PhantomCrawler

.png PhantomCrawler is a security testing and research tool that simulates website interactions from different proxy IP addresses to analyze how websites behave under varied network and geolocation conditions. Features: Utilizes a list of proxy IP addresses from a specified file. Supports both HT...

huntr-com-bug-bounties-collector

huntr.com bugs collector New bug bountyvulnerabilities collector Requirements Chrome with GUI If you encounter trouble with script execution, check the status of VMs GPU features, if available. Chrome WebDriver Preview python3 main.py 2024-02-20 16:14:47.836189 1. Arbitrary File Reading due to La...

CVE-2020-16947

CVE-2020-16947 This vulnerability occurs in Outlook 2019 16.0.13231.20262 installed on Windows 10 1909 x64 TLDR; I found this bug using winafl fuzzer. This bug occured when parsing html contents. if attacker successfully executes this exploit, it can lead to remote command execution. Details 0:00...

wappalyzergo

Wappalyzergo Wappalyzer Technology Detection Library の Go 向け高性能移植版です。Webanalyze に触発されています。 以下からデータを使用しています： https://github.com/enthec/webappanalyzer https://github.com/HTTPArchive/wappalyzer 特徴 クリーンなコードベースで、非常にシンプルかつ簡単に使用できます。 正規化された正規表現 + wappalyzer フィンガープリントの自動更新データベース。 パフォーマンス向けに最適化：最高の速度を得るため...

CVE-2020-16947

CVE-2020-16947 Outlook 2019 원격 명령 실행 이 버그는 HTML 콘텐츠를 구문 분석할 때 발생합니다. 공격자가 이 익스플로잇을 성공적으로 실행하면 원격 명령 실행으로 이어질 수 있습니다. HTML 콘텐츠 중 ASCII 범위를 벗어난 문자열을 복사할 때, 해당 문자열이 0xfffd로 대체됩니다. 결과적으로 복사된 문자열의 크기가 두 배가 되어, src 버퍼와 dst 버퍼의 크기가 동일함에도 불구하고 버퍼 오버플로가 발생합니다. 0데이 익스플로잇에 관심이 있으시면 [email protected]으로...

cve-collector

CVE-Collector Python으로 작성된 간단한 최신 CVE 수집기 최신 CVECommon Vulnerabilities and Exposures 정보를 수집하는 방법은 다양합니다. 이 코드는 CVE 수집기를 만들 때 수집 방법, 포함할 정보, 코딩 방법에 대한 지침을 제공하기 위해 작성되었습니다. 여기에 제공된 코드는 CVE 수집기를 구현하는 여러 방법 중 하나입니다. 특정 웹사이트를 크롤링하고 HTML 요소를 파싱하여 데이터를 검색하는 방식을 사용합니다. 이 수집기는 https://www.cvedetails.com의 ...

cve-collector

CVE-Collector Simple Latest CVE Collector Written in Python There are various methods for collecting the latest CVE Common Vulnerabilities and Exposures information. This code was created to provide guidance on how to collect, what information to include, and how to code when creating a CVE...

CVE-2025-54100

CVE-2025-54100 – PowerShell 응답 구문 분석 PoC CVE-2025-54100 이 악성 HTML 구문 분석을 통해 Windows PowerShell 5.1 에서 원격 코드 실행RCE을 유발하는 방법을 시연합니다. CVE-2025-54100이란? 취약점 유형: Invoke-WebRequest가 -UseBasicParsing 매개변수를 사용하지 않을 때 명령 삽입 위험 심각도: CVSS 7.8 High 근본 원인: MSHTML 기반 HTML 응답 구문 분석으로 인해 스크립트 실행예: ActiveXObject이...

CLEANSTART-2026-OS64728 Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree

CVE-2026-42506 affects multiple packages. Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree. See references for individual vulnerability details...

CLEANSTART-2026-BT38744 Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree

CVE-2026-27136 affects multiple packages. Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree. See references for individual vulnerability details...

CLEANSTART-2026-FO54280 Parsing arbitrary HTML can consume excessive CPU time, possibly leading to denial of service

CVE-2026-25680 affects multiple packages. Parsing arbitrary HTML can consume excessive CPU time, possibly leading to denial of service. See references for individual vulnerability details...

USN-8900-1: Go Networking vulnerabilities

It was discovered that Go Networking did not properly handle server errors after sending a GOAWAY frame during HTTP/2 connection shutdown, which could cause the connection to hang. A remote attacker could possibly use this issue to cause a denial of service. CVE-2022-27664 It was discovered that ...

USN-8900-1 golang-golang-x-net vulnerabilities

It was discovered that Go Networking did not properly handle server errors after sending a GOAWAY frame during HTTP/2 connection shutdown, which could cause the connection to hang. A remote attacker could possibly use this issue to cause a denial of service. CVE-2022-27664 It was discovered that ...

Security Bulletin: IBM Verify Antenna is affected by multiple vulnerabilities

Summary IBM Verify Antenna has addressed these vulnerabilities in an update. Vulnerability Details CVEID:CVE-2026-56852 DESCRIPTION: A norm.Iter can enter an infinite loop when handling input containing invalid UTF-8 bytes. CWE:CWE-835: Loop with Unreachable Exit Condition 'Infinite Loop' CVSS...

AlmaLinux 9.2 [TuxCare] Security Update: osbuild-composer / osbuild-composer-core / etc (ALMALINUX9.2:CLSA-2026:1791320512)

The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1791320512 advisory. - Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree. This can be leveraged to execute XSS...

AlmaLinux 9 : osbuild-composer (ALSA-2026:69293)

The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:69293 advisory. golang.org/x/net/html: golang: golang.org/x/net/html: Cross-Site Scripting via HTML parsing bypass CVE-2026-27136 golang.org/x/net/html:...

CLEANSTART-2026-TS90060 Parsing arbitrary HTML can consume excessive CPU time, possibly leading to denial of service

Security vulnerability affects the consul package. Parsing arbitrary HTML can consume excessive CPU time, possibly leading to denial of service...

CLEANSTART-2026-LZ15854 Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree

Security vulnerability affects the consul package. Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree...

CLEANSTART-2026-DA69813 Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree

Security vulnerability affects the cri-tools package. Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree...

CLEANSTART-2026-OI09716 Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree

Security vulnerability affects the cri-tools package. Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree...