Skip to content
OpenAdvisories

Product · HackerOne

marionette-socket-host node module

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.1
    CVE-2016-10648

    marionette-socket-host downloads Resources over HTTP

    marionette-socket-host is a marionette-js-runner host for sending actions over a socket. marionette-socket-host downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swappi…

    HackerOne marionette-socket-host node module marionette-socket-host npm