XXRF-Shots

Qu'est-ce que la vulnérabilité SSRF ? La falsification de requête côté serveur SSRF est un type de vulnérabilité qui permet aux attaquants d'envoyer des requêtes spécialement conçues via une application web vulnérable. Avec cette technique, les attaquants peuvent obtenir un accès non autorisé à d...

webscreenshot

webscreenshot Description Un script simple pour prendre des captures d'écran d'une liste de sites web, basé sur le script PhantomJS url-to-image. Fonctionnalités Intégration du 'lazy-rendering' d'url-to-image pour les ressources AJAX Fonctionnel sur les systèmes Windows et Linux Prise en charge d...

dorkbot

dorkbot Scan Google or other search results for vulnerabilities. dorkbot is a modular command-line tool for performing vulnerability scans against sets of webpages returned by Google search queries or other supported sources. It is broken up into two sets of modules: Indexers - modules that retur...

N4xD0rk

N4xD0rk Liste des sous-domaines d'un domaine principal en utilisant la technique appelée Hacking avec les moteurs de recherche. Installation Vous pouvez télécharger la dernière version de N4xD0rk en clonant le dépôt GitHub : root@kitploit: git clone https://github.com/n4xh4ck5/N4xD0rk.git Install...

erlvulnscan

Scanner Web concurrent pour CVE-2015-1635. Implémentation en direct disponible ici. Ce site de démonstration est utilisé pour le développement de ce projet et sa stabilité n'est pas garantie. Des informations sur ce projet sont écrites ici. Comme la liste « TODO » documentée là-bas a été complété...

org.webjars.npm:karma-phantomjs-launcher (>=1.0.1, <=1.0.4), org.webjars.npm:phantomjs-prebuilt (2.1.16) +1 more potentially affected by CVE-2026-56876 via org.webjars.npm:extract-zip (>=1.7.0, <=2.0.1)

org.webjars.npm:extract-zip MAVEN version =1.7.0, =1.0.1, =3.3.0, =7.1.0 Source cves: CVE-2026-56876 Source advisory: SNYK:JAVA-ORGWEBJARSNPM-17660778...

Malicious Package

Overview ig-phantomjs-binaries is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

EUVD-2019-0350

Malware in sbrugna...

EUVD-2019-0222

Malware in sbrugna...

EUVD-2021-1113

Malware in sbrugna...

EUVD-2019-0292

Malware in sbrugna...

EUVD-2022-5707

Malicious code in bioql PyPI...

Linux Distros Unpatched Vulnerability : CVE-2019-17221

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - PhantomJS through 2.1.1 has an arbitrary file read vulnerability, as demonstrated by an XMLHttpRequest for a file:// URI. The vulnerability exists in the...

Linux Distros Unpatched Vulnerability : CVE-2020-7739

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - This affects all versions of package phantomjs-seo. It is possible for an attacker to craft a url that will be passed to a PhantomJS instance allowing for an SS...

Malicious code in phantomjs-crawler-demo (npm)

The package phantomjs-crawler-demo was found to contain malicious code...

MAL-2025-29114 Malicious code in phantomjs-crawler-demo (npm)

The package phantomjs-crawler-demo was found to contain malicious code...

MAL-2025-839 Malicious code in ig-phantomjs-binaries (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in ig-phantomjs-binaries (npm)

--- -= Per source details. Do not edit below this line.=-...

yt-dlp has dependency on potentially malicious third-party code in Douyu extractors

Impact yt-dlp's DouyuTV and DouyuShow extractors used a cdn.bootcdn.net URL as a fallback for fetching a component of the crypto-js JavaScript library. When the Douyu extractor is used, yt-dlp extracts this JavaScript code and attempts to execute it externally using PhantomJS. bootcdn.net is owne...

GHSA-3V33-3WMW-3785 yt-dlp has dependency on potentially malicious third-party code in Douyu extractors

Impact yt-dlp's DouyuTV and DouyuShow extractors used a cdn.bootcdn.net URL as a fallback for fetching a component of the crypto-js JavaScript library. When the Douyu extractor is used, yt-dlp extracts this JavaScript code and attempts to execute it externally using PhantomJS. bootcdn.net is owne...