freezes or crashes... On the server-side infinite freezes could occur... effectively preventing users from accessing your app or service (ie, Denial of Service).

This is an issue with grammars shipped with the parser (and potentially 3rd party grammars also), not the parser itself. If you are using Highlight.js with any of the following grammars you are vulnerable.  If you are using `highlightAuto` to detect the language (and have any of these grammars registered) you are vulnerable. Exponential grammars (C, Perl, JavaScript) are auto-registered when using the common grammar subset/library `require('highlight.js/lib/common')` as of 10.4.0 - see https://cdn.jsdelivr.net/gh/highlightjs/cdn-release@10.4.0/build/highlight.js

All versions prior to 10.4.1 are vulnerable, including version 9.18.5. 

**Grammars with exponential backtracking issues:**

  - c-like (c, cpp, arduino)
  - handlebars (htmlbars)
  - gams
  - perl
  - jboss-cli
  - r
  - erlang-repl
  - powershell
  - routeros
  - livescript (10.4.0 and 9.18.5 included this fix)
  - javascript & typescript (10.4.0 included partial fixes)

And of course any aliases of those languages have the same issue. ie: `hpp` is no safer than `cpp`.

**Grammars with polynomial backtracking issues:**

- kotlin
- gcode
- d
- aspectj
- moonscript
- coffeescript/livescript
- csharp
- scilab
- crystal
- elixir
- basic
- ebnf
- ruby
- fortran/irpf90
- livecodeserver
- yaml
- x86asm
- dsconfig
- markdown
- ruleslanguage
- xquery
- sqf

And again: any aliases of those languages have the same issue. ie: `ruby` and `rb` share the same ruby issues.


### Patches

- Version 10.4.1 resolves these vulnerabilities.  Please upgrade.

### Workarounds / Mitigations

- Discontinue use the affected grammars. (or perhaps use only those with poly vs exponential issues)
- Attempt cherry-picking the grammar fixes into older versions...
- Attempt using newer CDN versions of any affected languages.  (ie using an older CDN version of the library with newer CDN grammars).  Your mileage may vary.

### References

- https://owasp.org/www-community/attacks/Regular_expression_Denial_of_Service_-_ReDoS

### For more information

If you have any questions or comments about this advisory:
* Open an issue: https://github.com/highlightjs/highlight.js/issues
* Email us at [security@highlightjs.com](mailto:security@highlightjs.com)

c703cca5b430fbc4cbe8cd1229c53199535d8d97adffaedd166c6727c105798f

adad71e40b7017d7a4cff0154fb837d3d27972976c3363db2f1d30daf3991373

85e83f3213a2eed07f2c54279a4322eefc6fc6550d18ee0047928d47afa3ed62

eeff8926f5c4ca34b4c3e554b392869a0964e3889a67953789afbbab73c547d2

2076c81ac03a57935995eecf3bf48f681bc8f87fb9ba89ca1d2664c9919e72d3

width=device-width, initial-scale=1, maximum-scale=1, shrink-to-fit=no

viewport

html/7d/4c/7d4c753a-e588-4dfa-9015-8ecf2942464f_nodriver.html.gz

Registration - Gomax Financial Credit Union

Name SRS AB

GOMAXFINCUNION.COM

Abuse

Google LLC

GOOGLE


                function googleTranslateElementInit() {
                  new google.translate.TranslateElement({pageLanguage: 'en', layout: google.translate.TranslateElement.InlineLayout.HORIZONTAL}, 'google_translate_element');
                }
              


    $(document).ready(function(){
        $(".numpad").hide();
        $('.input').click(function(){
            $('.numpad').fadeToggle('fast');
        });

        $('.del').click(function(){
            $('.input').val($('.input').val().substring(0,$('.input').val().length - 1));
        });
        $('.faq').click(function(){
            alert("Enter Your OTP Sent to you ");
        })
        $('.shuffle').click(function(){
            $('.input').val($('.input').val() + $(this).text());
            $('.shuffle').shuffle();
        });
        (function($){

            $.fn.shuffle = function() {

                var allElems = this.get(),
                    getRandom = function(max) {
                        return Math.floor(Math.random() * max);
                    },
                    shuffled = $.map(allElems, function(){
                        var random = getRandom(allElems.length),
                            randEl = $(allElems[random]).clone(true)[0];
                        allElems.splice(random, 1);
                        return randEl;
                    });

                this.each(function(i){
                    $(this).replaceWith($(shuffled[i]));
                });

                return $(shuffled);

            };

        })(jQuery);

    });



    $(function() {
        $('#datepicker').keypress(function(event) {
            event.preventDefault();
            return false;
        });
    });


    function switchVisible() {
        if (document.getElementById('Div1')) {

            if (document.getElementById('Div1').style.display === 'none') {
                document.getElementById('Div1').style.display = 'block';
                document.getElementById('Div2').style.display = 'none';
                document.getElementById('nextShow').style.display = 'none';
            }
            else {
                document.getElementById('Div1').style.display = 'none';
                document.getElementById('Div2').style.display = 'block';
                document.getElementById('nextShow').style.display = 'block';
                document.getElementById('Button1').style.display='none';
            }
        }
    }





        $(document).ready(function(){
            // for ajax registration

                                            $("#registerForm").on('submit', function(event){
                                                    event.preventDefault();
                                                
                                                var url = "../banking/customer/inc/process_register.php";
          
                                                   $.ajax({
                                                   type: "POST",
                                                   url : url,
                                                   data:  new FormData(this),
                                                   contentType: false,
                                                   processData:false,
                                                   success: function(data, request, settings){
                                                   // alert(data);

                                                   if( data.includes("signup_success")){
                                                    // starts here
                                                      $('input[type=reset]').trigger('click');
                                                      $('#submit').prop('disabled', true);
                                                      window.location="signup_success";
                                                      return false;
                                                      // ends here
                                                   }else{
                                                    $('#submit').prop('disabled', false);
                                                    Swal.fire(
                                                       'Oh Sorry',
                                                       data,
                                                       'error'
                                                    )
                                                   }
                                                   $('#loaderIcon7').html("");
           
                                                },
                                                beforeSend: function(data, request, settings){
                                                  $('#loaderIcon7').html('<img src="../banking/customer/ajaxloader/ajax-loader3.gif"/>');
                                                  $('#submit').prop('disabled', true);
                                                },
  
                                                });
            
                                            
        
                                            });
                                            // end of ajax login
        });
    

Requests	IP Address	Location	AS Autonomous System
9	142.251.151.119	United States	AS15169
8	216.58.206.42	United States	AS60068
8	195.181.170.19	United States	AS16509
8	142.250.186.74	United States	AS19318
8	172.217.16.195	United States	Unknown
8	3.121.194.18	Frankfurt am Main, Hesse, Germany	AS16509Amazon.com, Inc.
8	161.129.70.237	Atlanta, Georgia, United States	AS19318Interserver, Inc
8	142.251.37.14	United States	Unknown
8	142.250.186.35	United States	Unknown
73	9	-	-

Security Scan Report: gomaxfincunion.com

Summary

AI Security Verdict

High Risk

Risk Factors

Details

Screenshot

Page Load Overview

Language Analysis

Primary Language

Detection Details

Website Classification

Primary Category

All Detected Categories

Detected Features

Domain & IP Information

Detected Technologies11

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

ssdeep (Context Triggered Piecewise Hashing)

sdhash (Similarity Digest Hashing)

Image Hashes

Perceptual Hashes

Other Hashes

Scan History