PhantomCrawler

.png PhantomCrawler is a security testing and research tool that simulates website interactions from different proxy IP addresses to analyze how websites behave under varied network and geolocation conditions. Features: Utilizes a list of proxy IP addresses from a specified file. Supports both HT...

huntr-com-bug-bounties-collector

huntr.com bugs collector New bug bountyvulnerabilities collector Requirements Chrome with GUI If you encounter trouble with script execution, check the status of VMs GPU features, if available. Chrome WebDriver Preview python3 main.py 2024-02-20 16:14:47.836189 1. Arbitrary File Reading due to La...

CVE-2020-16947

CVE-2020-16947 Outlook 2019 Remote Command Execution This bug occured when parsing html contents. if attacker successfully executes this exploit, it can lead to remote command execution. When copying strings out of the ascii range among html contents, the corresponding string is replaced with...

cve-collector

CVE-Collector Simple Latest CVE Collector Written in Python There are various methods for collecting the latest CVE Common Vulnerabilities and Exposures information. This code was created to provide guidance on how to collect, what information to include, and how to code when creating a CVE...

CVE-2020-16947

CVE-2020-16947 This vulnerability occurs in Outlook 2019 16.0.13231.20262 installed on Windows 10 1909 x64 TLDR; I found this bug using winafl fuzzer. This bug occured when parsing html contents. if attacker successfully executes this exploit, it can lead to remote command execution. Details 0:00...

CVE-2025-54100

CVE-2025-54100 – PowerShell Response Parsing PoC Demonstrates how CVE-2025-54100 can cause Remote Code Execution RCE in Windows PowerShell 5.1 through malicious HTML parsing. What is CVE-2025-54100? Vulnerability Type: Risk of command injection when Invoke-WebRequest does not use the...

CLEANSTART-2026-LC82516 Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree

Security vulnerability affects the argo-cd package. Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree...

CLEANSTART-2026-WH85433 Parsing arbitrary HTML can consume excessive CPU time, possibly leading to denial of service

Security vulnerability affects the argo-cd package. Parsing arbitrary HTML can consume excessive CPU time, possibly leading to denial of service...

CLEANSTART-2026-RL86772 Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree

Security vulnerability affects the argo-cd package. Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree...

CLEANSTART-2026-IC75127 Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree

Security vulnerability affects the argo-cd package. Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree...

Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to an Uncontrolled Resource Consumption in Golang Go (CVE-2026-25680)

Summary IBM Watson Speech Services Cartridge is vulnerable to an Uncontrolled Resource Consumption in Golang Go due to issues while parsing arbitrary HTML. Golang go is used in our Speech utilities. This vulnerability has been addressed. Please read the details for remediation below. Vulnerabilit...

CLEANSTART-2026-KR31845 Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree

Security vulnerability affects the etcd package. Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree...

CLEANSTART-2026-GZ10195 Parsing arbitrary HTML can consume excessive CPU time, possibly leading to denial of service

Security vulnerability affects the etcd package. Parsing arbitrary HTML can consume excessive CPU time, possibly leading to denial of service...

Markdown-it: Quadratic-time Denial Of Service In Inline HTML Parsing With Html Enabled

Summary With "html: true", markdown-it takes quadratic time to parse repeated unterminated HTML constructs inside a paragraph. This affects HTML comments "", "?", "", and "". When the terminator is absent, matching fails. Parsing eventually reaches the next opener and scans an overlapping suffix...

GHSA-VFGH-JCMW-G37Q markdown-it: Quadratic-time denial of service in inline HTML parsing with html enabled

Summary With html: true, markdown-it takes quadratic time to parse repeated unterminated HTML constructs inside a paragraph. This affects HTML comments , ?, , and . When the terminator is absent, matching fails. Parsing eventually reaches the next opener and scans an overlapping suffix again...

npm: markdown-it: Quadratic-time denial of service in inline HTML parsing with html enabled

npm: markdown-it: Quadratic-time denial of service in inline HTML parsing with html enabled vulnerability discovered by ? in WordPress npm markdown-it versions 14.3.3...

CLEANSTART-2026-XV49388 Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree

Security vulnerability affects the gatekeeper-fips package. Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree...

CLEANSTART-2026-CY18985 Parsing arbitrary HTML can consume excessive CPU time, possibly leading to denial of service

Security vulnerability affects the gatekeeper-fips package. Parsing arbitrary HTML can consume excessive CPU time, possibly leading to denial of service...

CLEANSTART-2026-OY76319 Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree

Security vulnerability affects the gatekeeper-fips package. Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree...

CLEANSTART-2026-XD72038 Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree

Security vulnerability affects the gatekeeper-fips package. Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree...