CVE-2016-10569

embedza is a module to create HTML snippets/embeds from URLs using info from oEmbed, Open Graph, meta tags. embedza versions below 1.2.4 download JavaScript resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution RCE by swapping out the...

CVE-2016-10552

igniteui 0.0.5 and earlier downloads JavaScript and CSS resources over insecure protocol...

CVE-2016-10564

apk-parser is a tool to extract Android Manifest info from an APK file. apk-parser versions below 0.1.6 download binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution RCE by swapping out the requested binary with an attacker...

CVE-2016-10565

CVE-2016-10565 affects operadriver (Opera Driver for Selenium). The vulnerability arises because operadriver versions below 0.2.3 download binary resources over HTTP, enabling potential MITM manipulation of the downloaded binary. The attacker could substitute the binary with a malicious one if po...

macaca-chromedriver code execution vulnerability

macaca-chromedriver is a package for installing selenium chromedriver. A security vulnerability exists in macaca-chromedriver versions prior to 1.0.29, which originates when the program downloads binary resources over the HTTP protocol. A remote attacker can exploit the vulnerability by replacing...

baryton-saxophone code execution vulnerability

baryton-saxophone is a module for installing and launching Selenium Server for Mac, Linux and Windows. A security vulnerability exists in baryton-saxophone versions prior to 3.0.1, which originates when the program downloads binary resources over the HTTP protocol. A remote attacker could exploit...

Man-in-the-Middle(MitM)

webdrvr is vulnerable to man-in-the-middle MitM attacks. This is possible because the package allows the downloading of binary resources via HTTP. This may potentially cause remote code execution RCE by swapping out the requested binary with an attacker controlled binary if the attacker is on the...

Man-in-the-Middle(MitM)

broccoli-closure is vulnerable to man-in-the-middle MitM. It is possible because it allows to download the requested binary resources via HTTP, which potentially cause remote code execution RCE by replacing the requested binary with an attacker controlled binary if the attacker is on the network ...

Man In The Middle (MitM)

prince is vulnerable to man-in-the-middle MitM attacks. This is because the libraries download zipped resources via HTTP, allowing MitM attacks. It may also cause remote code execution RCE by swapping out the requested zipped file with an attacker controlled zipped file if the attacker is on the...

Man-in-the-Middle (MitM)

mystem-fix is vulnerable to man-in-the-middle MitM attacks. This is because the application downloads binary resources via HTTP, allowing MitM attacks. Also, it may potentially cause remote code execution RCE by swapping out the requested binary with an attacker controlled binary if the attacker ...

Man-in-the-Middle (MitM)

massif is vulnerable to man-in-the-middle MitM attacks. This is because the application downloads binary resources via HTTP, allowing MitM attacks. Also, it may potentially cause remote code execution RCE by swapping out the requested binary with an attacker controlled binary if the attacker is o...

Man-in-the-Middle (MitM)

poco is vulnerable to man-in-the-middle MitM attacks. The application downloads binary resources via HTTP, allowing MitM attacks. Also, it may potentially cause remote code execution RCE by swapping out the requested binary with an attacker controlled binary if the attacker is on the network or...

Man-in-the-Middle (MitM)

native-opencv is vulnerable to man-in-the-middle MitM attacks. The application downloads binary resources via HTTP, allowing MitM attacks. Also, it may potentially cause remote code execution RCE by swapping out the requested binary with an attacker controlled binary if the attacker is on the...

whitehallresources.co.uk XSS vulnerability

Open Bug Bounty ID: OBB-624412 Description| Value ---|--- Affected Website:| whitehallresources.co.uk Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

IBM Security Guardium Big Data Intelligence Critical Resource Privilege Assignment Vulnerability

IBM Security Guardium Big Data Intelligence is a solution that delivers the capabilities of a big data platform while meeting data security requirements. IBM Security Guardium Big Data Intelligence SonarG suffers from an incorrect assignment of critical resource permissions vulnerability. An...

CVE-2016-10681

roslib-socketio - The standard ROS Javascript Library fork for add support to socket.io roslib-socketio downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution RCE by swapping out the requested resources with an attacker...

CVE-2016-10682

massif is a Phantomjs fork massif downloads resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution RCE by swapping out the requested resources with an attacker controlled copy if the attacker is on the network or positioned in between th...

CVE-2016-10681

roslib-socketio - The standard ROS Javascript Library fork for add support to socket.io roslib-socketio downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution RCE by swapping out the requested resources with an attacker...

CVE-2016-10601

webdrvr is a npm wrapper for Selenium Webdriver including Chromedriver / IEDriver / IOSDriver / Ghostdriver. webdrvr downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution RCE by swapping out the requested binary with an...

CVE-2016-10666

tomita-parser is a Node wrapper for Yandex Tomita Parser tomita-parser downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution RCE by swapping out the requested resources with an attacker controlled copy if the attacker i...