Skip to content
OpenAdvisories

Product · HackerOne

apk-parser2 node module

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.1
    CVE-2016-10632

    apk-parser2 downloads Resources over HTTP

    apk-parser2 is a module which extracts Android Manifest info from an APK file. apk-parser2 downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested …

    HackerOne apk-parser2 node module apk-parser2 npm