CVE-2016-10658

The CVE-2016-10658 entry concerns the native-opencv npm package, which downloads binary resources over HTTP. This insecure download path allows a network-positioned attacker to MITM and replace the requested binary with a malicious version, potentially leading to remote code execution on the host...

CVE-2016-10578

CVE-2016-10578 concerns the unicode package used with Node.js. It states that unicode loads data from unicode.org and, prior to version 9.0.0, downloads binary resources over HTTP, enabling a network attacker to modify or read resources (MitM). According to connected advisories, this can lead to ...

CVE-2016-10568

CVE-2016-10568 affects geoip-lite-country (pre-1.1.4). The library downloads data resources over HTTP, creating vulnerability to man-in-the-middle attacks. Impact ranges from data modification/read to potential code execution depending on the data/resource behavior, per multiple sources. Mitigati...

CVE-2016-10681

The CVE-2016-10681 issue affects roslib-socketio. Affected code downloads binary resources over HTTP, enabling MITM interception and, in a network-positioned scenario, potential remote code execution by substituting the requested binary with a malicious one. Public advisories (GHSA-xq8r-r72r-pqwm...

CVE-2016-10666

CVE-2016-10666 affects the Node wrapper for Yandex Tomita Parser, tomita-parser, which downloads binary resources over HTTP. This creates a man-in-the-middle (MitM) risk: an attacker on the network can intercept the HTTP response and swap the executable with a malicious one, potentially leading t...

CVE-2017-16003

The CVE-2017-16003 entry affects the Windows tool Windows-build-tools (npm module for installing C++ Build Tools). Versions below 1.0.0 download resources over HTTP, which enables MITM interception of the downloaded executables. An attacker on the network could swap the requested resources with m...

CVE-2016-10584

dalek-browser-chrome-canary provides Google Chrome bindings for DalekJS. dalek-browser-chrome-canary downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution RCE by swapping out the requested binary with an attacker...

CVE-2016-10586

CVE-2016-10586 affects the macaca-chromedriver Node.js wrapper for Selenium’s chromedriver. The vulnerability arises because it downloads binary resources over HTTP, enabling a man-in-the-middle (MITM) attacker to swap the requested binary with a malicious one, potentially causing remote code exe...

CVE-2016-10680

CVE-2016-10680 affects adamvr-geoip-lite, a lightweight native JavaScript GeoIP API. The underlying issue is that geoip resources are downloaded over HTTP, making them susceptible to MITM modification or reading. This can compromise the integrity and availability of geolocation data used by an ap...

CVE-2016-10589

Summary: The CVE-2016-10589 issue affects the npm package selenium-binaries, which downloads Selenium binaries over HTTP. The underlying vulnerability is a MITM risk that can lead to remote code execution if a malicious binary is swapped during transmission. The connected advisories consistently ...

CVE-2016-10568

geoip-lite-country is a stripped down version of geoip-lite, supporting only country lookup. geoip-lite-country before 1.1.4 downloads data resources over HTTP, which leaves it vulnerable to MITM attacks...

CVE-2016-10567

product-monitor is a HTML/JavaScript template for monitoring a product by encouraging product developers to gather all the information about the status of a product, including live monitoring, statistics, endpoints, and test results into one place. product-monitor versions below 2.2.5 download...

CVE-2016-10573

CVE-2016-10573 affects the baryton-saxophone module (used to install/launch Selenium Server) and stems from downloading binary resources over HTTP before version 3.0.1. This enables a network-position attacker (MitM) to swap the downloaded binary with a malicious one, potentially leading to remot...

CVE-2016-10589

selenium-binaries downloads Selenium related binaries for your OS. selenium-binaries downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution RCE by swapping out the requested binary with an attacker controlled binary if t...

CVE-2016-10558

aerospike is an Aerospike add-on module for Node.js. aerospike versions below 2.4.2 download binary resources over HTTP, which leaves the module vulnerable to MITM attacks. It may be possible to cause remote code execution RCE by swapping out the requested binary with an attacker controlled binar...

CVE-2016-10586

macaca-chromedriver is a Node.js wrapper for the selenium chromedriver. macaca-chromedriver before 1.0.29 downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution RCE by swapping out the requested binary with an attacker...

CVE-2016-10567

CVE-2016-10567 affects product-monitor before 2.2.5. The vulnerability stems from downloading JavaScript resources over HTTP, enabling MITM attackers to swap the requested JS with attacker-controlled code, potentially leading to remote code execution when the user loads the resource. No exploit d...

CVE-2016-10635

broccoli-closure is a Closure compiler plugin for Broccoli. broccoli-closure before 1.3.1 downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution RCE by swapping out the requested binary with an attacker controlled binary...

CVE-2016-10680

adamvr-geoip-lite is a light weight native JavaScript implementation of GeoIP API from MaxMind adamvr-geoip-lite downloads geoip resources over HTTP, which leaves it vulnerable to MITM attacks. This impacts the integrity and availability of this geoip data that may alter the decisions made by an...

CERT Tapioca for MITM Analysis

CERT Tapioca is a utility for testing mobile or any other application using MITM techniques. CERT Tapioca development was sponsored by the United States Army Armament Research, Development and Engineering Center ARDEC as well as the United States Department of Homeland Security DHS. Installation...