GHSA-7MVR-C777-76HP Playwright downloads and installs browsers without verifying the authenticity of the SSL certificate

Summary Use of curl with the -k or --insecure flag in installer scripts allows attackers to deliver arbitrary executables via Man-in-the-Middle MitM attacks. This can lead to full system compromise, as the downloaded files are installed as privileged applications. Details The following scripts in...

EUVD-2018-4420

Malware in sbrugna...

EUVD-2025-24585

Malicious code in bioql PyPI...

CVE-2020-9753

Whale Browser Installer before 1.2.0.5 versions don't support signature verification for Flash installer...

PT-2024-34339 · Unknown · Whale Browser Installer

Name of the Vulnerable Software and Affected Versions: Whale browser Installer versions prior to 3.1.0.0 Description: The issue allows an attacker to execute a malicious DLL in the user environment due to improper permission settings. Recommendations: For versions prior to 3.1.0.0, update to...

CVE-2024-50583: Uncontrolled Search Path Element

Whale browser Installer before 3.1.0.0 allows an attacker to execute a malicious DLL in the user environment due to improper permission settings...

CVE-2020-9753

Whale Browser Installer before 1.2.0.5 versions don't support signature verification for Flash installer...

CVE-2020-9753: Improper Verification of Cryptographic Signature

Whale Browser Installer before 1.2.0.5 versions don't support signature verification for Flash installer...

CVE-2017-7327: Untrusted Search Path

Yandex Browser installer for Desktop before 17.4.1 has a DLL Hijacking Vulnerability because an untrusted search path is used for dnsapi.dll, winmm.dll, ntmarta.dll, cryptbase.dll or profapi.dll...