Skip to content
OpenAdvisories

Vendor

HackerOne

470 known vulnerabilities.

Products

RubyGems 4 hapi node module 4 sequelize node module 4 coffeescript node module 3 serve node module 2 html-janitor node module 2 ws node module 2 Nextcloud Server 2 i18next node module 2 marked node module 2 crud-file-server node module 2 private_address_check ruby gem 2 express-cart 2 nodemailer.js node module 2 remarkable node module 2 sanitize-html node module 2 m-server 2 http-live-simulator 1 lab6drewfusbyu node module 1 install-g-test node module 1 caolilinode node module 1 ibm_db node module 1 f2e-server node module 1 webrtc-native node module 1 lodash 1 desafio node module 1 phantomjs-cheniu node module 1 sencisho node module 1 hapi-auth-jwt2 node module 1 tinyserver2 node module 1 cobalt-cli node module 1 zwserver node module 1 selenium-portal node module 1 byucslabsix node module 1 react-native-baidu-voice-synthesizer node module 1 method-override node module 1 frames-compiler node module 1 npm-script-demo node module 1 jvminstall node module 1 sync-exec node module 1
All Critical High Medium Low Exploited only Public exploit

470 results · Feed

  • High 8.1
    CVE-2016-10624

    selenium-chromedriver Downloads Resources over HTTP

    selenium-chromedriver is a simple utility for downloading the Selenium Webdriver for Google Chrome selenium-chromedriver downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) …

    HackerOne selenium-chromedriver node module selenium-chromedriver npm
  • High 8.1
    CVE-2016-10632

    apk-parser2 downloads Resources over HTTP

    apk-parser2 is a module which extracts Android Manifest info from an APK file. apk-parser2 downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested …

    HackerOne apk-parser2 node module apk-parser2 npm
  • High 8.1
    CVE-2016-10605

    dalek-browser-ie downloads Resources over HTTP

    dalek-browser-ie is Internet Explorer bindings for DalekJS. dalek-browser-ie downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested binary with an…

    HackerOne dalek-browser-ie node module dalek-browser-ie npm
  • High —
    CVE-2016-10606

    Downloads Resources over HTTP in grunt-webdriver-qunit

    grunt-webdriver-qunit is a grunt plugin to run qunit with webdriver in grunt grunt-webdriver-qunit downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the re…

    HackerOne grunt-webdriver-qunit node module grunt-webdriver-qunit npm
  • High —
    CVE-2016-10620

    Downloads Resources over HTTP in atom-node-module-installer

    atom-node-module-installer installs node modules for atom-shell applications. atom-node-module-installer binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the reques…

    HackerOne atom-node-module-installer node module atom-node-module-installer npm
  • High —
    CVE-2016-10615

    Downloads Resources over HTTP in curses

    curses is bindings for the native curses library, a full featured console IO library. curses downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requeste…

    HackerOne curses node module curses npm
  • High 8.1
    CVE-2016-10576

    fuseki downloads Resources over HTTP

    Fuseki server wrapper and management API in fuseki before 1.0.1 downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested resources with an attacker …

    HackerOne fuseki node module fuseki npm
  • High 8.1
    CVE-2016-10618

    node-browser downloads Resources over HTTP

    node-browser is a wrapper webdriver by nodejs. node-browser downloads resources over HTTP, which leaves it vulnerable to MITM attacks.

    HackerOne node-browser node module node-browser npm
  • High 8.1
    CVE-2016-10582

    closurecompiler downloads Resources over HTTP

    closurecompiler is a Closure Compiler for node.js. closurecompiler downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested binary with an attacker …

    HackerOne closurecompiler node module closurecompiler npm
  • High —
    CVE-2016-10603

    Downloads Resources over HTTP in air-sdk

    air-sdk is a NPM wrapper for the Adobe AIR SDK. air-sdk downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested binary with an attacker controlled …

    HackerOne air-sdk node module air-sdk npm
  • High —
    CVE-2016-10634

    scalajs-standalone-bin Downloads Resources over HTTP

    scala-standalone-bin is a Binary wrapper for ScalaJS. scala-standalone-bin downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested binary with an a…

    HackerOne scalajs-standalone-bin node module scalajs-standalone-bin npm
  • High 8.1
    CVE-2016-10626

    Downloads Resources over HTTP in mystem3

    mystem3 is a NodeJS wrapper for the Yandex MyStem 3. mystem3 downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested binary with an attacker contro…

    HackerOne mystem3 node module mystem3 npm
  • High —
    CVE-2016-10631

    Downloads Resources over HTTP in jvminstall

    jvminstall is a module for downloading and unpacking jvm to local system. jvminstall downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested binary…

    HackerOne jvminstall node module jvminstall npm
  • High —
    CVE-2016-10597

    Downloads Resources over HTTP in cobalt-cli

    cobalt-cli downloads resources over HTTP, which leaves it vulnerable to MITM attacks.

    HackerOne cobalt-cli node module cobalt-cli npm
  • High —
    CVE-2016-10600

    Downloads Resources over HTTP in webrtc-native

    webrtc-native uses WebRTC from chromium project. webrtc-native downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested binary with an attacker cont…

    HackerOne webrtc-native node module webrtc-native npm
  • High —
    CVE-2016-10630

    Downloads Resources over HTTP in install-g-test

    install-g-test downloads resources over HTTP, which leaves it vulnerable to MITM attacks.

    HackerOne install-g-test node module install-g-test npm
  • High 8.1
    CVE-2016-10579

    chromedriver Downloads Resources over HTTP

    Chromedriver is an NPM wrapper for selenium ChromeDriver. Chromedriver before 2.26.1 downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested binary…

    HackerOne chromedriver node module chromedriver npm
  • High 8.1
    CVE-2016-10629

    nw-with-arm downloads Resources over HTTP

    nw-with-arm is a NW Installer including ARM-Build. nw-with-arm downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested binary with an attacker cont…

    HackerOne nw-with-arm node module nw-with-arm npm
  • High —
    CVE-2016-10617

    Downloads Resources over HTTP in box2d-native

    box2d-native downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested binary with an attacker controlled binary if the attacker is on the network or…

    HackerOne box2d-native node module box2d-native npm
  • High —
    CVE-2016-10596

    Downloads Resources over HTTP in imageoptim

    imageoptim is a Node.js wrapper for some images compression algorithms. imageoptim downloads zipped resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested tarball …

    HackerOne imageoptim node module imageoptim npm
  • High 7.5
    CVE-2016-10608

    robot-js downloads Resources over HTTP

    robot-js is a module for native system automation for node.js. robot-js downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested binary with an atta…

    HackerOne robot-js node module robot-js npm
  • High 8.1
    CVE-2016-10599

    sauce-connect downloads Resources over HTTP

    sauce-connect is a Node.js wrapper over the SauceLabs SauceConnect.jar program for establishing a secure tunnel for intranet testing. sauce-connect downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause r…

    HackerOne sauce-connect node module sauce-connect npm
  • High 8.1
    CVE-2016-10625

    headless-browser-lite downloads Resources over HTTP

    headless-browser-lite is a minimal npm installer for phantomjs and slimerjs with no external dependencies. headless-browser-lite downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code executio…

    HackerOne headless-browser-lite node module headless-browser-lite npm
  • High —
    CVE-2016-10574

    Downloads Resources over HTTP in apk-parser3

    apk-parser3 is a module to extract Android Manifest info from an APK file. apk-parser3 versions before 0.1.3 download binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping o…

    HackerOne apk-parser3 node module apk-parser3 npm
  • High —
    CVE-2016-10598

    arrayfire-js downloads Resources over HTTP

    arrayfire-js is a module for ArrayFire for the Node.js platform. arrayfire-js downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested binary with a…

    HackerOne arrayfire-js node module arrayfire-js npm
  • High 8.1
    CVE-2016-10604

    dalek-browser-chrome Downloads Resources over HTTP

    dalek-browser-chrome is Google Chrome bindings for DalekJS. dalek-browser-chrome downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested binary wit…

    HackerOne dalek-browser-chrome node module dalek-browser-chrome Browsers npm
  • High 8.1
    CVE-2016-10588

    Downloads Resources over HTTP in nw

    nw is an installer for nw.js. nw downloads zipped resources over HTTP, It may be possible to cause remote code execution (RCE) by swapping out the requested zip file with an attacker controlled binary if the attacker is on the network or positioned in between…

    HackerOne nw node module nw npm
  • Medium 5.9
    CVE-2016-10594

    ipip downloads Resources over HTTP

    ipip is a Node.js module to query geolocation information for an IP or domain, based on database by ipip.net. ipip downloads data resources over HTTP, which leaves it vulnerable to MITM attacks.

    HackerOne ipip node module ipip npm
  • High —
    CVE-2016-10621

    Downloads Resources over HTTP in fibjs

    fibjs is a runtime for javascript applictions built on google v8 JS. fibjs downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested binary with an a…

    HackerOne fibjs node module fibjs npm
  • High 8.1
    CVE-2016-10595

    jdf-sass downloads Resources over HTTP

    jdf-sass is a fork from node-sass, jdf use only. jdf-sass downloads executable resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested file with an attacker control…

    HackerOne jdf-sass node module jdf-sass npm
  • High 8.1
    CVE-2016-10628

    selenium-wrapper downloads Resources over HTTP

    selenium-wrapper is a selenium server wrapper, including installation and chrome webdriver. selenium-wrapper downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping …

    HackerOne selenium-wrapper node module selenium-wrapper npm
  • High —
    CVE-2016-10622

    nodeschnaps downloads resources over HTTP

    nodeschnaps is a NodeJS compatibility layer for Java (Rhino). nodeschnaps downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested binary with an at…

    HackerOne nodeschnaps node module nodeschnaps npm
  • High 8.1
    CVE-2016-10609

    chromedriver126 downloads Resources over HTTP

    chromedriver126 is chromedriver version 1.26 for linux OS. chromedriver126 downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested binary with an a…

    HackerOne chromedriver126 node module chromedriver126 npm
  • High —
    CVE-2016-10607

    Downloads Resources over HTTP in openframe-glslviewer

    openframe-glsviewer is a Openframe extension which adds support for shaders via glslViewer. openframe-glsviewer downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swappi…

    HackerOne openframe-glslviewer node module openframe-glslviewer npm
  • High —
    CVE-2016-10619

    Downloads Resources over HTTP in pennyworth

    pennyworth is a natural language templating engine. pennyworth downloads data resources over HTTP, which leaves it vulnerable to MITM attacks.

    HackerOne pennyworth node module pennyworth npm
  • Medium —
    CVE-2016-10592

    Downloads Resources over HTTP in jser-stat

    jser-stat is a JSer.info stat library. jser-stat downloads data resources over HTTP, which leaves it vulnerable to MITM attacks.

    HackerOne jser-stat node module jser-stat npm
  • High 8.1
    CVE-2016-10587

    Downloads Resources over HTTP in wasdk

    wasdk is a toolkit for creating WebAssembly modules. wasdk downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested binary with an attacker controll…

    HackerOne wasdk node module wasdk npm
  • High —
    CVE-2016-10580

    Downloads Resources over HTTP in nodewebkit

    nodewebkit is an installer for node-webkit. nodewebkit downloads zipped resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested zip file with an attacker controlled…

    HackerOne nodewebkit node module nodewebkit npm
  • High 8.1
    CVE-2016-10633

    dwebp-bin downloads Resources over HTTP

    dwebp-bin is a dwebp node.js wrapper that convert WebP into PNG. dwebp-bin downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested binary with an a…

    HackerOne dwebp-bin node module dwebp-bin npm
  • High —
    CVE-2016-10623

    Downloads Resources over HTTP in macaca-chromedriver-zxa

    macaca-chromedriver-zxa is a Node.js wrapper for the selenium chromedriver. macaca-chromedriver-zxa downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the r…

    HackerOne macaca-chromedriver-zxa node module macaca-chromedriver-zxa npm