huntr-com-bug-bounties-collector

huntr.com bugs collector New bug bountyvulnerabilities collector Requirements Chrome with GUI If you encounter trouble with script execution, check the status of VMs GPU features, if available. Chrome WebDriver Preview python3 main.py 2024-02-20 16:14:47.836189 1. Arbitrary File Reading due to La...

PhantomCrawler

.png PhantomCrawler는 다양한 프록시 IP 주소에서 웹사이트 상호작용을 시뮬레이션하여 다양한 네트워크 및 지리적 위치 조건에서 웹사이트가 어떻게 동작하는지 분석하는 보안 테스트 및 연구 도구입니다. 기능: 지정된 파일의 프록시 IP 주소 목록을 사용합니다. HTTP 및 HTTPS 프록시를 모두 지원합니다. 사용자가 대상 웹사이트 URL, 프록시 파일 경로 및 정적 포트를 입력할 수 있습니다. 각 프록시를 사용하여 지정된 웹사이트에 HTTP 요청을 보냅니다. HTML 콘텐츠를 파싱하여 웹페이지의 링크를 추출하고...

wappalyzergo

Wappalyzergo Wappalyzer Technology Detection Library の Go 向け高性能移植版です。Webanalyze に触発されています。 以下からデータを使用しています： https://github.com/enthec/webappanalyzer https://github.com/HTTPArchive/wappalyzer 特徴 クリーンなコードベースで、非常にシンプルかつ簡単に使用できます。 正規化された正規表現 + wappalyzer フィンガープリントの自動更新データベース。 パフォーマンス向けに最適化：最高の速度を得るため...

CVE-2020-16947

CVE-2020-16947 Outlook 2019 のリモートコマンド実行 このバグはHTMLコンテンツの解析時に発生します。攻撃者がこのエクスプロイトを正常に実行すると、リモートコマンド実行につながる可能性があります。 HTMLコンテンツ内でASCII範囲外の文字列をコピーする際、該当する文字列は0xfffdに置き換えられます。その結果、コピーされる文字列のサイズが2倍になるため、srcバッファとdstバッファのサイズが同じであっても、バッファオーバーフローが発生します。 0Daysエクスプロイトに興味がある方は、[email protected]までご連絡ください。...

cve-collector

CVE-Collector Simple Latest CVE Collector Written in Python There are various methods for collecting the latest CVE Common Vulnerabilities and Exposures information. This code was created to provide guidance on how to collect, what information to include, and how to code when creating a CVE...

cve-collector

CVE-Collector Python으로 작성된 간단한 최신 CVE 수집기 최신 CVECommon Vulnerabilities and Exposures 정보를 수집하는 방법은 다양합니다. 이 코드는 CVE 수집기를 만들 때 수집 방법, 포함할 정보, 코딩 방법에 대한 지침을 제공하기 위해 작성되었습니다. 여기에 제공된 코드는 CVE 수집기를 구현하는 여러 방법 중 하나입니다. 특정 웹사이트를 크롤링하고 HTML 요소를 파싱하여 데이터를 검색하는 방식을 사용합니다. 이 수집기는 https://www.cvedetails.com의 ...

CVE-2020-16947

CVE-2020-16947 この脆弱性は、Windows 10 1909 x64 にインストールされた Outlook 2019 16.0.13231.20262 で発生します。 TLDR; 私はこのバグを winafl ファザーを使用して発見しました。このバグは HTML コンテンツの解析時に発生します。攻撃者がこのエクスプロイトを正常に実行すると、リモートでのコマンド実行につながる可能性があります。 詳細 0:000 r rax=0000000000000000 rbx=0000021c99ce9eb0 rcx=0000021c99ce9eb0 rdx=00000046c07f8a...

CVE-2025-54100

CVE-2025-54100 – PowerShell 响应解析 PoC 演示 CVE-2025-54100 如何通过恶意 HTML 解析，在 Windows PowerShell 5.1 中导致 远程代码执行（RCE） 。 什么是 CVE-2025-54100？ 漏洞类型： 当 Invoke-WebRequest 未使用 -UseBasicParsing 参数时存在命令注入风险 严重等级： CVSS 7.8（高危） 根本原因： 基于 MSHTML 的 HTML 响应解析允许脚本执行（如 ActiveXObject），并在调用者上下文中运行 受影响系统： Windows 10 / 11...

AlmaLinux 9.6 [TuxCare] Security Update: osbuild-composer / osbuild-composer-core / osbuild-composer-tests / etc (ALMALINUX9.6:CLSA-2026:1789576991)

The AlmaLinux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1789576991 advisory. - Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree. This can be leveraged to execute XSS...

Rocky Linux 9.6 [TuxCare] Security Update: osbuild-composer / osbuild-composer-core / osbuild-composer-tests / etc (ALMALINUX9.6:CLSA-2026:1789576991)

The Rocky Linux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1789576991 advisory. - Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree. This can be leveraged to execute XSS...

Rocky Linux 8 [CIQ] Security Update: java-11-openjdk / java-11-openjdk-debuginfo / etc Multiple Vulnerabilities (crlsa-2023_1895)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20231895 advisory. OpenJDK: improper connection handling during TLS handshake 8294474 CVE-2023-21930 OpenJDK: Swing HTML parsing issue 8296832 CVE-2023-21939 OpenJDK: incorre...

Rocky Linux 9 [CIQ] Security Update: java-11-openjdk / java-11-openjdk-debuginfo / etc Multiple Vulnerabilities (crlsa-2023_1880)

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20231880 advisory. OpenJDK: improper connection handling during TLS handshake 8294474 CVE-2023-21930 OpenJDK: Swing HTML parsing issue 8296832 CVE-2023-21939 OpenJDK: incorre...

Rocky Linux 9 [CIQ] Security Update: java-1.8.0-openjdk / java-1.8.0-openjdk-debuginfo / etc Multiple Vulnerabilities (crlsa-2023_1909)

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20231909 advisory. OpenJDK: improper connection handling during TLS handshake 8294474 CVE-2023-21930 OpenJDK: Swing HTML parsing issue 8296832 CVE-2023-21939 OpenJDK: incorre...

CLEANSTART-2026-AJ28533 Parsing arbitrary HTML can consume excessive CPU time, possibly leading to denial of service

Security vulnerability affects the containerd package. Parsing arbitrary HTML can consume excessive CPU time, possibly leading to denial of service...

CLEANSTART-2026-DE66798 Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree

Security vulnerability affects the minio-operator package. Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree...

Rocky Linux 9.6 [TuxCare] Security Update: osbuild-composer / osbuild-composer-core / osbuild-composer-tests / etc (ALMALINUX9.6:CLSA-2026:1789483713)

The Rocky Linux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1789483713 advisory. - Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree. This can be leveraged to execute XSS...

AlmaLinux 9.2 [TuxCare] Security Update: osbuild-composer / osbuild-composer-core / etc (ALMALINUX9.2:CLSA-2026:1789583130)

The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1789583130 advisory. - Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree. This can be leveraged to execute XSS...

AlmaLinux 9.6 [TuxCare] Security Update: osbuild-composer / osbuild-composer-core / osbuild-composer-tests / etc (ALMALINUX9.6:CLSA-2026:1789657645)

The AlmaLinux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1789657645 advisory. - Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree. This can be leveraged to execute XSS...

Rocky Linux 9.6 [TuxCare] Security Update: osbuild-composer / osbuild-composer-core / osbuild-composer-tests / etc (ALMALINUX9.6:CLSA-2026:1789657645)

The Rocky Linux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1789657645 advisory. - Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree. This can be leveraged to execute XSS...

AlmaLinux 9.6 [TuxCare] Security Update: osbuild-composer / osbuild-composer-core / osbuild-composer-tests / etc (ALMALINUX9.6:CLSA-2026:1789483713)

The AlmaLinux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1789483713 advisory. - Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree. This can be leveraged to execute XSS...