XXRF-Shots

Cos'è la vulnerabilità SSRF? Server Side Request Forgery SSRF è un tipo di vulnerabilità che consente agli aggressori di inviare richieste appositamente create attraverso un'applicazione web vulnerabile. Con questa tecnica, gli aggressori possono ottenere accesso non autorizzato a risorse interne...

erlvulnscan

Scanner web concorrente per CVE-2015-1635. Implementazione live in esecuzione qui. Questo sito web dimostrativo viene utilizzato per lo sviluppo di questo progetto e la sua stabilità non è garantita. Le informazioni su questo progetto sono scritte qui. Poiché la lista "TODO" documentata lì è stat...

webscreenshot

webscreenshot Descrizione Un semplice script per fare screenshot di una lista di siti web, basato sullo script PhantomJS url-to-image. Caratteristiche Integrazione del 'lazy-rendering' di url-to-image per risorse AJAX Pienamente funzionante su sistemi Windows e Linux Supporto per cookie e...

N4xD0rk

N4xD0rk Elenca i sottodomini di un dominio principale utilizzando la tecnica chiamata Hacking con i motori di ricerca. Installazione Puoi scaricare l'ultima versione di N4xD0rk clonando il repository GitHub: root@kitploit: git clone https://github.com/n4xh4ck5/N4xD0rk.git Installa le dipendenze...

dorkbot

dorkbot Scan Google or other search results for vulnerabilities. dorkbot is a modular command-line tool for performing vulnerability scans against sets of webpages returned by Google search queries or other supported sources. It is broken up into two sets of modules: Indexers - modules that retur...

org.webjars.npm:karma-phantomjs-launcher (>=1.0.1, <=1.0.4), org.webjars.npm:phantomjs-prebuilt (2.1.16) +1 more potentially affected by CVE-2026-56876 via org.webjars.npm:extract-zip (>=1.7.0, <=2.0.1)

org.webjars.npm:extract-zip MAVEN version =1.7.0, =1.0.1, =3.3.0, =7.1.0 Source cves: CVE-2026-56876 Source advisory: SNYK:JAVA-ORGWEBJARSNPM-17660778...

Malicious Package

Overview ig-phantomjs-binaries is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

EUVD-2019-0350

Malware in sbrugna...

EUVD-2019-0222

Malware in sbrugna...

EUVD-2019-0292

Malware in sbrugna...

EUVD-2021-1113

Malware in sbrugna...

EUVD-2022-5707

Malicious code in bioql PyPI...

Linux Distros Unpatched Vulnerability : CVE-2019-17221

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - PhantomJS through 2.1.1 has an arbitrary file read vulnerability, as demonstrated by an XMLHttpRequest for a file:// URI. The vulnerability exists in the...

Linux Distros Unpatched Vulnerability : CVE-2020-7739

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - This affects all versions of package phantomjs-seo. It is possible for an attacker to craft a url that will be passed to a PhantomJS instance allowing for an SS...

MAL-2025-29114 Malicious code in phantomjs-crawler-demo (npm)

The package phantomjs-crawler-demo was found to contain malicious code...

Malicious code in phantomjs-crawler-demo (npm)

The package phantomjs-crawler-demo was found to contain malicious code...

MAL-2025-839 Malicious code in ig-phantomjs-binaries (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in ig-phantomjs-binaries (npm)

--- -= Per source details. Do not edit below this line.=-...

yt-dlp has dependency on potentially malicious third-party code in Douyu extractors

Impact yt-dlp's DouyuTV and DouyuShow extractors used a cdn.bootcdn.net URL as a fallback for fetching a component of the crypto-js JavaScript library. When the Douyu extractor is used, yt-dlp extracts this JavaScript code and attempts to execute it externally using PhantomJS. bootcdn.net is owne...

GHSA-3V33-3WMW-3785 yt-dlp has dependency on potentially malicious third-party code in Douyu extractors

Impact yt-dlp's DouyuTV and DouyuShow extractors used a cdn.bootcdn.net URL as a fallback for fetching a component of the crypto-js JavaScript library. When the Douyu extractor is used, yt-dlp extracts this JavaScript code and attempts to execute it externally using PhantomJS. bootcdn.net is owne...