Hackerone vulnerabilities
470 CVEs and advisories name Hackerone as an affected vendor, newest first. Follow it as a feed.
- CVE-2017-16061tkinter was a malicious module published with the intent to hijack environment variables.
- CVE-2017-16047mysqljs was a malicious module published with the intent to hijack environment variables.
- CVE-2017-16010i18next is a language translation framework.
- CVE-2017-16003windows-build-tools is a module for installing C++ Build Tools for Windows using npm.
- CVE-2016-10698mystem-fix is a node.js wrapper for MyStem morphology text analyzer by Yandex.ru mystem-fix downloads binary resources over HTTP, which leav
- CVE-2016-10682massif is a Phantomjs fork massif downloads resources over HTTP, which leaves it vulnerable to MITM attacks.
- CVE-2016-10681roslib-socketio - The standard ROS Javascript Library fork for add support to socket.io roslib-socketio downloads binary resources over HTTP
- CVE-2016-10680adamvr-geoip-lite is a light weight native JavaScript implementation of GeoIP API from MaxMind adamvr-geoip-lite downloads geoip resources o
- CVE-2016-10679selenium-standalone-painful installs a start-selenium command line to start a standalone selenium server with chrome-driver.
- CVE-2016-10674limbus-buildgen is a "build anywhere" build system.
- CVE-2016-10666tomita-parser is a Node wrapper for Yandex Tomita Parser tomita-parser downloads binary resources over HTTP, which leaves it vulnerable to M
- CVE-2016-10659poco - The POCO libraries, downloads source file resources used for compilation over HTTP, which leaves it vulnerable to MITM attacks.
- CVE-2016-10658native-opencv is the OpenCV library installed via npm native-opencv downloads binary resources over HTTP, which leaves it vulnerable to MITM
- CVE-2016-10650ntfserver is a Network Testing Framework Server.
- CVE-2016-10635broccoli-closure is a Closure compiler plugin for Broccoli.
- CVE-2016-10627scala-bin is a binary wrapper for Scala.
- CVE-2016-10611strider-sauce is Sauce Labs / Selenium support for Strider.
- CVE-2016-10601webdrvr is a npm wrapper for Selenium Webdriver including Chromedriver / IEDriver / IOSDriver / Ghostdriver.
- CVE-2016-10593ibapi is an Interactive Brokers API addon for NodeJS.
- CVE-2016-10591Prince is a Node API for executing XML/HTML to PDF renderer PrinceXML via prince(1) CLI.
- CVE-2016-10590cue-sdk-node is a Corsair Cue SDK wrapper for node.js.
- CVE-2016-10589selenium-binaries downloads Selenium related binaries for your OS.
- CVE-2016-10586macaca-chromedriver is a Node.js wrapper for the selenium chromedriver.
- CVE-2016-10584dalek-browser-chrome-canary provides Google Chrome bindings for DalekJS.
- CVE-2016-10578unicode loads unicode data downloaded from unicode.org into nodejs.
- CVE-2016-10577ibm_db is an asynchronous/synchronous interface for node.js to IBM DB2 and IBM Informix.
- CVE-2016-10573baryton-saxophone is a module to install and launch Selenium Server for Mac, Linux and Windows.
- CVE-2016-10570pngcrush-installer is an installer for Pngcrush.
- CVE-2016-10568geoip-lite-country is a stripped down version of geoip-lite, supporting only country lookup.
- CVE-2016-10567product-monitor is a HTML/JavaScript template for monitoring a product by encouraging product developers to gather all the information about