MAL-2025-26074 Malicious code in mdx-geckodriver-cypress-levels (npm)

The package mdx-geckodriver-cypress-levels was found to contain malicious code...

MAL-2025-21249 Malicious code in geckodriver-seismology-capella-lightyear (npm)

The package geckodriver-seismology-capella-lightyear was found to contain malicious code...

MAL-2025-21246 Malicious code in geckodriver-install-install-radioastronomy (npm)

The package geckodriver-install-install-radioastronomy was found to contain malicious code...

MAL-2025-32050 Malicious code in relay-thuban-geckodriver-technosignature (npm)

The package relay-thuban-geckodriver-technosignature was found to contain malicious code...

MAL-2025-15082 Malicious code in auth-apollo-geckodriver-package (npm)

The package auth-apollo-geckodriver-package was found to contain malicious code...

MAL-2025-14579 Malicious code in antares-geoarchaeology-robotics-geckodriver (npm)

The package antares-geoarchaeology-robotics-geckodriver was found to contain malicious code...

Wappalyzer-Next - Python library that uses Wappalyzer extension (and its fingerprints) to detect technologies

This project is a command line tool and python library that uses Wappalyzer extension and its fingerprints to detect technologies. Other projects emerged after discontinuation of the official open source project are using outdated fingerpints and lack accuracy when used on dynamic web-apps, this...

CVE-2025-29787 vulnerabilities

Vulnerabilities for packages: pixi, nushell, deno, wasm-pack, geckodriver...

GHSA-94VH-GPHV-8PM8 vulnerabilities

Vulnerabilities for packages: pixi, nushell, deno, wasm-pack, geckodriver...

CSZ CMS Version 1.3.0 - Authenticated Remote Command Execution Exploit

Exploit Title: CSZ CMS Version 1.3.0 Remote Command Execution Exploit Author: tmrswrr Vendor Homepage: https://www.cszcms.com/ Software Link: https://www.cszcms.com/link/3https://sourceforge.net/projects/cszcms/files/latest/download Version: Version 1.3.0 Tested on:...

CSZ CMS Version 1.3.0 - Authenticated Remote Command Execution

Exploit Title: CSZ CMS Version 1.3.0 Remote Command Execution Date: 17/11/2023 Exploit Author: tmrswrr Vendor Homepage: https://www.cszcms.com/ Software Link: https://www.cszcms.com/link/3https://sourceforge.net/projects/cszcms/files/latest/download Version: Version 1.3.0 Tested on:...

Ubuntu 20.04 LTS : Firefox regressions (USN-6610-2)

The remote Ubuntu 20.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-6610-2 advisory. USN-6610-1 fixed vulnerabilities in Firefox. The update introduced several minor regressions. This update fixes the problem. Tenable has extracted the preceding...

CSZ CMS 1.3.0 Remote Command Execution Exploit

Exploit Title: CSZ CMS Version 1.3.0 Remote Command Execution Date: 17/11/2023 Exploit Author: tmrswrr Vendor Homepage: https://www.cszcms.com/ Software Link: https://www.cszcms.com/link/3https://sourceforge.net/projects/cszcms/files/latest/download Version: Version 1.3.0 Tested on:...

Ubuntu 16.04 LTS / 18.04 LTS : Firefox regressions (USN-4234-2)

The remote Ubuntu 16.04 LTS / 18.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-4234-2 advisory. USN-4234-1 fixed vulnerabilities in Firefox. The update introduced various minor regressions. This update fixes the problems. We apologize for the...

LFI-FINDER - Tool Focuses On Detecting Local File Inclusion (LFI) Vulnerabilities

Written by TMRSWRR Version 1.0.0 Instagram: TMRSWRR How to use LFI-FINDER is an open-source tool available on GitHub that focuses on detecting Local File Inclusion LFI vulnerabilities. Local File Inclusion is a common security vulnerability that allows an attacker to include files from a web serv...

Ubuntu 18.04 LTS / 20.04 LTS : Firefox regressions (USN-5954-2)

The remote Ubuntu 18.04 LTS / 20.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-5954-2 advisory. USN-5954-1 fixed vulnerabilities in Firefox. The update introduced several minor regressions. This update fixes the problem. We apologize for the...

Bayanay - Python Wardriving Tool

WarDriving is the act of navigating, on foot or by car, to discover wireless networks in the surrounding area. Features Wardriving is done by combining the SSID information obtained with scapy using the HTML5 geolocation feature. Usage I cannot be held responsible for the malicious use of the...

geckodriver安全漏洞

geckodriver is an application program. It provides an HTTP API described by the WebDriver protocol to communicate with the Gecko browser. A security vulnerability exists in geckodriver versions prior to 0.30.0, which stems from improved host header checking to reject requests that are not sent to...

CVE-2020-15660

A flaw was found in GeckoDriver when specific requests are missing checks on Content-Type headers. This flaw allows an attacker to perform remote code execution...

[ASA-202107-71] geckodriver: cross-site request forgery

Arch Linux Security Advisory ASA-202107-71 ========================================== Severity: Medium Date : 2021-07-27 CVE-ID : CVE-2020-15660 Package : geckodriver Type : cross-site request forgery Remote : Yes Link : https://security.archlinux.org/AVG-2180 Summary ======= The package...