CVE-2016-10663

wixtoolset is a Node module wrapper around the wixtoolset binaries wixtoolset downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution RCE by swapping out the requested resources with an attacker controlled copy if the...

CVE-2016-10657

co-cli-installer downloads the co-cli module as part of the install process, but does so over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution RCE by swapping out the requested resources with an attacker controlled copy if the attacker is on the...

CVE-2016-10675

Summary: libsbmlsim downloads binaries over HTTP, enabling MitM attacks. The connected advisories/cves state that an attacker with a privileged network position could intercept responses and replace the requested executable with a malicious one, potentially causing remote code execution on the ho...

CVE-2016-10656

The provided documents confirm that qbs vulnerably downloads binary resources over HTTP, enabling a potential MITM attacker on the network to swap the requested binary with a malicious one and possibly execute code on the host. The risk is described as remote code execution under network-position...

CVE-2016-10670

The CVE-2016-10670 issue affects the window s-seleniumjar-mirror package, which downloads the Selenium Jar over HTTP. The underlying risk is a MITM attacker between the user and the remote server, who could swap the downloaded resource with a malicious executable, potentially leading to remote co...

CVE-2016-10688

Haxe 3 : The Cross-Platform Toolkit a fork from David Mouton's damoebius/haxe-npm haxe3 downloads resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution RCE by swapping out the requested resources with an attacker controlled copy if the...

CVE-2016-10664

mystem is a Node.js wrapper for MyStem morphology text analyzer by Yandex.ru mystem downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution RCE by swapping out the requested binary with an attacker controlled binary if th...

CVE-2016-10648

The CVE-2016-10648 issue affects the marionette-socket-host component, which downloads binary resources over HTTP. This creates a MITM risk that an attacker on the network could swap the binary with a malicious one, potentially leading to remote code execution on the host. Reported across multipl...

CVE-2016-10637

CVE-2016-10637 affects haxe-dev, a cross-platform toolkit. The vulnerability arises when haxe-dev downloads binary resources over HTTP, allowing a network-adjacent attacker to perform a MITM and swap the requested binary with an attacker-controlled one, potentially leading to remote code executio...

CVE-2016-10657

CVE-2016-10657 concerns the co-cli-installer, which downloads the co-cli module over HTTP. The underlying issue is unencrypted HTTP delivery of a binary/executable, enabling a man-in-the-middle attack where an attacker on the network could swap the downloaded resource, potentially leading to remo...

CVE-2016-10651

CVE-2016-10651 affects the Node.js Selenium Webdriver Launcher, webdriver-launcher, which downloads binary resources over HTTP. This enables MITM attacks where an attacker on the network can swap the binary, potentially leading to remote code execution on the user’s system. Public references cons...

CVE-2016-10683

CVE-2016-10683 involves arcanist downloading resources over HTTP, enabling MITM interception and potential remote code execution by substituting attacker-controlled content. The connected advisories (GHSA-G7W9-VM5M-48Q8, OSV, CNVD, etc.) reiterate that affected arcanist versions insecurely fetch ...

CVE-2016-10652

CVE-2016-10652 affects the NodeJS module prebuild-lwip , which insecurely downloads resources over HTTP. The underlying issue permits a network-position attacker to perform a MITM attack by modifying or reading downloaded resources, with potential consequences ranging from information disclosure ...

CVE-2016-10640

node-thulac, a Node binding for thulac, downloads binary resources over HTTP, making it vulnerable to MITM attacks. The available sources (NVD/NPM advisory/GHSA/OSV) describe potential remote code execution if an attacker on the network swaps the requested binary with a malicious one. Affected ve...

CVE-2016-10694

The CVE-2016-10694 entry concerns the alto-saxophone module used to install and launch Chromedriver on Mac, Linux, or Windows. Versions below 2.25.1 download binary resources over HTTP, allowing MITM manipulation of the binary and potentially enabling remote code execution if an attacker on the n...

CVE-2016-10685

CVE-2016-10685 affects pk-app-wonderbox, which downloads binary resources over HTTP, enabling MITM manipulation of requested resources. This can allow an attacker on the same network or with privileged network access to replace the binary with a malicious one, potentially causing remote code exec...

CVE-2016-10643

CVE-2016-10643 affects jstestdriver, a wrapper for Google's jstestdriver. The vulnerability arises because it downloads binary resources over HTTP, enabling a MitM attacker on the network to swap the binary with a malicious one and potentially achieve remote code execution. Affected versions are ...

CVE-2016-10647

The CVE-2016-10647 issue affects node-air-sdk, an AIR SDK for Node.js, which downloads binary resources over HTTP. This creates a MITM risk that could allow an attacker in a privileged network position to replace the requested binary with a malicious one, potentially leading to remote code execut...

CVE-2016-10664

The CVE-2016-10664 issue affects the mystem Node.js wrapper for Yandex MyStem, where binary resources are downloaded over HTTP. This enables a MITM attacker with network access to swap the requested binary for a malicious one, potentially causing remote code execution on the host. The affected be...

CVE-2016-10673

ipip-coffee is vulnerable to MITM attacks because it downloads geolocation resources over HTTP. The root cause is unencrypted HTTP resource retrieval, which can allow an attacker with a privileged network position to modify or read resources, impacting the integrity and availability of geolocatio...