91 matches found
XXRF-Shots
Cos'è la vulnerabilità SSRF? Server Side Request Forgery SSRF è un tipo di vulnerabilità che consente agli aggressori di inviare richieste appositamente create attraverso un'applicazione web vulnerabile. Con questa tecnica, gli aggressori possono ottenere accesso non autorizzato a risorse interne...
erlvulnscan
Scanner web concorrente per CVE-2015-1635. Implementazione live in esecuzione qui. Questo sito web dimostrativo viene utilizzato per lo sviluppo di questo progetto e la sua stabilità non è garantita. Le informazioni su questo progetto sono scritte qui. Poiché la lista "TODO" documentata lì è stat...
webscreenshot
webscreenshot Descrizione Un semplice script per fare screenshot di una lista di siti web, basato sullo script PhantomJS url-to-image. Caratteristiche Integrazione del 'lazy-rendering' di url-to-image per risorse AJAX Pienamente funzionante su sistemi Windows e Linux Supporto per cookie e...
N4xD0rk
N4xD0rk Elenca i sottodomini di un dominio principale utilizzando la tecnica chiamata Hacking con i motori di ricerca. Installazione Puoi scaricare l'ultima versione di N4xD0rk clonando il repository GitHub: root@kitploit: git clone https://github.com/n4xh4ck5/N4xD0rk.git Installa le dipendenze...
dorkbot
dorkbot Scan Google or other search results for vulnerabilities. dorkbot is a modular command-line tool for performing vulnerability scans against sets of webpages returned by Google search queries or other supported sources. It is broken up into two sets of modules: Indexers - modules that retur...
org.webjars.npm:karma-phantomjs-launcher (>=1.0.1, <=1.0.4), org.webjars.npm:phantomjs-prebuilt (2.1.16) +1 more potentially affected by CVE-2026-56876 via org.webjars.npm:extract-zip (>=1.7.0, <=2.0.1)
org.webjars.npm:extract-zip MAVEN version =1.7.0, =1.0.1, =3.3.0, =7.1.0 Source cves: CVE-2026-56876 Source advisory: SNYK:JAVA-ORGWEBJARSNPM-17660778...
Malicious Package
Overview ig-phantomjs-binaries is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...
EUVD-2019-0350
Malware in sbrugna...
EUVD-2019-0222
Malware in sbrugna...
EUVD-2019-0292
Malware in sbrugna...
EUVD-2021-1113
Malware in sbrugna...
EUVD-2022-5707
Malicious code in bioql PyPI...
Linux Distros Unpatched Vulnerability : CVE-2019-17221
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - PhantomJS through 2.1.1 has an arbitrary file read vulnerability, as demonstrated by an XMLHttpRequest for a file:// URI. The vulnerability exists in the...
Linux Distros Unpatched Vulnerability : CVE-2020-7739
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - This affects all versions of package phantomjs-seo. It is possible for an attacker to craft a url that will be passed to a PhantomJS instance allowing for an SS...
MAL-2025-29114 Malicious code in phantomjs-crawler-demo (npm)
The package phantomjs-crawler-demo was found to contain malicious code...
Malicious code in phantomjs-crawler-demo (npm)
The package phantomjs-crawler-demo was found to contain malicious code...
MAL-2025-839 Malicious code in ig-phantomjs-binaries (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in ig-phantomjs-binaries (npm)
--- -= Per source details. Do not edit below this line.=-...
yt-dlp has dependency on potentially malicious third-party code in Douyu extractors
Impact yt-dlp's DouyuTV and DouyuShow extractors used a cdn.bootcdn.net URL as a fallback for fetching a component of the crypto-js JavaScript library. When the Douyu extractor is used, yt-dlp extracts this JavaScript code and attempts to execute it externally using PhantomJS. bootcdn.net is owne...
GHSA-3V33-3WMW-3785 yt-dlp has dependency on potentially malicious third-party code in Douyu extractors
Impact yt-dlp's DouyuTV and DouyuShow extractors used a cdn.bootcdn.net URL as a fallback for fetching a component of the crypto-js JavaScript library. When the Douyu extractor is used, yt-dlp extracts this JavaScript code and attempts to execute it externally using PhantomJS. bootcdn.net is owne...