Malicious code in selenium-spider (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in selemnium (PyPI)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-5978 Malicious code in seleiumm (PyPI)

--- -= Per source details. Do not edit below this line.=-...

CSZ CMS Version 1.3.0 - Authenticated Remote Command Execution

Exploit Title: CSZ CMS Version 1.3.0 Remote Command Execution Date: 17/11/2023 Exploit Author: tmrswrr Vendor Homepage: https://www.cszcms.com/ Software Link: https://www.cszcms.com/link/3https://sourceforge.net/projects/cszcms/files/latest/download Version: Version 1.3.0 Tested on:...

CSZ CMS Version 1.3.0 - Authenticated Remote Command Execution Exploit

Exploit Title: CSZ CMS Version 1.3.0 Remote Command Execution Exploit Author: tmrswrr Vendor Homepage: https://www.cszcms.com/ Software Link: https://www.cszcms.com/link/3https://sourceforge.net/projects/cszcms/files/latest/download Version: Version 1.3.0 Tested on:...

CSZ CMS 1.3.0 Remote Command Execution

Exploit Title: CSZ CMS Version 1.3.0 Remote Command Execution Date: 17/11/2023 Exploit Author: tmrswrr Vendor Homepage: https://www.cszcms.com/ Software Link: https://www.cszcms.com/link/3https://sourceforge.net/projects/cszcms/files/latest/download Version: Version 1.3.0 Tested on:...

Code injection

fastbots is a library for fast bot and scraper development using selenium and the Page Object Model POM design. Prior to version 0.1.5, an attacker could modify the locators.ini locator file with python code that without proper validation it's executed and it could lead to rce. The vulnerability ...

CVE-2023-48699 fastbots Eval Injection vulnerability

fastbots is a library for fast bot and scraper development using selenium and the Page Object Model POM design. Prior to version 0.1.5, an attacker could modify the locators.ini locator file with python code that without proper validation it's executed and it could lead to rce. The vulnerability ...

NULL Pointer Dereference in seleniumhq/selenium

This is a null pointer dereference that causes the IE driver to crash when selenium gets the cookies from an attacker controlled page. At a high level, the bug is caused by an insufficient check on data returned from Edge Internet Explorer mode...

CVE-2023-5590

A null pointer dereference flaw was found in Selenium IEDriver. This issue causes the driver to crash when selenium gets the cookies from an attacker controlled page, which could leave the application unavailable. Mitigation No mitigation is currently known for the IE Driver. If possible, opt for...

NULL Pointer Dereference

Overview Selenium.WebDriver is a .NET bindings for the Selenium WebDriver API Affected versions of this package are vulnerable to NULL Pointer Dereference due to an insufficient check on CookieWndProc function. An attacker can cause the application to crash by sending specially crafted data that...

PYSEC-2023-206

NULL Pointer Dereference in GitHub repository seleniumhq/selenium prior to 4.14.0...

CVE-2023-5590 NULL Pointer Dereference in seleniumhq/selenium

NULL Pointer Dereference in GitHub repository seleniumhq/selenium prior to 4.14.0...

CVE-2023-5590

CVE-2023-5590 : Concrete details exist across connected documents showing a NULL pointer dereference in Selenium (seleniumhq/selenium) prior to 4.14.0, specifically in the CookieWndProc function. The vulnerability can lead to denial of service and is rated HIGH (CVSS v3.1 base 7.5). Remediation i...

CVE-2023-5590 NULL Pointer Dereference in seleniumhq/selenium

NULL Pointer Dereference in GitHub repository seleniumhq/selenium prior to 4.14.0...

Selenium Code Issues Vulnerabilities

Selenium is an umbrella project from Selenium, Inc. that encapsulates a variety of tools and libraries that support web browser automation. A code issue vulnerability exists in Selenium versions prior to 4.14.0 that stems from a null pointer dereference issue...

PT-2023-32200 · Selenium · Selenium

Name of the Vulnerable Software and Affected Versions: selenium versions prior to 4.14.0 Description: The issue is a NULL Pointer Dereference in the GitHub repository seleniumhq/selenium. Recommendations: For versions prior to 4.14.0, update to version 4.14.0 or later to resolve the issue...

CVE-2023-41878

MeterSphere is a one-stop open source continuous testing platform, covering functions such as test tracking, interface testing, UI testing and performance testing. The Selenium VNC config used in Metersphere is using a weak password by default, attackers can login to vnc and obtain high...

Design/Logic Flaw

MeterSphere is a one-stop open source continuous testing platform, covering functions such as test tracking, interface testing, UI testing and performance testing. The Selenium VNC config used in Metersphere is using a weak password by default, attackers can login to vnc and obtain high...

MeterSphere Trust Management Issues Vulnerabilities

MeterSphere is MeterSphere's open source one-stop open source continuous testing platform. MeterSphere 2.10.6 LTS and earlier versions have a trust management issue vulnerability that stems from the default use of weak passwords in Selenium VNC, which allows an attacker to log in to VNC and gain...