817 matches found
selenium-wrapper downloads Resources over HTTP
Affected versions of selenium-wrapper insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code execution on t...
GHSA-PR34-8JFR-XHV8 selenium-wrapper downloads Resources over HTTP
Affected versions of selenium-wrapper insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code execution on t...
Downloads Resources over HTTP in selenium-portal
Affected versions of selenium-portal insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code execution on th...
GHSA-2MVM-66Q7-M256 Downloads Resources over HTTP in selenium-download
Affected versions of selenium-download insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code execution on...
nightwatch-commands (>=1.8.0, <=2.0.0) potentially affected by CVE-2016-10559 via selenium-download (2.0.6)
selenium-download NPM version 2.0.6 is affected by a known vulnerability. The following packages have a transitive dependency on selenium-download and may be impacted: - nightwatch-commands =1.8.0, =2.0.0 Source cves: CVE-2016-10559 Source advisory: OSV:GHSA-2MVM-66Q7-M256...
nightwatch-commands (>=1.8.0, <=2.0.0) potentially affected by CVE-2016-10559 via selenium-download (2.0.6)
selenium-download NPM version 2.0.6 is affected by a known vulnerability. The following packages have a transitive dependency on selenium-download and may be impacted: - nightwatch-commands =1.8.0, =2.0.0 Source cves: CVE-2016-10559 Source advisory: GHSA-2MVM-66Q7-M256...
Downloads Resources over HTTP in selenium-download
Affected versions of selenium-download insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code execution on...
start-selenium (>=0.0.1, <=0.0.5) potentially affected by CVE-2016-10565 via operadriver (0.2.2)
operadriver NPM version 0.2.2 is affected by a known vulnerability. The following packages have a transitive dependency on operadriver and may be impacted: - start-selenium =0.0.1, =0.0.5 Source cves: CVE-2016-10565 Source advisory: GHSA-2WRQ-WMQF-8VCC...
start-selenium (>=0.0.1, <=0.0.5) potentially affected by CVE-2016-10565 via operadriver (0.2.2)
operadriver NPM version 0.2.2 is affected by a known vulnerability. The following packages have a transitive dependency on operadriver and may be impacted: - start-selenium =0.0.1, =0.0.5 Source cves: CVE-2016-10565 Source advisory: OSV:GHSA-2WRQ-WMQF-8VCC...
Downloads Resources over HTTP in operadriver
operadriver is a Opera Driver for Selenium. operadriver versions below 0.2.3 download binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution RCE by swapping out the requested binary with an attacker controlled binary if the attack...
GHSA-H4MC-R4F4-HCF4 selenium-binaries downloads resources over HTTP
Versions of selenium-binaries prior to 0.15.0 insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code...
coba (>=1.0.8, <=1.0.9), frames-selenium (>=1.0.34, <=1.1.7) +6 more potentially affected by CVE-2016-10589 via selenium-binaries (>=0.1.6, <=0.13.11)
selenium-binaries NPM version =0.1.6, =1.0.8, =1.0.34, =1.0.0, =1.0.0, =0.8.0, =0.1.0, =0.13.0, =1.0.1 Source cves: CVE-2016-10589 Source advisory: OSV:GHSA-H4MC-R4F4-HCF4...
coba (>=1.0.8, <=1.0.9), frames-selenium (>=1.0.34, <=1.1.7) +6 more potentially affected by CVE-2016-10589 via selenium-binaries (>=0.1.6, <=0.13.11)
selenium-binaries NPM version =0.1.6, =1.0.8, =1.0.34, =1.0.0, =1.0.0, =0.8.0, =0.1.0, =0.13.0, =1.0.1 Source cves: CVE-2016-10589 Source advisory: GHSA-H4MC-R4F4-HCF4...
selenium-binaries downloads resources over HTTP
Versions of selenium-binaries prior to 0.15.0 insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code...
org.apache.jspwiki.it:jspwiki-selenium-tests (>=2.10.0, <=2.10.5), org.apache.jspwiki:jspwiki-markdown (>=2.10.3, <=2.10.5) potentially affected by CVE-2018-20242 via org.apache.jspwiki:jspwiki-war (>=2.10.0, <=2.10.5)
org.apache.jspwiki:jspwiki-war MAVEN version =2.10.0, =2.10.0, =2.10.3, =2.10.5 Source cves: CVE-2018-20242 Source advisory: OSV:GHSA-5Q75-CXCQ-WR26...
org.apache.jspwiki.it:jspwiki-selenium-tests (>=2.10.0, <=2.10.5), org.apache.jspwiki:jspwiki-markdown (>=2.10.3, <=2.10.5) potentially affected by CVE-2018-20242 via org.apache.jspwiki:jspwiki-war (>=2.10.0, <=2.10.5)
org.apache.jspwiki:jspwiki-war MAVEN version =2.10.0, =2.10.0, =2.10.3, =2.10.5 Source cves: CVE-2018-20242 Source advisory: GHSA-5Q75-CXCQ-WR26...
org.apache.jspwiki.it:jspwiki-selenium-tests (>=2.10.0, <=2.10.5), org.apache.jspwiki:jspwiki-markdown (>=2.10.3, <=2.10.5) potentially affected by CVE-2018-20242 via org.apache.jspwiki:jspwiki-war (>=2.10.0, <=2.10.5)
org.apache.jspwiki:jspwiki-war MAVEN version =2.10.0, =2.10.0, =2.10.3, =2.10.5 Source cves: CVE-2018-20242 Source advisory: MEND:CVE-2018-20242...
Splunk Enterprise 7.2.3 - Authenticated Custom App Remote Code Execution Exploit
Exploit for windows platform in category web applications !/usr/bin/python Exploit Title: Splunk Enterprise 7.2.3 Custom App RCE persistent backdoor Exploit Author: Lee Mazzoleni Vendor Homepage: https://www.splunk.com/ Software Link: https://www.splunk.com/enus/download/splunk-enterprise.html...
Splunk Enterprise 7.2.3 Command Execution
!/usr/bin/python Exploit Title: Splunk Enterprise 7.2.3 Custom App RCE persistent backdoor Date: January 23, 2019 Exploit Author: Lee Mazzoleni Vendor Homepage: https://www.splunk.com/ Software Link: https://www.splunk.com/enus/download/splunk-enterprise.html Version: 7.2.3 Tested on: kali...
Splunk Enterprise 7.2.3 - (Authenticated) Custom App Remote Code Execution
!/usr/bin/python Exploit Title: Splunk Enterprise 7.2.3 Custom App RCE persistent backdoor Date: January 23, 2019 Exploit Author: Lee Mazzoleni Vendor Homepage: https://www.splunk.com/ Software Link: https://www.splunk.com/enus/download/splunk-enterprise.html Version: 7.2.3 Tested on: kali...