Skip to content
Threat Feed
Subscribe

Tag

Web-Scraping

3 briefs RSS
high advisory

Arbitrary File Write Vulnerability in crawl4ai PDFContentScrapingStrategy

The PDFContentScrapingStrategy in crawl4ai versions prior to 0.9.3 is vulnerable to arbitrary file write via insufficient input validation in the _filter_untrusted_fields function, allowing attackers to overwrite sensitive files.

PoC crawl4ai denial-of-service web-scraping cve-2026-91941
2t 2c updated
high advisory

Scrapy S3DownloadHandler Vulnerable to Credential Exposure via Plaintext HTTP

The Scrapy S3DownloadHandler defaults to sending signed AWS S3 requests over plaintext HTTP, potentially exposing AWS authorization headers and security tokens to network-based attackers.

Scrapy vulnerability cloud web-scraping
1t 1c
high advisory

Threat Actors Impersonate AI Crawlers to Exfiltrate Sensitive Credentials

Threat actors are using forged User-Agent strings to masquerade as AI crawlers from OpenAI, Anthropic, and other firms to scan for and exfiltrate environment files and cloud credentials from misconfigured web servers.

PoC Vite credential-theft web-scraping scanning reconnaissance
1r 2t 1c updated