lk_scraper

LinkedIn Scraper Scrapes Any LinkedIn Data Installation $ pip install git+git://github.com/jqueguiner/lkscraper Setup Using Docker compose $ docker-compose up -d $ docker-compose run lkscraper python3 Using Docker only for Selenium server First, you need to run a Selenium server $ docker run -d -...

CVE-2022-28108

Selenium Chrome RCE Exploit Extended This repository contains a modified version of a Metasploit module that exploits a Remote Code Execution vulnerability in older versions of Selenium Server Grid. Please read this README carefully before using this code. Acknowledgment of Original Code: This...

📄 Selenium Server (Grid) 4.27.0 Code Injection

Proof of concept exploit for Selenium Server Grid versions 4.27.0 and below that exploits firefoxprofile to force the browser to run bash commands. ============================================================================================================================================= | Title...

EUVD-2019-0214

Malware in sbrugna...

EUVD-2019-0325

Malware in sbrugna...

CVE-2022-28108

Selenium Server Grid before 4 allows CSRF because it permits non-JSON content types such as application/x-www-form-urlencoded, multipart/form-data, and text/plain...

Selenium Server CSRF

The vulnerability of the Selenium Server Grid distributed testing tool is related to the manipulation of cross-site requests. Exploiting this vulnerability allows a malicious actor to perform a CSRF attack remotely...

Exploit for Cross-Site Request Forgery (CSRF) in Selenium Selenium_Grid

Selenium Chrome RCE Exploit Extended This repository conta...

Selenium geckodriver RCE

Selenium Server Grid use exploit/linux/http/seleniumgreedfirefoxrcecve202228108 msf exploitseleniumgreedfirefoxrcecve202228108 show targets ...targets... msf exploitseleniumgreedfirefoxrcecve202228108 set TARGET msf exploitseleniumgreedfirefoxrcecve202228108 show options ...show and set options...

Selenium Chrome Remote Code Execution Exploit

Selenium Server Grid versions prior to 4.0.0-alpha-7 allows cross site request forgery because it permits non-JSON content types such as application/x-www-form-urlencoded, multipart/form-data, and text/plain and this issue in turn allows for an attacker to achieve remote code execution. This modu...

Selenium Firefox Remote Code Execution Exploit

Selenium Server Grid versions 4.27.0 and below allows cross site request forgery because it permits non-JSON content types such as application/x-www-form-urlencoded, multipart/form-data, and text/plain and this issue in turn allows for an attacker to achieve remote code execution. This module...

Selenium chrome RCE

Selenium Server Grid before 4.0.0-alpha-7 allows CSRF because it permits non-JSON content types such as application/x-www-form-urlencoded, multipart/form-data, and text/plain. Module Options msf use exploit/linux/http/seleniumgreedchromercecve202228108 msf exploitseleniumgreedchromercecve20222810...

br.com.arsmachina:tapestry-url-rewriter (>=1.0.1, <=2.0.0), net.thucydides.easyb:thucydides-easyb-plugin (>=0.4.32, <=0.4.34) +6 more potentially affected by CVE-2022-28108 via org.seleniumhq.selenium:selenium-server (2.14.0)

org.seleniumhq.selenium:selenium-server MAVEN version 2.14.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.seleniumhq.selenium:selenium-server and may be impacted: - br.com.arsmachina:tapestry-url-rewriter =1.0.1, =0.4.32, =0.4.31, =0.4.31,...

com.crawljax.plugins:crawljax-plugins-parent (>=3.5, <=3.5.1), com.crawljax.plugins:crawloverview-plugin (>=3.5, <=3.5.1) +87 more potentially affected by CVE-2022-28108 via org.seleniumhq.selenium:selenium-server (>=4.0.0-alpha-1, <=4.0.0-alpha-2)

org.seleniumhq.selenium:selenium-server MAVEN version =4.0.0-alpha-1, =3.5, =3.5, =3.5, =3.5, =3.3, =3.5, =3.5, =3.5, =1.0.1, =1.0.1, =1.1.4, =1.0.0, =1.1.1, =4.0.0-alpha-4.0, =4.0.0-rc-1.0 and more Source cves: CVE-2022-28108 Source advisory: OSV:GHSA-H2RR-M97P-6JQ9...

com.actiontestscript:ats-automated-testing (>=1.1.6, <=1.3.1), com.github.invictum:serenity-reportportal-integration (>=1.1.1, <=1.1.2) +59 more potentially affected by CVE-2022-28108 via org.seleniumhq.selenium:selenium-server (3.11.0)

org.seleniumhq.selenium:selenium-server MAVEN version 3.11.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.seleniumhq.selenium:selenium-server and may be impacted: - com.actiontestscript:ats-automated-testing =1.1.6, =1.1.1, =1.0.16, =1.0.16,...

com.aimmac23:selenium-video-node (2.0) potentially affected by CVE-2022-28108 via org.seleniumhq.selenium:selenium-server (3.0.0-beta4)

org.seleniumhq.selenium:selenium-server MAVEN version 3.0.0-beta4 is affected by a known vulnerability. The following packages have a transitive dependency on org.seleniumhq.selenium:selenium-server and may be impacted: - com.aimmac23:selenium-video-node 2.0 Source cves: CVE-2022-28108 Source...

com.arcbees:testutils (>=1.0, <=1.2), com.ardoq:java-api-client (0.9.6) +31 more potentially affected by CVE-2022-28108 via org.seleniumhq.selenium:selenium-server (2.33.0)

org.seleniumhq.selenium:selenium-server MAVEN version 2.33.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.seleniumhq.selenium:selenium-server and may be impacted: - com.arcbees:testutils =1.0, =3.3, =3.3, =3.3, =3.3, =3.3, =1.0.2, =1.2.0.9,...

net.thucydides.easyb:thucydides-easyb-plugin (>=0.5.0, <=0.6.2), net.thucydides.maven.plugins:maven-thucydides-plugin (>=0.5.0, <=0.6.2) +3 more potentially affected by CVE-2022-28108 via org.seleniumhq.selenium:selenium-server (2.15.0)

org.seleniumhq.selenium:selenium-server MAVEN version 2.15.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.seleniumhq.selenium:selenium-server and may be impacted: - net.thucydides.easyb:thucydides-easyb-plugin =0.5.0, =0.5.0, =0.6.0, =0.5.0,...

com.google.code.narcissus-webtests:narcissus-core (0.9.6), com.google.code.narcissus-webtests:narcissus-core-integration-tests (0.9.6) +7 more potentially affected by CVE-2022-28108 via org.seleniumhq.selenium:selenium-server (2.19.0)

org.seleniumhq.selenium:selenium-server MAVEN version 2.19.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.seleniumhq.selenium:selenium-server and may be impacted: - com.google.code.narcissus-webtests:narcissus-core 0.9.6 -...

se.redmind:rmtest-appium (>=2.0.1, <=2.0.18), se.redmind:rmtest-cucumber-selenium (>=2.0.1, <=2.0.18) +5 more potentially affected by CVE-2022-28108 via org.seleniumhq.selenium:selenium-server (2.49.1)

org.seleniumhq.selenium:selenium-server MAVEN version 2.49.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.seleniumhq.selenium:selenium-server and may be impacted: - se.redmind:rmtest-appium =2.0.1, =2.0.1, =2.0.1, =2.0.1, =2.0.1, =2.0.7, =2.0.1,...