adult content

English

Within the commercial generic top-level domain (.com), 'worldclubratings.com' is registered while skipping any subdomain. The core label 'worldclubratings' covers 16 characters with four vowels and twelve consonants. Segmentation suggests 3 words: world, club, ratings. Expect 5 characters per word on average. No strong language cues emerged from the frequency lists.

html/c2/7e/c27e2a47-bf91-4359-8c3d-927d62e1bc46.html.gz

a3e9c8c52dd54d783a6d9294357ef104d17d03faf0a404b592216c0d71a9f717

5b80cc4165a661a3f2060d6bdb5ccff591f04c4f8e39a06c12d3c2544587cb17

a9c226bf70e82eaf5476f619cecfb70b4446b87ce4d1634d6404b0b2ba006d15

4d50586b184724d39ddfe0f6582861664eddd5e806e5a79e0dbaa832361414d0

e17a1d816e13c0826e0ed7febfabc3277f45571234bde0bf9120829a7169edc9

4ecb60f215d96b2af0fe9d985c71e32863b1c993a64725a416ac18b5991c59c6

41181eeec6d7ba64cb9165f0e95563e34e026bde79e7c13aeec83270429b6fae

69098e105d990f834cff1b7886d873444228ff63c590e5ff834d568f1115ed8b

d2ea6c1e0cabca20d18e924b25a1cd0187c38ba7c33f60ab06e1b0402b9bcdb5

99628b525981d848756bbd4e77111a0002988560ee1dae3cc31ba06ac0fb2b2f

676a7acc15e7625dc3b81d481a99ce65af224975ad99aad18dbff7cb0bd1732d

d6b03aefc9f6c44c7bc78713679c78c295028fa914319119e5cc4b4954855b1c

437d025919d20305ad098ad0716e773b5cb913626a6f66d867c1aecd40d33cf3

fe10893e1b6808c83a03feed1a8b8c230caaa234bcf51db0a1a515c06bc3e59a

7768f1d56c6c8f67aeb62d9bde8b37d28049f1641c21e10bc0e1101a543028f8

0a0961fb74abe064a02c3a2cd581b78d4a35bda7fd899a0f65581d0341073a9d

466ad2b88732a9a61563b4eb93aa0c96d2a63696d172d5d10114e0ce2106b006

c4e456a7a160aa00e51bbe46ce06bf7ca7e016847ed04d98375588f0fbdc0981

5b6ea00e1a26fccd738f44da89b0be6cfb204062e36e7b2093419c72ecd1b7ed

a43cb9a8fe77343e1865a163ac855376d5038b1c1f06749fb6a8a12497a53173

e19913ef77f005ef860eb9780b72cab0833ae516c1b2802898b1cbc6cf1870cb

fb396bdc7fd07201ced045f8b489eac118f267d1194d55dfb97189685a16c82b

d59abb9a767cbd1d6e326a19f9f15d3c2c269b823ad39380035074e4bf5a2366

Marked prior to version 0.3.17 is vulnerable to a Regular Expression Denial of Service (ReDoS) attack due to catastrophic backtracking in several regular expressions used for parsing HTML tags and markdown links. An attacker can exploit this vulnerability by providing specially crafted markdown input, such as deeply nested or repetitively structured brackets or tag attributes, which cause the parser to hang and lead to a Denial of Service.

### Impact

_What kind of vulnerability is it?_

Denial of service.

The regular expression `inline.reflinkSearch` may cause catastrophic backtracking against some strings.
PoC is the following.

```javascript
import * as marked from 'marked';

console.log(marked.parse(`[x]: x

\\[\\](\\[\\](\\[\\](\\[\\](\\[\\](\\[\\](\\[\\](\\[\\](\\[\\](\\[\\](\\[\\](\\[\\](\\[\\](\\[\\](\\[\\](\\[\\](\\[\\](\\[\\](\\[\\](\\[\\](\\[\\](\\[\\](\\[\\](\\[\\](\\[\\](\\[\\](\\[\\](\\[\\](\\[\\](\\[\\](`));
```

_Who is impacted?_

Anyone who runs untrusted markdown through marked and does not use a worker with a time limit.

### Patches

_Has the problem been patched?_

Yes

_What versions should users upgrade to?_

4.0.10

### Workarounds

_Is there a way for users to fix or remediate the vulnerability without upgrading?_

Do not run untrusted markdown through marked or run marked on a [worker](https://marked.js.org/using_advanced#workers) thread and set a reasonable time limit to prevent draining resources.

### References

_Are there any links users can visit to find out more?_

- https://marked.js.org/using_advanced#workers
- https://owasp.org/www-community/attacks/Regular_expression_Denial_of_Service_-_ReDoS

### For more information

If you have any questions or comments about this advisory:

* Open an issue in [marked](https://github.com/markedjs/marked)


### Impact

_What kind of vulnerability is it?_

Denial of service.

The regular expression `block.def` may cause catastrophic backtracking against some strings.
PoC is the following.

```javascript
import * as marked from "marked";

marked.parse(`[x]:${' '.repeat(1500)}x ${' '.repeat(1500)} x`);
```

_Who is impacted?_

Anyone who runs untrusted markdown through marked and does not use a worker with a time limit.

### Patches

_Has the problem been patched?_

Yes

_What versions should users upgrade to?_

4.0.10

### Workarounds

_Is there a way for users to fix or remediate the vulnerability without upgrading?_

Do not run untrusted markdown through marked or run marked on a [worker](https://marked.js.org/using_advanced#workers) thread and set a reasonable time limit to prevent draining resources.

### References

_Are there any links users can visit to find out more?_

- https://marked.js.org/using_advanced#workers
- https://owasp.org/www-community/attacks/Regular_expression_Denial_of_Service_-_ReDoS

### For more information

If you have any questions or comments about this advisory:

* Open an issue in [marked](https://github.com/markedjs/marked)


### Impact

Affected versions of this package are vulnerable to Prototype Pollution.  A malicious HTML code block can be crafted that will result in prototype pollution of the base object's prototype during highlighting.  If you allow users to insert custom HTML code blocks into your page/app via parsing Markdown code blocks (or similar) and do not filter the language names the user can provide you may be vulnerable. 

The pollution should just be harmless data but this can cause problems for applications not expecting these properties to exist and can result in strange behavior or application crashes, i.e. a potential DOS vector. 

_If your website or application does not render user provided data it should be unaffected._

### Patches

Versions 9.18.2 and 10.1.2 and newer include fixes for this vulnerability.  If you are using version 7 or 8 you are encouraged to upgrade to a newer release.

### Workarounds

#### Patch your library

Manually patch your library to create null objects for both `languages` and `aliases`:

```js
const HLJS = function(hljs) {
  // ...
  var languages = Object.create(null);
  var aliases = Object.create(null);
```

#### Filter out bad data from end users:

Filter the language names that users are allowed to inject into your HTML to guarantee they are valid.

### References

* [What is Prototype Pollution?](https://codeburst.io/what-is-prototype-pollution-49482fc4b638)
* https://github.com/highlightjs/highlight.js/pull/2636

### For more information

If you have any questions or comments about this advisory:

* Please file an issue against [highlight.js](https://github.com/highlightjs/highlight.js/issues/)

9522ee207fe3d791ed8ac5a4608125b8cbf8d31321a6069a99d6d0497346a41b

bff73789586875495a9366ffec3d8fbddb538cba81028346dcdcd9e2b0d4dc85

1cea6128aadb9713ded5c91c4325e524f39b785a9d4b579b5b874cae68dc433b

92b2123680d710702de4304d889a8bba8ad8ba03453f6422c04a10379fd3712e

generator

width=device-width, initial-scale=1.0, user-scalable=yes

viewport

Global football club rankings, Elo ratings, predictions, and stats.

http://worldclubratings.com/static/img/logo.png

twitter:title

twitter:description

twitter:image

twitter:image:alt

twitter:creator

twitter:site

twitter:card

Mesh Digital Limited

WORLDCLUBRATINGS.COM

Abuse

Google LLC

GOOGLE

Clear

Copy link to search

Cancel

Submit


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



if (window.location.protocol === "file:") { alert("The OJS runtime does not work with file:// URLs. Please use a web server to view this document."); }
window._ojs.paths.runtimeToDoc = "../..";
window._ojs.paths.runtimeToRoot = "../..";
window._ojs.paths.docToRoot = "";
window._ojs.selfContained = false;
window._ojs.runtime.interpretFromScriptTags();


MetaGenerator

World Club Ratings

⚡ Medium Risk - http://worldclubratings.com/

Requests	IP Address	Location	AS Autonomous System
54	92.205.150.118	Strasbourg, Grand Est, France	AS21499Host Europe GmbH
54	1	-	-

Security Scan Report: worldclubratings.com

Summary

AI Security Verdict

Safe Website

Safety Factors

Details

Screenshot

Page Load Overview

Language Analysis

Primary Language

Detection Details

Website Classification

Primary Category

All Detected Categories

Detected Features

Domain & IP Information

Detected Technologies1

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

ssdeep (Context Triggered Piecewise Hashing)

sdhash (Similarity Digest Hashing)

Image Hashes

Perceptual Hashes

Other Hashes

Scan History