598 matches found
MAL-2025-5984 Malicious code in @3kali182/selenium-webdriver4 (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bff78cc4315b550d5909b8c816e780ca2f8d9a2faf17fcf35ec85eecdec84644 Any computer that has this package installed or running should be considered...
[SECURITY] Fedora 41 Update: selenium-manager-4.32.0-5.fc41
Selenium Manager is a command-line tool implemented in Rust that provides automated driver and browser management for Selenium...
[SECURITY] Fedora 42 Update: selenium-manager-4.32.0-5.fc42
Selenium Manager is a command-line tool implemented in Rust that provides automated driver and browser management for Selenium...
python311-selenium-4.25.0-5.1 on GA media (moderate)
python311-selenium-4.25.0-5.1 on GA media Announcement ID: openSUSE-SU-2025:15202-1 Rating: moderate Cross-References: CVE-2024-12224 CVSS scores: CVE-2024-12224 SUSE : 4.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N CVE-2024-12224 SUSE : 2.1...
OPENSUSE-SU-2025:15202-1 python311-selenium-4.25.0-5.1 on GA media
These are all security issues fixed in the python311-selenium-4.25.0-5.1 package on the GA media of openSUSE Tumbleweed...
CVE-2022-28108
Selenium Server Grid before 4 allows CSRF because it permits non-JSON content types such as application/x-www-form-urlencoded, multipart/form-data, and text/plain...
WebDriverManager 代码问题漏洞
WebDriverManager is an open source Java library from the individual developer Boni García that manages i.e., downloads, sets up, and maintains the drivers required for Selenium WebDriver in a fully automated manner. A security vulnerability exists in WebDriverManager versions prior to 1.0.0 throu...
CVE-2025-4218
A vulnerability was found in handrew browserpilot up to 0.2.51. It has been declared as critical. Affected by this vulnerability is the function GPTSeleniumAgent of the file browserpilot/browserpilot/agents/gptseleniumagent.py. The manipulation of the argument instructions leads to code injection...
The vulnerability of the Selenium Server’s distributed test execution tool, related to the manipulation of cross-site requests, allows a attacker to perform a CSRF attack.
The vulnerability of the Selenium Server Grid distributed testing tool is related to the manipulation of cross-site requests. Exploiting this vulnerability allows a malicious actor to perform a CSRF attack remotely...
Exploit for Cross-Site Request Forgery (CSRF) in Selenium Selenium_Grid
Selenium Chrome RCE Exploit Extended This repository conta...
Selenium geckodriver RCE
Selenium Server Grid use exploit/linux/http/seleniumgreedfirefoxrcecve202228108 msf exploitseleniumgreedfirefoxrcecve202228108 show targets ...targets... msf exploitseleniumgreedfirefoxrcecve202228108 set TARGET msf exploitseleniumgreedfirefoxrcecve202228108 show options ...show and set options...
Selenium Chrome Remote Code Execution Exploit
Selenium Server Grid versions prior to 4.0.0-alpha-7 allows cross site request forgery because it permits non-JSON content types such as application/x-www-form-urlencoded, multipart/form-data, and text/plain and this issue in turn allows for an attacker to achieve remote code execution. This modu...
Selenium Firefox Remote Code Execution Exploit
Selenium Server Grid versions 4.27.0 and below allows cross site request forgery because it permits non-JSON content types such as application/x-www-form-urlencoded, multipart/form-data, and text/plain and this issue in turn allows for an attacker to achieve remote code execution. This module...
Selenium chrome RCE
Selenium Server Grid before 4.0.0-alpha-7 allows CSRF because it permits non-JSON content types such as application/x-www-form-urlencoded, multipart/form-data, and text/plain. Module Options msf use exploit/linux/http/seleniumgreedchromercecve202228108 msf exploitseleniumgreedchromercecve20222810...
Malicious code in selenium-plugin (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 6e002fd5736f780c2fc01668d4e37d008d211fa2547b96cb960b11edd5b87d64 During installation or importing, the package downloads a small executable and register autostart of its. While it's hard to get the full activity of the...
MAL-2025-982 Malicious code in selenium-plugin (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 6e002fd5736f780c2fc01668d4e37d008d211fa2547b96cb960b11edd5b87d64 During installation or importing, the package downloads a small executable and register autostart of its. While it's hard to get the full activity of the...
Exposed Selenium Grid Servers Targeted for Crypto Mining and Proxyjacking
Internet-exposed Selenium Grid instances are being targeted by bad actors for illicit cryptocurrency mining and proxyjacking campaigns. "Selenium Grid is a server that facilitates running test cases in parallel across different browsers and versions," Cado Security researchers Tara Gould and Nate...
Ongoing Cyberattack Targets Exposed Selenium Grid Services for Crypto Mining
Cybersecurity researchers are sounding the alarm over an ongoing campaign that's leveraging internet-exposed Selenium Grid services for illicit cryptocurrency mining. Cloud security firm Wiz is tracking the activity under the name SeleniumGreed. The campaign, which is targeting older versions of...
