CVE-2016-10586

macaca-chromedriver is a Node.js wrapper for the selenium chromedriver. macaca-chromedriver before 1.0.29 downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution RCE by swapping out the requested binary with an attacker...

PT-2018-4737

Name of the Vulnerable Software and Affected Versions selenium-download versions prior to 2.0.7 Description The issue allows for a man-in-the-middle MITM attack due to the download of binary resources over HTTP. This could potentially lead to remote code execution RCE if an attacker intercepts th...

Man-in-the-Middle (MitM) Through Insecure Binary Downloads

edp-package is vulnerable to man-in-the-middle MitM attacks. It uses an insecure protocol to download resources. This allows attackers to trigger MitM and other possible attacks such as remote code execution RCE on the server...

Man-in-the-Middle (MitM) Through Insecure Binary Downloads

ruby-gpgme is vulnerable to man-in-the-middle attacks. The vulnerability exists because the library downloads binary resources via FTP. Also, the issue may potentially cause remote code execution RCE by swapping out the requested binary with an attacker controlled binary if the attacker is on the...

Man-in-the-Middle Via Insecure Binary Downloads

These libraries are vulnerable to man-in-the-middle MitM attacks. The vulnerability exists because the libraries download binary resources via HTTP. Also, the issue may potentially cause remote code execution RCE by swapping out the requested binary with an attacker controlled binary if the...

Man-in-the-Middle Via Usage Of Insecure Source

These libraries are vulnerable to man-in-the-middle MitM attacks. This is because they download binary resources via HTTP, allowing MitM attacks. Also, it may potentially cause remote code execution RCE by swapping out the requested binary with an attacker controlled binary if the attacker is on...

Man-in-the-Middle (MitM)

haxeshim is vulnerable to man-in-the-middle attacks. The library downloads binaries via HTTP, potentially causing a remote code execution RCE vulnerability exploitable by swapping out the requested binary with an attacker controlled binary if the attacker is on the network or positioned in betwee...