jspanda

JSPanda JSPanda es un escáner de vulnerabilidades de contaminación de prototipos del lado del cliente. Tiene dos características clave: escanear vulnerabilidades en las URLs proporcionadas y analizar el código fuente de las bibliotecas JavaScript. Sin embargo, JSPanda no puede detectar...

camoufox

Camoufox Camoufox is an open source anti-detect browser built for webscraping & AI agents. 🦊 ⚠️ This project is under development. It may not be suitable for stable production use. ⚠️ !NOTE All of the latest documentation is available atcamoufox.com. Sponsors View/Collapse All Premium Introduction...

AutoBrowser

AutoBrowser 4.0 AutoBrowser es una herramienta escrita en Python para testers de penetración. El propósito de esta herramienta es crear un informe archivo JSON y capturas de pantalla de los puertos basados en HTTP/S de la red. Puedes elegir entre analizar un informe de Nmap archivo XML -oX o...

phishcollector

PhishCollector PhishCollector es un marco de investigación para recolectar, analizar y rastrear sitios de phishing. Está diseñado intencionalmente como un punto de partida — las reglas de detección, las firmas de tecnología, las listas de palabras y los complementos son todas estructuras de datos...

react2shell-checker

React2Shell Checker Un escáner de vulnerabilidades de seguridad para detectar la vulnerabilidad React2Shell CVE-2025-55182 en aplicaciones Next.js y React. Descripción general React2Shell Checker te permite escanear sitios web para detectar si están ejecutando versiones vulnerables de Next.js o...

vi-bot

BotDetect v2 — Librería de Detección de Bots en Producción Librería de detección de bots y automatización del lado del cliente con puntuación ponderada, análisis de comportamiento, huella digital del navegador y umbrales configurables. Detecta navegadores sin cabeza, Selenium, Puppeteer,...

ROS-20260911-73-0236

The vulnerability of the Headless web browsers Google Chrome and Microsoft Edge is related to the use of memory after it is freed. Exploiting this vulnerability can allow a remote attacker to cause a service failure through a specially created HTML page...

ROS-20260908-73-0103

The vulnerability of the Headless web browsers Google Chrome and Microsoft Edge relates to reading data from buffer areas beyond their permitted limits. Exploiting this vulnerability can allow a malicious actor to cause service interruptions through a specially created HTML page...

The vulnerability of the Headless web browsers Google Chrome and Microsoft Edge, which allows a hacker to trigger a service failure

The vulnerability of the Headless web browsers Google Chrome and Microsoft Edge is related to the use of memory after it is freed. Exploiting this vulnerability can allow a remote attacker to cause a service failure through a specially created HTML page...

CVE-2026-59231 Server-Side Request Forgery in Pentestify PDF export via unvalidated image URLs

Server-Side Request Forgery in the PDF export component in maalfer Pentestify before 1.1.0 allows authenticated users to cause outbound HTTP GET requests from the server to arbitrary attacker-chosen destinations via unvalidated URLs stored in the finding images field or the report clientlogo fiel...

EUVD-2026-51545

Server-Side Request Forgery in the PDF export component in maalfer Pentestify before 1.1.0 allows authenticated users to cause outbound HTTP GET requests from the server to arbitrary attacker-chosen destinations via unvalidated URLs stored in the finding images field or the report clientlogo fiel...

CVE-2026-59231: Server-Side Request Forgery (SSRF)

Server-Side Request Forgery in the PDF export component in maalfer Pentestify before 1.1.0 allows authenticated users to cause outbound HTTP GET requests from the server to arbitrary attacker-chosen destinations via unvalidated URLs stored in the finding images field or the report clientlogo fiel...

EUVD-2026-50632

Inappropriate implementation in Headless in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to bypass same origin policy via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-52843

Lightpanda is a headless browser designed for AI and automation. Prior to 0.2.9, Lightpanda fetch and XMLHttpRequest unconditionally attached session cookies to every HTTP request, ignoring credentials: omit, credentials: same-origin, credentials: include, and XMLHttpRequest.withCredentials,...

EUVD-2026-44720

Lightpanda is a headless browser designed for AI and automation. Prior to 0.3.1, Lightpanda searched for @ across the entire URL string instead of only the authority component when computing a page origin, so a URL such as http://attacker.com/@victim.com/ was fetched from attacker.com but treated...

CVE-2026-52843

Lightpanda is a headless browser designed for AI and automation. Prior to 0.2.9, Lightpanda fetch and XMLHttpRequest unconditionally attached session cookies to every HTTP request, ignoring credentials: omit, credentials: same-origin, credentials: include, and XMLHttpRequest.withCredentials,...

PT-2026-60226

Lightpanda is a headless browser designed for AI and automation. Prior to 0.3.1, Lightpanda searched for @ across the entire URL string instead of only the authority component when computing a page origin, so a URL such as http://attacker.com/@victim.com/ was fetched from attacker.com but treated...

CVE-2026-52842: Origin Validation Error

Lightpanda is a headless browser designed for AI and automation. Prior to 0.3.1, Lightpanda searched for @ across the entire URL string instead of only the authority component when computing a page origin, so a URL such as http://attacker.com/@victim.com/ was fetched from attacker.com but treated...

CVE-2026-61429

PraisonAI versions before 1.6.78 contain a server-side request forgery vulnerability in the Crawl4AI/Chromium backend that allows attackers to bypass SSRF validation by exploiting DNS rebinding and HTTP redirects. Attackers can craft URLs that resolve to internal services after the initial...

CVE-2026-61429 PraisonAI before 1.6.78 SSRF via Crawl4AI Chromium backend

PraisonAI versions before 1.6.78 contain a server-side request forgery vulnerability in the Crawl4AI/Chromium backend that allows attackers to bypass SSRF validation by exploiting DNS rebinding and HTTP redirects. Attackers can craft URLs that resolve to internal services after the initial...