adult content

news/blog

English

_fbp

_twpid

_gcl_au

_ga_KESNC53HMR

The domain 'theedgemalaysia.com' uses the commercial generic top-level domain (.com) and has no subdomain. Its registrable label 'theedgemalaysia' stretches across 15 characters containing seven vowels alongside eight consonants. Breaking it apart gives three words: the, edge, malaysia. Expect 4 characters per word on average. No strong language cues emerged from the frequency lists.

inline; filename="20250527%20us%20consumers%20inflation%20economy%20shopper_20250527222744_Bloomberg_7.webp"; filename*=UTF-8''20250527%2520us%2520consumers%2520inflation%2520economy%2520shopper_20250527222744_Bloomberg_7.webp

script-src 'none'; frame-src 'none'; sandbox;

default-src *.facebook.com *.fbcdn.net *.facebook.net 'self' blob:;script-src *.facebook.com *.fbcdn.net *.facebook.net blob: 'self' 'nonce-DmFe1fus';style-src *.facebook.com *.fbcdn.net *.facebook.net 'self' data: blob: 'unsafe-inline';connect-src *.facebook.com facebook.com *.fbcdn.net *.facebook.net wss://*.facebook.com:* wss://*.fbcdn.net attachment.fbsbx.com *.cdninstagram.com blob: 'self' data: https://edge-chat.facebook.net https://edge-chat-latest.facebook.net wss://edge-chat-latest.facebook.net wss://edge-chat.facebook.net wss://edge-chat.socialplugin.facebook.net wss://edge-chat-latest.socialplugin.facebook.net https://edge-chat.socialplugin.facebook.net https://edge-chat-latest.socialplugin.facebook.net;font-src *.facebook.com *.fbcdn.net *.facebook.net 'self' data: blob:;img-src *.facebook.com *.fbcdn.net *.facebook.net 'self' data: blob:;media-src *.facebook.com *.fbcdn.net *.facebook.net 'self' data: blob:;child-src *.facebook.com *.fbcdn.net *.facebook.net 'self' data: blob:;frame-src *.facebook.com *.fbcdn.net *.facebook.net 'self' data: blob:;manifest-src *.facebook.com *.fbcdn.net *.facebook.net 'self' data: blob:;object-src *.facebook.com *.fbcdn.net *.facebook.net 'self' data: blob:;worker-src *.facebook.com *.fbcdn.net *.facebook.net 'self' data: blob:;block-all-mixed-content;upgrade-insecure-requests;

script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascnsrsgtc:46:0

script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascnsrsggc:196:0

script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascnsrsggc:164:0

default-src *.facebook.com *.fbcdn.net *.facebook.net 'self' blob:;script-src *.facebook.com *.fbcdn.net *.facebook.net blob: 'self' 'nonce-Kptu6YeJ';style-src *.facebook.com *.fbcdn.net *.facebook.net 'self' data: blob: 'unsafe-inline';connect-src *.facebook.com facebook.com *.fbcdn.net *.facebook.net wss://*.facebook.com:* wss://*.fbcdn.net attachment.fbsbx.com *.cdninstagram.com blob: 'self' data: https://edge-chat.facebook.net https://edge-chat-latest.facebook.net wss://edge-chat-latest.facebook.net wss://edge-chat.facebook.net wss://edge-chat.socialplugin.facebook.net wss://edge-chat-latest.socialplugin.facebook.net https://edge-chat.socialplugin.facebook.net https://edge-chat-latest.socialplugin.facebook.net;font-src *.facebook.com *.fbcdn.net *.facebook.net 'self' data: blob:;img-src *.facebook.com *.fbcdn.net *.facebook.net 'self' data: blob:;media-src *.facebook.com *.fbcdn.net *.facebook.net 'self' data: blob:;child-src *.facebook.com *.fbcdn.net *.facebook.net 'self' data: blob:;frame-src *.facebook.com *.fbcdn.net *.facebook.net 'self' data: blob:;manifest-src *.facebook.com *.fbcdn.net *.facebook.net 'self' data: blob:;object-src *.facebook.com *.fbcdn.net *.facebook.net 'self' data: blob:;worker-src *.facebook.com *.fbcdn.net *.facebook.net 'self' data: blob:;block-all-mixed-content;upgrade-insecure-requests;report-uri https://www.facebook.com/csp/reporting/?m=c&minimize=0;

## Summary

When Axios runs on Node.js and is given a URL with the `data:` scheme, it does not perform HTTP. Instead, its Node http adapter decodes the entire payload into memory (`Buffer`/`Blob`) and returns a synthetic 200 response.
This path ignores `maxContentLength` / `maxBodyLength` (which only protect HTTP responses), so an attacker can supply a very large `data:` URI and cause the process to allocate unbounded memory and crash (DoS), even if the caller requested `responseType: 'stream'`.

# Denial of Service via **proto** Key in mergeConfig

### Summary

The `mergeConfig` function in axios crashes with a TypeError when processing configuration objects containing `__proto__` as an own property. An attacker can trigger this by providing a malicious configuration object created via `JSON.parse()`, causing complete denial of service.

### Details

The vulnerability exists in `lib/core/mergeConfig.js` at lines 98-101:

```javascript
utils.forEach(Object.keys({ ...config1, ...config2 }), function computeConfigValue(prop) {
  const merge = mergeMap[prop] || mergeDeepProperties;
  const configValue = merge(config1[prop], config2[prop], prop);
  (utils.isUndefined(configValue) && merge !== mergeDirectKeys) || (config[prop] = configValue);
});
```

When `prop` is `'__proto__'`:

1. `JSON.parse('{"__proto__": {...}}')` creates an object with `__proto__` as an own enumerable property
2. `Object.keys()` includes `'__proto__'` in the iteration
3. `mergeMap['__proto__']` performs prototype chain lookup, returning `Object.prototype` (truthy object)
4. The expression `mergeMap[prop] || mergeDeepProperties` evaluates to `Object.prototype`
5. `Object.prototype(...)` throws `TypeError: merge is not a function`

The `mergeConfig` function is called by:

- `Axios._request()` at `lib/core/Axios.js:75`
- `Axios.getUri()` at `lib/core/Axios.js:201`
- All HTTP method shortcuts (`get`, `post`, etc.) at `lib/core/Axios.js:211,224`

### PoC

```javascript
import axios from "axios";

const maliciousConfig = JSON.parse('{"__proto__": {"x": 1}}');
await axios.get("https://httpbin.org/get", maliciousConfig);
```

**Reproduction steps:**

1. Clone axios repository or `npm install axios`
2. Create file `poc.mjs` with the code above
3. Run: `node poc.mjs`
4. Observe the TypeError crash

**Verified output (axios 1.13.4):**

```
TypeError: merge is not a function
    at computeConfigValue (lib/core/mergeConfig.js:100:25)
    at Object.forEach (lib/utils.js:280:10)
    at mergeConfig (lib/core/mergeConfig.js:98:9)
```

**Control tests performed:**
| Test | Config | Result |
|------|--------|--------|
| Normal config | `{"timeout": 5000}` | SUCCESS |
| Malicious config | `JSON.parse('{"__proto__": {"x": 1}}')` | **CRASH** |
| Nested object | `{"headers": {"X-Test": "value"}}` | SUCCESS |

**Attack scenario:**
An application that accepts user input, parses it with `JSON.parse()`, and passes it to axios configuration will crash when receiving the payload `{"__proto__": {"x": 1}}`.

### Impact

**Denial of Service** - Any application using axios that processes user-controlled JSON and passes it to axios configuration methods is vulnerable. The application will crash when processing the malicious payload.

Affected environments:

- Node.js servers using axios for HTTP requests
- Any backend that passes parsed JSON to axios configuration

This is NOT prototype pollution - the application crashes before any assignment occurs.

jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishandles jQuery.extend(true, {}, ...) because of Object.prototype pollution

passing HTML containing <option> elements from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute untrusted code.

Regex in its jQuery.htmlPrefilter sometimes may introduce XSS

001acbb15d9c69510c0817e6dde361bff098406fad182ab3c367f86ff3da8343

4fe120d9d51af7da009dd2c86c8523089a648d49266db37636eaeafd7b950788

ae63a852a72e5b9c2353671621085eef97caa0f1d4ad5bdf74563a799256ccd0

92fb3128c2c007d1dfdb0ef35bd58196cc4554ce8e2b7788dc980e01ab7eda4a

da31023abe447b998068e0382f8e56ae22bb51f9ba1442c28eb865bbdbc152b5

79080e6a46c947c7615e9f64c8b3dc3d44a4f04438f1d6fb155f99b9e32663ae

87083882cc6015984eb0411a99d3981817f5dc5c90ba24f0940420c5548d82de

23c4bd6cc53e93f7b6b897386b8891e5724985b8d41e0b08d4751445b2c1b444

1fced7b2a471cda6a17da299daf9f375bc9755fc3f00cdf2937f87c81ecdc10e

6dbf93c76c33ca823a06ad67a1eefd0ce557d7ba8af6aeafa06e6e033b2627ba

e3c36638da837b96964201b1e64ff7a156399ecae5c65cafa9504c673ca794d8

c504cb218443c201579318726e92e65b8319d700a1b657dcc02cb5f5efd691a5

7ed4593ebf8762f1dc2fffeb88234c6cef2cdd272fa0599c4bf19f8afc6058c0

53cd24ae51463505c9dfb0335d38cdcc6f9bce8e188af8fdbe65d41b64449b00

37217cfedb39356d2a0fd317e4a8ee87d225f4364e3afc7473ab5a8e7d97ec64

6a2253d7c7f8d68a284cd59c3d79bdb6aeec8df945a95f1b59a2602fd6257084

e59c1e3daeeb4077ea4a93df4c48c11826b2ef3507020800862f1f06cc379acb

2be0b72d940404f29b2f80e76c9f1ef18003dbe6c83f47ad95fab1ee3241455a

0225eb034d024a03bdc90ea6c79f56193662e7c3eee909696298820e517cbb83

91c7ecd0575073a358d01f296185d951a22b0c0d48b710d2ba787e632f0eb5b2

86a12f9bcafa352e23d1e11a3458c859658b30a2bac887bd15c8af9564f4d660

15dd4f9dc8a0d8477c50a9fe4ed7b78ff53dcafa5285053b8451a829cdd06a2d

f12cfbed81c431dcf38caf5c6e1fe31edab468b444a7d8d3e55453abf33e57d6

0a5767d0b3197c8dab55b1adc01871ccbb402edc3e104c8609451de227365867

48c9ee95d32a93c2f1e6159b5faad8814ca8fabd57fb0d2dbb2b26d2f237e83f

SkyeChip gets new street-high target from Apex Securities after rally shatters consensus

Former PETRONAS manager sent confidential emails to senior Petros officers, testifies IR manager

Puad Zarkashi says he's leaving Umno to criticise party freely

PETRONAS Chemicals could swing back to loss in 2028, TA Securities warns

DigitalBridge said to explore options for Malaysia's AIMS Data Centre

viewport

US inflation increased further in May, breaking above 4.0% for the first time in three years as the Middle East conflict boosted energy prices, and potentially drawing the Federal Reserve closer to raising interest rates this year.

US PCE inflation measure tops 4.0% in May; consumer spending strong

https://assets.theedgemarkets.com/20250527 us consumers inflation economy shopper_20250527222744_Bloomberg_7.jpg

twitter:title

twitter:description

twitter:image

description

next-head-count

msapplication-TileColor

theme-color

AlK2UR5SkAlj8jjdEc9p3F3xuFYlF6LYjAML3EOqw1g26eCwWPjdmecULvBH5MVPoqKYrOfPhYVL71xAXI1IBQoAAAB8eyJvcmlnaW4iOiJodHRwczovL2RvdWJsZWNsaWNrLm5ldDo0NDMiLCJmZWF0dXJlIjoiV2ViVmlld1hSZXF1ZXN0ZWRXaXRoRGVwcmVjYXRpb24iLCJleHBpcnkiOjE3NTgwNjcxOTksImlzU3ViZG9tYWluIjp0cnVlfQ==

Amm8/NmvvQfhwCib6I7ZsmUxiSCfOxWxHayJwyU1r3gRIItzr7bNQid6O8ZYaE1GSQTa69WwhPC9flq/oYkRBwsAAACCeyJvcmlnaW4iOiJodHRwczovL2dvb2dsZXN5bmRpY2F0aW9uLmNvbTo0NDMiLCJmZWF0dXJlIjoiV2ViVmlld1hSZXF1ZXN0ZWRXaXRoRGVwcmVjYXRpb24iLCJleHBpcnkiOjE3NTgwNjcxOTksImlzU3ViZG9tYWluIjp0cnVlfQ==

A9nrunKdU5m96PSN1XsSGr3qOP0lvPFUB2AiAylCDlN5DTl17uDFkpQuHj1AFtgWLxpLaiBZuhrtb2WOu7ofHwEAAACKeyJvcmlnaW4iOiJodHRwczovL2RvdWJsZWNsaWNrLm5ldDo0NDMiLCJmZWF0dXJlIjoiQUlQcm9tcHRBUElNdWx0aW1vZGFsSW5wdXQiLCJleHBpcnkiOjE3NzQzMTA0MDAsImlzU3ViZG9tYWluIjp0cnVlLCJpc1RoaXJkUGFydHkiOnRydWV9

A93bovR+QVXNx2/38qDbmeYYf1wdte9EO37K9eMq3r+541qo0byhYU899BhPB7Cv9QqD7wIbR1B6OAc9kEfYCA4AAACQeyJvcmlnaW4iOiJodHRwczovL2dvb2dsZXN5bmRpY2F0aW9uLmNvbTo0NDMiLCJmZWF0dXJlIjoiQUlQcm9tcHRBUElNdWx0aW1vZGFsSW5wdXQiLCJleHBpcnkiOjE3NzQzMTA0MDAsImlzU3ViZG9tYWluIjp0cnVlLCJpc1RoaXJkUGFydHkiOnRydWV9

A1S5fojrAunSDrFbD8OfGmFHdRFZymSM/1ss3G+NEttCLfHkXvlcF6LGLH8Mo5PakLO1sCASXU1/gQf6XGuTBgwAAACQeyJvcmlnaW4iOiJodHRwczovL2dvb2dsZXRhZ3NlcnZpY2VzLmNvbTo0NDMiLCJmZWF0dXJlIjoiQUlQcm9tcHRBUElNdWx0aW1vZGFsSW5wdXQiLCJleHBpcnkiOjE3NzQzMTA0MDAsImlzU3ViZG9tYWluIjp0cnVlLCJpc1RoaXJkUGFydHkiOnRydWV9

A4A26Ymj79UVY7C7JGUS4BG1s7MdcDokAQf/RP0paks+RoTYbXHxceT/5L4iKcsleFCngi75YfNRGW2+SpVv1ggAAACLeyJvcmlnaW4iOiJodHRwczovL2dvb2dsZXRhZ3NlcnZpY2VzLmNvbTo0NDMiLCJmZWF0dXJlIjoiUHJpdmFjeVNhbmRib3hBZHNBUElzIiwiZXhwaXJ5IjoxNjk1MTY3OTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZSwiaXNUaGlyZFBhcnR5Ijp0cnVlfQ==

A7CQXglZzTrThjGTBEn1rWTxHOEtkWivwzgea+NjyardrwlieSjVuyG44PkYgIPGs8Q9svD8sF3Yedn0BBBjXAkAAACFeyJvcmlnaW4iOiJodHRwczovL2RvdWJsZWNsaWNrLm5ldDo0NDMiLCJmZWF0dXJlIjoiUHJpdmFjeVNhbmRib3hBZHNBUElzIiwiZXhwaXJ5IjoxNjk1MTY3OTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZSwiaXNUaGlyZFBhcnR5Ijp0cnVlfQ==

eNom, LLC

THEEDGEMALAYSIA.COM

Abuse

Admin

Cloudflare-NOC

Cloudflare, Inc.

CLOUDFLARENET

require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers

var googletag = window.googletag || {};
        googletag.cmd = googletag.cmd || [];

<div class=newsTextDataWrapInner><p>WASHINGTON (June 25): US inflation increased further in May, breaking above 4.0% for the first time in three years as the Middle East conflict boosted energy prices, and potentially drawing the Federal Reserve closer to raising interest rates this year.</p></div>

<div class=newsTextDataWrapInner><p>The personal consumption expenditures price index surged 4.1% in the 12 months through May, the largest increase and first reading above 4.0% since April 2023, the Commerce Department's Bureau of Economic Analysis said on Thursday. PCE inflation rose by an unrevised 3.8% in April.</p></div>

<div class=newsTextDataWrapInner><p>Economists polled by <i>Reuters</i> had forecast PCE inflation advancing 4.1%. The PCE price index climbed 0.4% month-on-month in May after increasing 0.4% in April.</p></div><div class=inPageAd id=div-gpt-ad-inpage></div>

<div class=newsTextDataWrapInner><p>The US-led war against Iran has pushed up oil prices, driving gasoline prices higher. Though oil and gasoline prices have retreated in recent weeks amid a fragile ceasefire, economists expected inflation to remain elevated for a while.</p></div>

<div class=newsTextDataWrapInner><p>President Donald Trump and his Iranian counterpart Masoud Pezeshkian last week signed a preliminary peace deal ​that would reopen oil and other shipping lanes that were frozen by the war.</p></div>

<div class=newsTextDataWrapInner><p>Consumers were before the conflict already struggling with higher prices stemming from Trump's sweeping import tariffs.</p></div>

<div class=newsTextDataWrapInner><p>The higher cost of living is a political liability for Trump and his Republican Party, seeking to retain control of Congress in the midterm elections in November, amid mounting frustration over his stewardship of the economy. Trump won the 2024 presidential election in part because of his promise to lower inflation.</p></div>

<div class=newsTextDataWrapInner><p>Excluding the volatile food and energy components, the PCE price index increased 3.4% year-on-year in May after rising 3.3% in April. The so-called core PCE inflation advanced 0.3% on a monthly basis after gaining 0.3% in April.</p></div>

<div class=newsTextDataWrapInner><p>The US central bank tracks the PCE inflation measures for its 2% target. The Fed last week kept its benchmark overnight interest rate in the 3.50%-3.75% range, but updated quarterly projections showed policymakers expected to raise borrowing costs this year amid growing concerns about inflation.</p></div>

<div class=newsTextDataWrapInner><p>Financial markets are betting a rate hike could come as soon as in September, with another increase likely afterwards. Both headline and core PCE inflation were last below 2% in early 2021.</p></div>

<div class=newsTextDataWrapInner><p>Despite the high inflation, consumers have maintained their spending, thanks to larger tax refunds this year as well as a stock market rally, which have cushioned some of the pain at the pump. Households are also tapping into savings and saving less.</p></div>

<div class=newsTextDataWrapInner><p>Consumer spending, which accounts for more than two-thirds of economic activity, jumped 0.7% in May after rising 0.4% in April. Though some of the rise in spending reflects higher prices, consumption appears on track to speed up this quarter after slowing in the January-March quarter.</p></div>

<div class=newsTextDataWrapInner><p>Gross domestic product estimates for the second quarter are currently as high as a 3.0% annualised rate. But with inflation outpacing wage gains, the tax filing season behind and savings dwindling, economists expect households will dial back spending in the third quarter.</p></div>

<div class=newsTextDataWrapInner><p><i>Uploaded by Magessan Varatharaja</i></p></div>



        (function(w,d,s,l,i){w[l]=w[l]||[];w[l].push({'gtm.start':
        new Date().getTime(),event:'gtm.js'});var f=d.getElementsByTagName(s)[0],
        j=d.createElement(s),dl=l!='dataLayer'?'&l='+l:'';j.async=true;j.src=
        'https://www.googletagmanager.com/gtm.js?id='+i+dl;f.parentNode.insertBefore(j,f);
        })(window,document,'script','dataLayer','GTM-W3CT46H');
      

!function(b,e,f,g,a,c,d){b.fbq||(a=b.fbq=function(){a.callMethod?a.callMethod.apply(a,arguments):a.queue.push(arguments)},b._fbq||(b._fbq=a),a.push=a,a.loaded=!0,a.version="2.0",a.queue=[],c=e.createElement(f),c.async=!0,c.src=g,d=e.getElementsByTagName(f)[0],d.parentNode.insertBefore(c,d))}(window,document,"script","https://connect.facebook.net/en_US/fbevents.js");fbq("init","919789282657588");fbq("track","PageView");

$.getJSON("https://api.ipify.org?format\x3djson",function(a){console.log(a.ip)});

regular

stats.g.doubleclick.net

Tracking domain: pagead2.googlesyndication.com

pagead2.googlesyndication.com

snap.licdn.com

www3.doubleclick.net

Tracking domain: securepubads.g.doubleclick.net

securepubads.g.doubleclick.net

Tracking domain: www.googletagservices.com

www.googletagservices.com

Tracking domain: tpc.googlesyndication.com

tpc.googlesyndication.com

Tracking domain: dc1194c47c69f8825db63e13749efd25.safeframe.googlesyndication.com

Requests	IP Address	Location	AS Autonomous System
79	142.251.14.157	United States	AS15169Google LLC
76	104.17.25.14	United States	AS13335Cloudflare, Inc.
76	104.20.44.74	United States	AS13335Cloudflare, Inc.
76	104.16.79.73	United States	AS13335Cloudflare, Inc.
76	3.5.147.8	Singapore, Singapore	AS16509Amazon.com, Inc.
383	5	-	-

Security Scan Report: theedgemalaysia.com

Summary

AI Security Verdict

Details

Screenshot

Page Load Overview

Language Analysis

Primary Language

Detection Details

Website Classification

Primary Category

All Detected Categories

Detected Features

Domain & IP Information

Content Similarity HashesFor malware variant detection

Image Hashes

Perceptual Hashes

Other Hashes

Scan History