EUVD-2019-0298

Malware in sbrugna...

selenium-binaries downloads resources over HTTP

Versions of selenium-binaries prior to 0.15.0 insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code...

coba (>=1.0.8, <=1.0.9), frames-selenium (>=1.0.34, <=1.1.7) +6 more potentially affected by CVE-2016-10589 via selenium-binaries (>=0.1.6, <=0.13.11)

selenium-binaries NPM version =0.1.6, =1.0.8, =1.0.34, =1.0.0, =1.0.0, =0.8.0, =0.1.0, =0.13.0, =1.0.1 Source cves: CVE-2016-10589 Source advisory: OSV:GHSA-H4MC-R4F4-HCF4...

GHSA-H4MC-R4F4-HCF4 selenium-binaries downloads resources over HTTP

Versions of selenium-binaries prior to 0.15.0 insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code...

selenium-binaries code execution vulnerability

selenium-binaries is a tool for downloading Selenium-related binaries for your operating system. A security vulnerability exists in selenium-binaries that originates when the program downloads binary resources over the HTTP protocol. A remote attacker could exploit the vulnerability by replacing...

CVE-2016-10589

selenium-binaries downloads Selenium related binaries for your OS. selenium-binaries downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution RCE by swapping out the requested binary with an attacker controlled binary if t...

CVE-2016-10589: Missing Encryption of Sensitive Data

selenium-binaries downloads Selenium related binaries for your OS. selenium-binaries downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution RCE by swapping out the requested binary with an attacker controlled binary if t...

PT-2018-4767

Name of the Vulnerable Software and Affected Versions selenium-binaries versions prior to 0.15.0 Description The issue concerns the insecure download of binary resources over HTTP, making it susceptible to man-in-the-middle MITM attacks. This could potentially lead to remote code execution RCE if...

Man In The Middle (MitM)

selenium-binaries is vulnerable to man-in-the-middle MitM attacks. This is because the library downloads binary resources via HTTP, allowing MitM attacks. It may also cause remote code execution RCE by swapping out the requested binary with an attacker controlled binary if the attacker is on the...