Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 13 Oct 2026 02:29:00 +0000 EUVD-2026-175713 https://cve.radiocsirt.org/vuln/euvd-2026-175713 EUVD-2026-175713 https://cve.radiocsirt.org/vuln/euvd-2026-175713 fkie_cve-2016-10588 https://cve.radiocsirt.org/vuln/fkie_cve-2016-10588 <p>nw is an installer for nw.js. nw downloads zipped resources over HTTP, It may be possible to cause remote code execution (RCE) by swapping out the requested zip file with an attacker controlled binary if the attacker is on the network or positioned in between the user and the remote server.</p> <p>nw is an installer for nw.js. nw downloads zipped resources over HTTP, It may be possible to cause remote code execution (RCE) by swapping out the requested zip file with an attacker controlled binary if the attacker is on the network or positioned in between the user and the remote server.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2016-10588 GHSA-hv96-xxx2-5v7w — Downloads Resources over HTTP in nw https://cve.radiocsirt.org/vuln/ghsa-hv96-xxx2-5v7w <p><strong>Affected:</strong> npm: nw</p> <p>Affected versions of `nw` insecurely download an executable over an unencrypted HTTP connection.</p> <p>In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code execution on the system running `nw`.</p> <p>## Recommendation</p> <p>Update to version 0.23.6-1 or later.</p> <p><strong>Affected:</strong> npm: nw</p> <p>Affected versions of `nw` insecurely download an executable over an unencrypted HTTP connection.</p> <p>In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code execution on the system running `nw`.</p> <p>## Recommendation</p> <p>Update to version 0.23.6-1 or later.</p> https://cve.radiocsirt.org/vuln/ghsa-hv96-xxx2-5v7w gsd-2016-10588 https://cve.radiocsirt.org/vuln/gsd-2016-10588 gsd-2016-10588 https://cve.radiocsirt.org/vuln/gsd-2016-10588