CVE-2016-10679

CVE-2016-10679 affects the selenium-standalone-painful project, where the start-selenium command downloads binary resources over unencrypted HTTP. This vulnerability allows for Man-in-the-Middle (MITM) attacks, enabling an attacker to swap legitimate resources with malicious ones. With a CVSS score of 8.1 (HIGH), successful exploitation could lead to remote code execution (RCE) with high impact on confidentiality, integrity, and availability, requiring high attack complexity. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.