government public service

Italian

__utmb

__utma

XSRF-TOKEN

democrito_session

__utmz

__utmt

__utmc

You're looking at domain 'www.ponzanodifermo.org' on the non-profit oriented generic top-level domain (.org); it also runs on subdomain 'www'. The registrable portion 'ponzanodifermo' spans 14 characters containing six vowels alongside 8 consonants. Segmentation suggests four words: pon, zan, odi, fermo. Median word length is 3 characters. No strong language cues emerged from the frequency lists.

html/a1/ab/a1ab4f33-6c98-4de1-bd20-7fbf7d87668b.html.gz

script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascnsrsgac:215:0

script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascnsrsgac:201:0

53964478a7c634e8dad34ecc303dd8048d00dce4993906de1bacf67f663486ef

3709960e8552ffd2d4ea93df1f1bbad27957efb79de0de78c04c256e23d6910c

3029834a820c79c154c377f52e2719fc3ff2a27600a07ae089ea7fde9087f6bc

02e49d109a4e1853eca8f64a65fdcb7a8d042ae08ec802026357f0a7c8e2c307

1259ea99bd76596239bfd3102c679eb0a5052578dc526b0452f4d42f8bcdd45f

84bfeafbe3d9d01c9a2addaa1cde48ea6c6cd76b467860427304d758a541762d

3454b1b6131b225059c5c24c891b9b9121005005240e912ce22954deba2812dc

3ffeee3820d6ff2183b621cfcc643999b98a88c803b64484c839eab77e2a1036

91d1d904044f798cc728dd50f31f2adf4383c4d4498a05f52f5a0170bccfb1db

FIXED so links with xlink:href attributes are filtered correctly to prevent XSS.

The vulnerability allowed arbitrary JavaScript execution when inserting a specially crafted piece of content into the editor via the clipboard or APIs

cross-site scripting (XSS) vulnerability was discovered in: the core parser and `media` plugin. 

Cross-site scripting vulnerability in TinyMCE

CDATA parsing and sanitization has been improved to address a cross-site scripting (XSS) vulnerability.

media embed content not processing safely in some cases.

content in an iframe element parsing as DOM elements instead of text content.

Regex denial of service vulnerability in codesample plugin

security issue where URLs in attributes weren’t correctly sanitized. security issue in the codesample plugin

URLs are not correctly filtered in some cases.

Inserting certain HTML content into the editor could result in invalid HTML once parsed. This caused a medium severity Cross Site Scripting (XSS) vulnerability

URLs not cleaned correctly in some cases in the link and image plugins

A cross-site scripting (XSS) vulnerability in TinyMCE alerts which allowed arbitrary JavaScript execution was found and fixed.

TinyMCE XSS vulnerability in notificationManager.open API

TinyMCE mXSS vulnerability in undo/redo, getContent API, resetContent API, and Autosave plugin

TinyMCE vulnerable to mutation Cross-site Scripting via special characters in unescaped text nodes

TinyMCE Cross-Site Scripting (XSS) vulnerability using noneditable_regexp option

TinyMCE Cross-Site Scripting (XSS) vulnerability using noscript elements

TinyMCE Cross-Site Scripting (XSS) vulnerability in handling iframes

TinyMCE Cross-Site Scripting (XSS) vulnerability in handling external SVG files through Object or Embed elements

1fa2f649ec0b02453daa300496c62c6e31133b2006d58185e96b2ec13badcc11

d6ba8019bcc85af9cc99ee19f614401deb21be39b05c04c3b17b433ba6859235

a3467f835c94ca1b2e0b4170742491b937a51f5aacd227df0b9a0b7ba41cc876

viewport

Fondazione Istituzionale Gazzetta Amministrativa per la ricerca e lo sviluppo

description

author

Tucows Domains Inc.

ponzanodifermo.org

Cloudflare Abuse Contact

MNT-CLOUDFLARE

Cloudflare Technical Contact

CLOUDFLARENET-EU



        //<![CDATA[
        $(function(){

            var timer;

            var fixableheight = $('.fixable').outerHeight( true );

            // Check the initial Poistion of the Sticky Header
            var stickyHeaderTop = $('#header-row').offset().top + 0;
            var stickyFooterBottom = 10000; //$('.fixablebottom').offset().top -  $('#header-row').height() - $('.fixablebottom').height();
 
            $(window).scroll(function(){

                //clearTimeout(timer);
                console.log($(window).scrollTop() + " - " + stickyFooterBottom + ' - ' + fixableheight);

                if( $(window).scrollTop() > stickyHeaderTop ) {
                    $('body').css('marginTop', fixableheight);
                    $('.fixable').addClass('fixed');
                    //timer = setTimeout( hidefixed , 2000 );
                } else {
                    $('body').css('marginTop', 0);
                    $('.fixable').removeClass('fixed');
                }

                if( $(window).scrollTop() < stickyFooterBottom ) {
                    $('.fixablebottom').addClass('fixed');
                    $('body').css('marginBottom', $('.fixablebottom').outerHeight( true ) );
                    //timer = setTimeout( hidefixed , 2000 );
                } else {
                    $('.fixablebottom').removeClass('fixed');
                }
            });

            // BOTTOM BAR ALWAYS VISIBLE
            $('.fixablebottom').addClass('fixed');
            $('body').css('marginBottom', $('.fixablebottom').outerHeight( true ) );

            //$(document).on("scrollstop",function(){
                //timer = setTimeout( hidefixed , 2000 );
                //alert('Pippo');
            //});

            $('[data-toggle="tooltip"]').tooltip();

            $('.loading-container').hide(0);

            if ( $('.help-block:first').offset() != null && $('.help-block:first').offset() != undefined ) 

                $('html, body').animate({ scrollTop: $('.help-block:first').offset().top - 350 }, 1000);
        });//]]>

        var hidefixed = function () { 
            // do stuff
            $('.fixable').removeClass('fixed');
            console.log('Stopped Scrolling');
        };

        function showLoading (animationspeed) {
            $('.loading-container').show(animationspeed);
        }

        function hideLoading (animationspeed) {
            $('.loading-container').hide(animationspeed);
        }

        
	var count = 0;

	function loadeddata () {

		//alert ( document.cookie );
		//alert ( readCookie ('site') );

		//if ( readCookie ('__gari') != null ) window.location = '/manage';

		if ( count > 0 ) window.location = '/manage';

		count++;
	}

    function readCookie ( name ) {

        var nameEQ = name + "=";

        var ca = document.cookie.split(';');

        for (var i = 0; i < ca.length; i++) {
            var c = ca[i];
            while (c.charAt(0) == ' ') c = c.substring(1, c.length);
            if (c.indexOf(nameEQ) == 0) return c.substring(nameEQ.length, c.length);
        }
        return null;
    }


    


    var gaJsHost = (("https:" == document.location.protocol) ? "https://ssl." : "http://www.");
    document.write(unescape("%3Cscript src='" + gaJsHost + "google-analytics.com/ga.js' type='text/javascript'%3E%3C/script%3E"));
    


    var pageTracker = _gat._getTracker("UA-642023-7");
    pageTracker._trackPageview();
    

Requests	IP Address	Location	AS Autonomous System
22	188.114.97.3Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
21	151.101.193.155Fastly · CDN	United States	AS54113Fastly, Inc.
43	2	-	-

Security Scan Report: www.ponzanodifermo.org

Summary

AI Security Verdict

Safe Website

Safety Factors

Details

Screenshot

Page Load Overview

Language Analysis

Primary Language

Detection Details

Website Classification

Primary Category

All Detected Categories

Detected Features

Domain & IP Information

Detected Technologies9

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

ssdeep (Context Triggered Piecewise Hashing)

sdhash (Similarity Digest Hashing)

Image Hashes

Perceptual Hashes

Other Hashes

Scan History