erlvulnscan

CVE-2015-1635 用ウェブベース並行スキャナー。 ライブ実装はこちらで稼働中。このデモサイトは本プロジェクトの開発用であり、その安定性は保証されません。 このプロジェクトの情報はこちらに記載されています。 そこに記載された「TODO」リストが完了したため、このコードは現在安定した状態にあります。 コードのドキュメントはこちらにあります。 開発とデプロイ リポジトリをクローン root@kitploit: git clone https://github.com/technion/erlvulnscan.git 前提条件を取得 root@kitploit: ./rebar3...

webscreenshot

webscreenshot الوصف نص برمجي بسيط لأخذ لقطات شاشة لقائمة من المواقع، يعتمد على نص url-to-image الخاص بـ PhantomJS. الميزات دمج ميزة 'lazy-rendering' من url-to-image للموارد AJAX يعمل بكامل وظائفه على أنظمة Windows و Linux دعم تعريف الكوكيز ورؤوس HTTP المخصصة لمحرك العرض PhantomJS المعالجة المتعدد...

XXRF-Shots

ما هي ثغرة SSRF؟ تزوير الطلب من جانب الخادم SSRF هو نوع من الثغرات الأمنية التي تمكن المهاجمين من إرسال طلبات مصممة خصيصًا عبر تطبيق ويب ضعيف. باستخدام هذه التقنية، يمكن للمهاجمين الحصول على وصول غير مصرح به إلى الموارد الداخلية خلف جدار الحماية، والتي عادةً ما تكون غير قابلة للوصول من الشبكات...

N4xD0rk

N4xD0rk 검색 엔진을 이용한 해킹 기술을 사용하여 주요 도메인의 서브도메인을 나열합니다. 설치 GitHub 저장소를 복제하여 최신 버전의 N4xD0rk를 다운로드할 수 있습니다: root@kitploit: git clone https://github.com/n4xh4ck5/N4xD0rk.git pip를 통해 종속성을 설치하세요: root@kitploit: pip install -r requirements.txt phantomJS를 제대로 설치하려면 다음 단계를 따르세요: root@kitploit: 리눅스 Debian,...

dorkbot

dorkbot Scan Google or other search results for vulnerabilities. dorkbot is a modular command-line tool for performing vulnerability scans against sets of webpages returned by Google search queries or other supported sources. It is broken up into two sets of modules: Indexers - modules that retur...

org.webjars.npm:karma-phantomjs-launcher (>=1.0.1, <=1.0.4), org.webjars.npm:phantomjs-prebuilt (2.1.16) +1 more potentially affected by CVE-2026-56876 via org.webjars.npm:extract-zip (>=1.7.0, <=2.0.1)

org.webjars.npm:extract-zip MAVEN version =1.7.0, =1.0.1, =3.3.0, =7.1.0 Source cves: CVE-2026-56876 Source advisory: SNYK:JAVA-ORGWEBJARSNPM-17660778...

Malicious Package

Overview ig-phantomjs-binaries is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

EUVD-2019-0350

Malware in sbrugna...

EUVD-2019-0222

Malware in sbrugna...

EUVD-2019-0292

Malware in sbrugna...

EUVD-2021-1113

Malware in sbrugna...

EUVD-2022-5707

Malicious code in bioql PyPI...

Linux Distros Unpatched Vulnerability : CVE-2019-17221

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - PhantomJS through 2.1.1 has an arbitrary file read vulnerability, as demonstrated by an XMLHttpRequest for a file:// URI. The vulnerability exists in the...

Linux Distros Unpatched Vulnerability : CVE-2020-7739

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - This affects all versions of package phantomjs-seo. It is possible for an attacker to craft a url that will be passed to a PhantomJS instance allowing for an SS...

Malicious code in phantomjs-crawler-demo (npm)

The package phantomjs-crawler-demo was found to contain malicious code...

MAL-2025-29114 Malicious code in phantomjs-crawler-demo (npm)

The package phantomjs-crawler-demo was found to contain malicious code...

MAL-2025-839 Malicious code in ig-phantomjs-binaries (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in ig-phantomjs-binaries (npm)

--- -= Per source details. Do not edit below this line.=-...

yt-dlp has dependency on potentially malicious third-party code in Douyu extractors

Impact yt-dlp's DouyuTV and DouyuShow extractors used a cdn.bootcdn.net URL as a fallback for fetching a component of the crypto-js JavaScript library. When the Douyu extractor is used, yt-dlp extracts this JavaScript code and attempts to execute it externally using PhantomJS. bootcdn.net is owne...

GHSA-3V33-3WMW-3785 yt-dlp has dependency on potentially malicious third-party code in Douyu extractors

Impact yt-dlp's DouyuTV and DouyuShow extractors used a cdn.bootcdn.net URL as a fallback for fetching a component of the crypto-js JavaScript library. When the Douyu extractor is used, yt-dlp extracts this JavaScript code and attempts to execute it externally using PhantomJS. bootcdn.net is owne...