huntr-com-bug-bounties-collector

huntr.com bugs collector New bug bountyvulnerabilities collector Requirements Chrome with GUI If you encounter trouble with script execution, check the status of VMs GPU features, if available. Chrome WebDriver Preview python3 main.py 2024-02-20 16:14:47.836189 1. Arbitrary File Reading due to La...

PhantomCrawler

.png PhantomCrawler는 다양한 프록시 IP 주소에서 웹사이트 상호작용을 시뮬레이션하여 다양한 네트워크 및 지리적 위치 조건에서 웹사이트가 어떻게 동작하는지 분석하는 보안 테스트 및 연구 도구입니다. 기능: 지정된 파일의 프록시 IP 주소 목록을 사용합니다. HTTP 및 HTTPS 프록시를 모두 지원합니다. 사용자가 대상 웹사이트 URL, 프록시 파일 경로 및 정적 포트를 입력할 수 있습니다. 각 프록시를 사용하여 지정된 웹사이트에 HTTP 요청을 보냅니다. HTML 콘텐츠를 파싱하여 웹페이지의 링크를 추출하고...

wappalyzergo

Wappalyzergo Wappalyzer Technology Detection Library の Go 向け高性能移植版です。Webanalyze に触発されています。 以下からデータを使用しています： https://github.com/enthec/webappanalyzer https://github.com/HTTPArchive/wappalyzer 特徴 クリーンなコードベースで、非常にシンプルかつ簡単に使用できます。 正規化された正規表現 + wappalyzer フィンガープリントの自動更新データベース。 パフォーマンス向けに最適化：最高の速度を得るため...

CVE-2020-16947

CVE-2020-16947 Outlook 2019 원격 명령 실행 이 버그는 HTML 콘텐츠를 구문 분석할 때 발생합니다. 공격자가 이 익스플로잇을 성공적으로 실행하면 원격 명령 실행으로 이어질 수 있습니다. HTML 콘텐츠 중 ASCII 범위를 벗어난 문자열을 복사할 때, 해당 문자열이 0xfffd로 대체됩니다. 결과적으로 복사된 문자열의 크기가 두 배가 되어, src 버퍼와 dst 버퍼의 크기가 동일함에도 불구하고 버퍼 오버플로가 발생합니다. 0데이 익스플로잇에 관심이 있으시면 [email protected]으로...

cve-collector

CVE-Collector Simple Latest CVE Collector Written in Python There are various methods for collecting the latest CVE Common Vulnerabilities and Exposures information. This code was created to provide guidance on how to collect, what information to include, and how to code when creating a CVE...

cve-collector

CVE-Collector Python으로 작성된 간단한 최신 CVE 수집기 최신 CVECommon Vulnerabilities and Exposures 정보를 수집하는 방법은 다양합니다. 이 코드는 CVE 수집기를 만들 때 수집 방법, 포함할 정보, 코딩 방법에 대한 지침을 제공하기 위해 작성되었습니다. 여기에 제공된 코드는 CVE 수집기를 구현하는 여러 방법 중 하나입니다. 특정 웹사이트를 크롤링하고 HTML 요소를 파싱하여 데이터를 검색하는 방식을 사용합니다. 이 수집기는 https://www.cvedetails.com의 ...

CVE-2020-16947

CVE-2020-16947 이 취약점은 Windows 10 1909 x64에 설치된 Outlook 201916.0.13231.20262에서 발생합니다. TLDR; winafl 퍼저를 사용하여 이 버그를 발견했습니다. 이 버그는 html 콘텐츠를 파싱할 때 발생합니다. 공격자가 이 익스플로잇을 성공적으로 실행하면 원격 코드 실행으로 이어질 수 있습니다. 세부 정보 0:000 r rax=0000000000000000 rbx=0000021c99ce9eb0 rcx=0000021c99ce9eb0 rdx=00000046c07f8a30...

CVE-2025-54100

CVE-2025-54100 – PowerShell 응답 구문 분석 PoC CVE-2025-54100 이 악성 HTML 구문 분석을 통해 Windows PowerShell 5.1 에서 원격 코드 실행RCE을 유발하는 방법을 시연합니다. CVE-2025-54100이란? 취약점 유형: Invoke-WebRequest가 -UseBasicParsing 매개변수를 사용하지 않을 때 명령 삽입 위험 심각도: CVSS 7.8 High 근본 원인: MSHTML 기반 HTML 응답 구문 분석으로 인해 스크립트 실행예: ActiveXObject이...

AlmaLinux 9.6 [TuxCare] Security Update: osbuild-composer / osbuild-composer-core / osbuild-composer-tests / etc (ALMALINUX9.6:CLSA-2026:1789576991)

The AlmaLinux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1789576991 advisory. - Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree. This can be leveraged to execute XSS...

Rocky Linux 8 [CIQ] Security Update: java-11-openjdk / java-11-openjdk-debuginfo / etc Multiple Vulnerabilities (crlsa-2023_1895)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20231895 advisory. OpenJDK: improper connection handling during TLS handshake 8294474 CVE-2023-21930 OpenJDK: Swing HTML parsing issue 8296832 CVE-2023-21939 OpenJDK: incorre...

Rocky Linux 9.6 [TuxCare] Security Update: osbuild-composer / osbuild-composer-core / osbuild-composer-tests / etc (ALMALINUX9.6:CLSA-2026:1789576991)

The Rocky Linux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1789576991 advisory. - Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree. This can be leveraged to execute XSS...

Rocky Linux 9 [CIQ] Security Update: java-1.8.0-openjdk / java-1.8.0-openjdk-debuginfo / etc Multiple Vulnerabilities (crlsa-2023_1909)

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20231909 advisory. OpenJDK: improper connection handling during TLS handshake 8294474 CVE-2023-21930 OpenJDK: Swing HTML parsing issue 8296832 CVE-2023-21939 OpenJDK: incorre...

Rocky Linux 9 [CIQ] Security Update: java-11-openjdk / java-11-openjdk-debuginfo / etc Multiple Vulnerabilities (crlsa-2023_1880)

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20231880 advisory. OpenJDK: improper connection handling during TLS handshake 8294474 CVE-2023-21930 OpenJDK: Swing HTML parsing issue 8296832 CVE-2023-21939 OpenJDK: incorre...

CLEANSTART-2026-AJ28533 Parsing arbitrary HTML can consume excessive CPU time, possibly leading to denial of service

Security vulnerability affects the containerd package. Parsing arbitrary HTML can consume excessive CPU time, possibly leading to denial of service...

CLEANSTART-2026-DE66798 Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree

Security vulnerability affects the minio-operator package. Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree...

Rocky Linux 9.6 [TuxCare] Security Update: osbuild-composer / osbuild-composer-core / osbuild-composer-tests / etc (ALMALINUX9.6:CLSA-2026:1789483713)

The Rocky Linux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1789483713 advisory. - Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree. This can be leveraged to execute XSS...

AlmaLinux 9.2 [TuxCare] Security Update: osbuild-composer / osbuild-composer-core / etc (ALMALINUX9.2:CLSA-2026:1789583130)

The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1789583130 advisory. - Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree. This can be leveraged to execute XSS...

AlmaLinux 9.6 [TuxCare] Security Update: osbuild-composer / osbuild-composer-core / osbuild-composer-tests / etc (ALMALINUX9.6:CLSA-2026:1789483713)

The AlmaLinux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1789483713 advisory. - Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree. This can be leveraged to execute XSS...

Rocky Linux 9.6 [TuxCare] Security Update: osbuild-composer / osbuild-composer-core / osbuild-composer-tests / etc (ALMALINUX9.6:CLSA-2026:1789657645)

The Rocky Linux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1789657645 advisory. - Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree. This can be leveraged to execute XSS...

AlmaLinux 9.6 [TuxCare] Security Update: osbuild-composer / osbuild-composer-core / osbuild-composer-tests / etc (ALMALINUX9.6:CLSA-2026:1789657645)

The AlmaLinux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1789657645 advisory. - Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree. This can be leveraged to execute XSS...