755 matches found
firefox-devtools-mcp
Firefox DevTools MCP Servidor del Model Context Protocol para automatizar Firefox mediante WebDriver BiDi a través de Selenium WebDriver. Funciona con Claude Code, Claude Desktop, Cursor, Cline y otros clientes MCP. Repositorio: https://github.com/mozilla/firefox-devtools-mcp Nota : Este servidor...
huntr-com-bug-bounties-collector
huntr.com bugs collector New bug bountyvulnerabilities collector Requirements Chrome with GUI If you encounter trouble with script execution, check the status of VMs GPU features, if available. Chrome WebDriver Preview root@kitploit: python3 main.py 2024-02-20 16:14:47.836189 1. Arbitrary File...
words-scraper
Words Scraper Selenium based web scraper to generate passwords list. Installation root@kitploit: Download Firefox webdriver from https://github.com/mozilla/geckodriver/releases $ tar xzf geckodriver-vVERSION-HERE.tar.gz $ sudo mv geckodriver /usr/local/bin Make sure it is in your PATH $ geckodriv...
words-scraper
Words Scraper 基于Selenium的网页抓取器，用于生成密码列表。 安装 root@kitploit: Download Firefox webdriver from https://github.com/mozilla/geckodriver/releases $ tar xzf geckodriver-vVERSION-HERE.tar.gz $ sudo mv geckodriver /usr/local/bin Make sure it is in your PATH $ geckodriver --version Make sure webdriver is...
CVE-2023-42819
CVE-2023-42819 CVE-2023-42819 漏洞说明 JumpServer 任意文件写入漏洞 CVE-2023-42819 + CVE-2023-42820 = GetShell USAGE 1. 将脚本和所需文件放在同一个目录 2. 确认已安装 Google Chrome，并获取 Google Chrome 的版本号 root@kitploit: reg query "HKEYCURRENTUSER\Software\Google\Chrome\BLBeacon" /v version 3. 根据 Google Chrome 对应的版本号和系统下载 chromedriv...
huntr-com-bug-bounties-collector
huntr.com バグコレクター 新しいバグバウンティ（脆弱性）コレクター 必要条件 GUI付き Chrome（スクリプト実行で問題が発生した場合、VMのGPU機能の状態を確認してください。利用可能な場合。） Chrome WebDriver プレビュー root@kitploit: python3 main.py 2024-02-20 16:14:47.836189 1. Arbitrary File Reading due to Lack of Input Filepath Validation - Feb 6th 2024 / High CVE-2024-0964 -...
CVE-2026-84128
Privilege escalation in the WebDriver BiDi component. This vulnerability was fixed in Firefox 155 and Thunderbird 155...
CVE-2026-84128 Privilege escalation in the WebDriver BiDi component
Privilege escalation in the WebDriver BiDi component. This vulnerability was fixed in Firefox 155 and Thunderbird 155...
CVE-2026-84128
Privilege escalation in the WebDriver BiDi component. This vulnerability was fixed in Firefox 155 and Thunderbird 155...
CVE-2026-84128 Privilege escalation in the WebDriver BiDi component
Privilege escalation in the WebDriver BiDi component. This vulnerability was fixed in Firefox 155 and Thunderbird 155...
EUVD-2026-69077
Privilege escalation in the WebDriver BiDi component. This vulnerability was fixed in Firefox 155 and Thunderbird 155...
CVE-2026-84128
CVE-2026-84128 is a privilege escalation vulnerability in the WebDriver BiDi component of Firefox , fixed in Firefox 155 . The bug is tracked in Mozilla Bugzilla #2044280 and disclosed via MFSA2026-82 . The CVSS 3.1 score is 8.8 (HIGH) with a network attack vector, low complexity, no privileges r...
PT-2026-84181
Name of the Vulnerable Software and Affected Versions Firefox versions prior to 155 Thunderbird versions prior to 155 Description Privilege escalation exists in the WebDriver BiDi component. WebDriver BiDi is a protocol that allows for bidirectional communication between the browser and the...
Astra Linux – Vulnerability in Firefox
The Remote Agent, used in WebDriver, did not validate the Host or Origin headers. This could have allowed websites to connect back locally to the user’s browser to control it. This bug only affected Firefox when WebDriver was enabled, which is not the default configuration.. This vulnerability...
Malicious code in chromeos-webdriver-cli (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1bbf3413f6465a1f8bb628dcdb79f59ac7c197bbfba2024202c9915f95ad8161 The package's postinstall script runs on npm install and issues an HTTPS POST to https://kvpq6u62.instances.poc.jchunt.top/chromeos-webdriver-cli...
Malicious code in chromecast-webdriver-cli (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c858cd5357d77c39366f7bd1cc1985a5d7012d33da45d6dc9667544b54198d6 [email protected] runs a postinstall lifecycle script that collects host metadata os.hostname, platform, arch, node version, package nam...
PYSEC-2026-1239 changedetection.io path traversal using file URI scheme without supplying hostname
Summary The validation for the file URI scheme falls short, and results in an attacker being able to read any file on the system. This issue only affects instances with a webdriver enabled, and ALLOWFILEURI false or not defined. Details The check used for URL protocol, issafeurl, allows file: as ...
PYSEC-2026-1240 changedetection.io Path Traversal
Summary When a WebDriver is used to fetch files source:file:///etc/passwd can be used to retrieve local system files, where the more traditional file:///etc/passwd gets blocked Details The root cause is the payload source:file:///etc/passwdpasses the regex here and also passes the check here wher...
Astra Linux – Vulnerability in Zabbix
The WebDriver for the Browser object expects an error object to be initialized when the webdriversessionquery function fails. However, this function can fail for various reasons without an error description. As a result, wd-error will be NULL, and attempting to access it will cause a crash...