EUVD-2018-0262

Malware in sbrugna...

GHSA-CR6C-85FH-CQPG Downloads Resources over HTTP in haxeshim

Affected versions of haxeshim insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code execution on the syste...

Downloads Resources over HTTP in haxeshim

Affected versions of haxeshim insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code execution on the syste...

gulp-haxe (>=0.3.0, <=0.4.5) potentially affected by CVE-2016-10692 via haxeshim (>=0.5.6, <=0.6.3)

haxeshim NPM version =0.5.6, =0.3.0, =0.4.5 Source cves: CVE-2016-10692 Source advisory: OSV:GHSA-CR6C-85FH-CQPG...

gulp-haxe (>=0.3.0, <=0.4.5) potentially affected by CVE-2016-10692 via haxeshim (>=0.5.6, <=0.6.3)

haxeshim NPM version =0.5.6, =0.3.0, =0.4.5 Source cves: CVE-2016-10692 Source advisory: GHSA-CR6C-85FH-CQPG...

haxeshim code execution vulnerability

haxeshim is a package for managing multiple versions of Haxe simultaneously. A security vulnerability exists in haxeshim that originates when the program downloads a binary file over an unencrypted HTTP connection. A remote attacker could exploit the vulnerability by intercepting the response and...

CVE-2016-10692

haxeshim haxe shim to deal with coexisting versions. haxeshim downloads resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution RCE by swapping out the requested resources with an attacker controlled copy if the attacker is on the network...

CVE-2016-10692

haxeshim haxe shim to deal with coexisting versions. haxeshim downloads resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution RCE by swapping out the requested resources with an attacker controlled copy if the attacker is on the network...

Remote code execution

haxeshim haxe shim to deal with coexisting versions. haxeshim downloads resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution RCE by swapping out the requested resources with an attacker controlled copy if the attacker is on the network...

CVE-2016-10692

haxeshim haxe shim to deal with coexisting versions. haxeshim downloads resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution RCE by swapping out the requested resources with an attacker controlled copy if the attacker is on the network...

CVE-2016-10692

CVE-2016-10692 concerns the haxeshim Haxe shim. Multiple connected sources confirm the affected component is haxeshim, which downloads resources over HTTP. The underlying vulnerability is exposure to man-in-the-middle (MITM) attacks, enabling an attacker on the network to swap requested resources...

CVE-2016-10692

haxeshim haxe shim to deal with coexisting versions. haxeshim downloads resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution RCE by swapping out the requested resources with an attacker controlled copy if the attacker is on the network...

CVE-2016-10692: Undefined Security Weakness

haxeshim haxe shim to deal with coexisting versions. haxeshim downloads resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution RCE by swapping out the requested resources with an attacker controlled copy if the attacker is on the network...

PT-2018-4870

Name of the Vulnerable Software and Affected Versions haxeshim affected versions not specified Description The issue allows for a man-in-the-middle MITM attack due to haxeshim downloading resources over HTTP. This could potentially lead to remote code execution RCE if an attacker intercepts and...

Man-in-the-Middle (MitM)

haxeshim is vulnerable to man-in-the-middle attacks. The library downloads binaries via HTTP, potentially causing a remote code execution RCE vulnerability exploitable by swapping out the requested binary with an attacker controlled binary if the attacker is on the network or positioned in betwee...

Downloads Resources over HTTP

Overview Affected versions of haxeshim insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code execution on...