CVE-2016-10619: Missing Encryption of Sensitive Data

pennyworth is a natural language templating engine. pennyworth downloads data resources over HTTP, which leaves it vulnerable to MITM attacks...

PT-2018-4799

Name of the Vulnerable Software and Affected Versions fibjs versions affected versions not specified Description The issue concerns the insecure download of binary resources over HTTP, making it susceptible to man-in-the-middle MITM attacks. This could potentially lead to remote code execution RC...

PT-2018-4809

Name of the Vulnerable Software and Affected Versions jvminstall affected versions not specified Description The issue concerns the insecure download of binary resources over HTTP, making it susceptible to man-in-the-middle MITM attacks. This could potentially lead to remote code execution RCE if...

PT-2018-4760

Name of the Vulnerable Software and Affected Versions closurecompiler versions prior to 1.6.1 Description The issue concerns the insecure download of binary resources over HTTP, making it susceptible to man-in-the-middle MITM attacks. If an attacker is on the network or positioned between the use...

PT-2018-4812

Name of the Vulnerable Software and Affected Versions scalajs-standalone-bin affected versions not specified Description The issue arises from the software downloading binary resources over HTTP, making it susceptible to man-in-the-middle MITM attacks. This could potentially lead to remote code...

PT-2018-4765

Name of the Vulnerable Software and Affected Versions wasdk versions affected versions not specified Description The issue concerns the insecure download of binary resources over HTTP, making it susceptible to man-in-the-middle MITM attacks. This could potentially lead to remote code execution RC...

PT-2018-4772

Name of the Vulnerable Software and Affected Versions ipip affected versions not specified Description The issue concerns the insecure download of resources over HTTP, making it susceptible to Man-in-the-Middle MITM attacks. In scenarios where an attacker has a privileged network position, they c...

PT-2018-4796

Name of the Vulnerable Software and Affected Versions node-browser versions affected versions not specified Description The issue allows for man-in-the-middle MITM attacks due to the insecure download of resources over HTTP. In scenarios where an attacker has a privileged network position, they c...

PT-2018-4782

Name of the Vulnerable Software and Affected Versions dalek-browser-chrome affected versions not specified Description The issue allows for a man-in-the-middle MITM attack due to the insecure download of binary resources over HTTP. This could potentially lead to remote code execution RCE if an...

CVE-2016-10632: Missing Encryption of Sensitive Data

apk-parser2 is a module which extracts Android Manifest info from an APK file. apk-parser2 downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution RCE by swapping out the requested binary with an attacker controlled binar...

PT-2018-4793

Name of the Vulnerable Software and Affected Versions curses affected versions not specified Description The issue concerns the insecure download of binary resources over HTTP, making it susceptible to man-in-the-middle MITM attacks. This could potentially lead to remote code execution RCE if an...

CVE-2016-10606: Missing Encryption of Sensitive Data

grunt-webdriver-qunit is a grunt plugin to run qunit with webdriver in grunt grunt-webdriver-qunit downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution RCE by swapping out the requested binary with an attacker controll...

CVE-2016-10624: Missing Encryption of Sensitive Data

selenium-chromedriver is a simple utility for downloading the Selenium Webdriver for Google Chrome selenium-chromedriver downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution RCE by swapping out the requested binary wit...

PT-2018-4757

Name of the Vulnerable Software and Affected Versions Chromedriver versions prior to 2.26.1 Description The issue allows for a man-in-the-middle MITM attack due to the insecure download of binary resources over HTTP. This could potentially lead to remote code execution RCE if an attacker intercep...

PT-2018-4792

Name of the Vulnerable Software and Affected Versions httpsync versions affected versions not specified Description The issue concerns the insecure download of binary resources over HTTP, making it susceptible to man-in-the-middle MITM attacks. If an attacker is positioned between the user and th...

CVE-2016-10615: Missing Encryption of Sensitive Data

curses is bindings for the native curses library, a full featured console IO library. curses downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution RCE by swapping out the requested binary with an attacker controlled...

CVE-2016-10626: Missing Encryption of Sensitive Data

mystem3 is a NodeJS wrapper for the Yandex MyStem 3. mystem3 downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution RCE by swapping out the requested binary with an attacker controlled binary if the attacker is on the...

CVE-2016-10630: Missing Encryption of Sensitive Data

install-g-test downloads resources over HTTP, which leaves it vulnerable to MITM attacks...

CVE-2016-10603: Missing Encryption of Sensitive Data

air-sdk is a NPM wrapper for the Adobe AIR SDK. air-sdk downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution RCE by swapping out the requested binary with an attacker controlled binary if the attacker is on the network...

CVE-2016-10599: Missing Encryption of Sensitive Data

sauce-connect is a Node.js wrapper over the SauceLabs SauceConnect.jar program for establishing a secure tunnel for intranet testing. sauce-connect downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution RCE by swapping o...