Malicious code in Syntellect.Winium.Web.Driver (NuGet)

--- -= Per source details. Do not edit below this line.=-...

The vulnerability of the WebDriver driver for the Mozilla Firefox browser allows a hacker to disclose protected information and execute arbitrary code.

The vulnerability of the WebDriver driver for the Mozilla Firefox browser is related to a lack of mechanisms for verifying the data source. Exploiting this vulnerability allows a malicious actor, operating remotely, to circumvent established security restrictions, disclose sensitive information,...

USN-5284-1 firefox vulnerabilities

Multiple security issues were discovered in Firefox. If a user were tricked into opening a specially crafted website, an attacker could potentially exploit these to cause a denial of service, bypass security restrictions, obtain sensitive information, or execute arbitrary code. CVE-2022-0511,...

geckodriver 跨站请求伪造漏洞

geckodriver is an application program. It provides an HTTP API described by the WebDriver protocol to communicate with the Gecko browser. A security vulnerability exists in geckodriver prior to 0.27.0, which stems from the fact that a lack of checking the Content-Type header in geckodriver may le...

Selenium arbitrary file read

If there is an open selenium web driver, a remote attacker can send requests to the victims browser. In certain cases this can be used to access to the remote file system. Module Options msf use auxiliary/gather/selenium/fileread msf undefinedfileread show actions ...actions... msf...

Splunk Enterprise 7.2.3 Command Execution

!/usr/bin/python Exploit Title: Splunk Enterprise 7.2.3 Custom App RCE persistent backdoor Date: January 23, 2019 Exploit Author: Lee Mazzoleni Vendor Homepage: https://www.splunk.com/ Software Link: https://www.splunk.com/enus/download/splunk-enterprise.html Version: 7.2.3 Tested on: kali...

Zeus Scanner - Advanced Dork Searching Utility

Zeus is a advanced dork searching tool that is capable of bypassing search engine API calls, search engine captchas, and IP address blocking from sending many requests to the search engine itself. Zeus can use three different search engines to do the search default is Google. Zeus has a powerful...

CVE-2004-2034

CVE-2004-2034 describes a buffer overflow in the WildTangent Web Driver 4.0, specifically in the WTHoster and WebDriver modules. The vulnerability allows remote attackers to execute arbitrary code via a long filename. The available connected documents confirm the affected software/components and ...

WildTangent Web Driver Long FileName Stack Overflow

NGSSoftware Insight Security Research Advisory Name: WildTangent Web Driver Long FileName Stack Overflow Systems Affected: WildTangent Web Driver 4.0 earlier versions not tested Severity: High Vendor URL: http://www.wildtangent.com Author: Peter Winter-Smith [email protected] Date Vendor...

Web Driver buffer overflow

Buffer overflows in WebDriver and WTHoster...

CVE-2004-2034

Buffer overflow in the 1 WTHoster and 2 WebDriver modules in WildTangent Web Driver 4.0 allows remote attackers to execute arbitrary code via a long filename...

ibm informix Web Datablade 3.x4.1 - Directory Traversal

ibm informix Web Datablade 3.x4.1 - Directory Traversal source: https://www.securityfocus.com/bid/3575/info Informix is an enterprise database distributed and maintained by IBM. The Web Datablade Module for Informix SQL is used to provide wbBinaries for storing large binary resources such as...