GHSA-7MVR-C777-76HP Playwright downloads and installs browsers without verifying the authenticity of the SSL certificate

Summary Use of curl with the -k or --insecure flag in installer scripts allows attackers to deliver arbitrary executables via Man-in-the-Middle MitM attacks. This can lead to full system compromise, as the downloaded files are installed as privileged applications. Details The following scripts in...

EUVD-2018-4420

Malware in sbrugna...

EUVD-2025-24585

Malicious code in bioql PyPI...

CVE-2020-9753

Whale Browser Installer before 1.2.0.5 versions don't support signature verification for Flash installer...

PT-2024-34339 · Unknown · Whale Browser Installer

Name of the Vulnerable Software and Affected Versions: Whale browser Installer versions prior to 3.1.0.0 Description: The issue allows an attacker to execute a malicious DLL in the user environment due to improper permission settings. Recommendations: For versions prior to 3.1.0.0, update to...

CVE-2020-9753

Whale Browser Installer before 1.2.0.5 versions don't support signature verification for Flash installer...