CVE-2020-8902

Summary (CVE-2020-8902): Rendertron versions prior to 3.0.0 are vulnerable to an SSRF flaw. An attacker can craft a webpage that causes a headless Chrome process used by Rendertron to render internal sites accessible to the system, potentially exposing internal resources as screenshots. Affected ...

CVE-2020-8902 SSRF in Rendertron

Rendertron versions prior to 3.0.0 are are susceptible to a Server-Side Request Forgery SSRF attack. An attacker can use a specially crafted webpage to force a rendertron headless chrome process to render internal sites it has access to, and display it as a screenshot. Suggested mitigations are t...

CVE-2020-8902

Rendertron versions prior to 3.0.0 are are susceptible to a Server-Side Request Forgery SSRF attack. An attacker can use a specially crafted webpage to force a rendertron headless chrome process to render internal sites it has access to, and display it as a screenshot. Suggested mitigations are t...

Rendertron Code Issues Vulnerabilities

Martin Splitt Rendertron is a GlobalMartin Splitt open source application providing a headless Chrome rendering solution designed to instantly render and serialize web pages. A code issue vulnerability exists in Rendertron versions prior to 3.0.0, which can be exploited by an attacker to force a...

CVE-2020-8902: Improper Access Control

Rendertron versions prior to 3.0.0 are are susceptible to a Server-Side Request Forgery SSRF attack. An attacker can use a specially crafted webpage to force a rendertron headless chrome process to render internal sites it has access to, and display it as a screenshot. Suggested mitigations are t...

PT-2021-12817

Name of the Vulnerable Software and Affected Versions: Rendertron versions prior to 3.0.0 Description: The issue allows an attacker to perform a Server-Side Request Forgery SSRF attack by using a specially crafted webpage to force a rendertron headless chrome process to render internal sites it h...

h1-ctf: Grinch Networks compromised!

Grinch Networks compromised! For fast triage/validation and inspired by @manoelt in other CTF, I made a bash script to find and print all the 12 flags of this CTF. The script uses curl, wget, google-chrome headless for flag 2, unzip, grep and sed. If any of these commands is missing, the script...

USN-4584-1: HtmlUnit vulnerability

It was discovered that HtmlUnit incorrectly initialized Rhino engine. An Attacker could possibly use this issue to execute arbitrary Java code...

WS-2020-0399

In Ghost headless CMS, versions 1.24.3 through 2.38.1 and 3.0.0 through 3.17.1 are vulnerable to Server-Side Request Forgery in the OEmbed API. An attacker with a publisher role editor, author, contributor, administrator in a blog may be able to leverage this to make arbitrary GET requests in a...

Headless, Unattended Scanning in Burp Suite Professional 2.0 with Seltzer

Burp Suite Professional Burp is one of the best tools available for penetration testers. It is feature-rich, intuitive, well-supported, and customizable. However, it can be difficult to use Burp for headless, unattended scanning. Alternatives such as Burp Suite Enterprise exist, but those of us...

CVE-2019-18988

TeamViewer Desktop through 14.7.1965 allows a bypass of remote-login access control because the same key is used for different customers' installations. It used a shared AES key for all installations since at least as far back as v7.0.43148, and used it for at least OptionsPasswordAES in the...

h1-ctf: [h1-415 2020] h1ctf{y3s_1m_c0sm1c_n0w}

Summary: add summary of the vulnerability Account takeover was possible because of the email validation used - [email protected] could be registered, but when the the system created the recovery QR code the extra symbols would get stripped leaving us with a valid recovery QR code to log into...

HashBrown CMS Remote Code Execution Vulnerability

HashBrown CMS is an open source headless content management system CMS. HashBrown CMS suffers from a remote code execution vulnerability that stems from the program not performing proper security checks. An attacker could exploit the vulnerability to execute code...

deeplabcut (>=2.1.10.3, <=2.2.0rc2), deeplabcutcore (>=0.0.0, <=0.1.0) +8 more potentially affected by CVE-2019-5064 via opencv-python-headless (>=3.4.9.33, <=4.1.2.30)

opencv-python-headless PYPI version =3.4.9.33, =2.1.10.3, =0.0.0, =0.6.1, =1.5.1, =1.0.38, =0.0.1, =0.0.3 Source cves: CVE-2019-5064 Source advisory: MEND:CVE-2019-5064...

j5 (0.7.1), pyvisauto (>=1.0.1, <=1.0.3) +3 more potentially affected by CVE-2019-5064 via opencv-contrib-python-headless (>=3.4.2.17, <=4.1.2.30)

opencv-contrib-python-headless PYPI version =3.4.2.17, =1.0.1, =1.0.2, =0.3.0, =0.6.1 Source cves: CVE-2019-5064 Source advisory: MEND:CVE-2019-5064...

XSpear v1.3 - Powerfull XSS Scanning And Parameter Analysis Tool

XSpear is XSS Scanner on ruby gems Key features Pattern matching based XSS scanning Detect alert confirm prompt event on headless browser with Selenium Testing request/response for XSS protection bypass and reflectedor all params Reflected Params All paramsfor blind xss, anytings Filtered test...

deeplabcut (>=2.1.10.3, <=2.2.0rc2), deeplabcutcore (>=0.0.0, <=0.1.0) +4 more potentially affected by CVE-2019-19624 via opencv-python-headless (>=3.4.9.33, <=3.4.18.65)

opencv-python-headless PYPI version =3.4.9.33, =2.1.10.3, =0.0.0, =0.6.1, =1.0.38, =1.0.44 Source cves: CVE-2019-19624 Source advisory: MEND:CVE-2019-19624...

j5 (0.7.1), satsense (0.9.0) +2 more potentially affected by CVE-2019-19624 via opencv-contrib-python-headless (>=3.4.2.17, <=4.0.1.24)

opencv-contrib-python-headless PYPI version =3.4.2.17, =1.0.2, =0.3.0, =0.6.1 Source cves: CVE-2019-19624 Source advisory: MEND:CVE-2019-19624...

Traxss - Automated XSS Vulnerability Scanner

Automated Vulnerability Scanner for XSS | Written in Python3 | Utilizes Selenium Headless Traxss is an automated framework to scan URLs and webpages for XSS Vulnerabilities. It includes over 575 Payloads to test with and multiple options for robustness of tests. View the gif above to see a previe...

deeplabcut (>=2.1.10.3, <=2.2.0rc2), deeplabcutcore (>=0.0.0, <=0.1.0) +5 more potentially affected by CVE-2019-16249 via opencv-python-headless (>=3.4.9.33, <=4.1.0.25)

opencv-python-headless PYPI version =3.4.9.33, =2.1.10.3, =0.0.0, =0.6.1, =1.5.1, =1.0.38, =1.0.44 Source cves: CVE-2019-16249 Source advisory: MEND:CVE-2019-16249...