CVE-2025-66034-htb-ctf

CVE-2025-66034-htb-ctf VariaType वेरिएबल फ़ॉन्ट जनरेटर एक्सप्लॉइट इस रिपॉजिटरी में Hack The Box पर स्थित VariaType मशीन के लिए एक विशेष एक्सप्लॉइट शामिल है। यह एक्सप्लॉइट fontTools लाइब्रेरी या वेब एप्लिकेशन द्वारा .designspace XML फ़ाइलों और मेटाडेटा इंटरपोलेशन को संभालने में मौजूद कमज़ोरी का ला...

varlib-cve-2025-66034

استغلال CVE-2025-66034 في fontTools varLib هذا المستودع لا يقدّم ثغرة أمنية جديدة. هذا إثبات مفهوم Proof-of-concept لاستغلال CVE-2025-66034 الذي يؤثر على خط إنتاج الخطوط المتغيرة varLib في fontTools. تسمح الثغرة للمهاجمين بالتحكم في اسم ملف الإخراج داخل ملف .designspace مُعدّ بعناية. عند معالجته...

CVE-2025-66034

CVE-2025-66034 — fontTools varLib मनमाना फ़ाइल लेखन भेद्यता fontTools एक Python लाइब्रेरी है जो फ़ॉन्ट फ़ाइलों में हेरफेर करने के लिए है। इसका varLib मॉड्यूल .designspace फ़ाइलों को प्रोसेस करता है — यह एक XML प्रारूप है जो बताता है कि एक वेरिएबल फ़ॉन्ट उत्पन्न करने के लिए कई फ़ॉन्ट मास्टर्स को...

CVE-2025-66034

CVE-2025-66034 — fontTools varLib मनमाना फ़ाइल लेखन → RCE fontTools.varLib में मनमाना फ़ाइल लेखन + XML इंजेक्शन भेद्यता के लिए PoC शोषण HackTheBox — VarIaType पर परीक्षित भेद्यता fontTools.varLib .designspace XML फ़ाइलों को प्रोसेस करके वेरिएबल फॉन्ट बनाता है। दो कमजोरियां मिलकर प्री-ऑथ RCE प्राप...

fontTools is Vulnerable to Arbitrary File Write and XML injection in fontTools.varLib

SummaryThe fonttools varLib or python3 -m fontTools.varLib script has an arbitrary file write vulnerability that leads to remote code execution when a malicious .designspace file is processed. The vulnerability affects the main code path of fontTools.varLib, used by the fonttools varLib CLI and a...

PYSEC-2026-1389 fontTools is Vulnerable to Arbitrary File Write and XML injection in fontTools.varLib

Summary The fonttools varLib or python3 -m fontTools.varLib script has an arbitrary file write vulnerability that leads to remote code execution when a malicious .designspace file is processed. The vulnerability affects the main code path of fontTools.varLib, used by the fonttools varLib CLI and...

Exploit for XML Injection (aka Blind XPath Injection) in Fonttools

CVE-2025-66034-htb-ctf VariaType Variable Font Generator Ex...

Advisory ROSA-SA-2026-3220

Software: fonttools 4.49.0 WASP: ROSA-CHROME unaffected versions = fonttools-4.49.0-2 affected versions fonttools-4.49.0-2 CVE-ID: CVE-2025-66034 BDU-ID: None CVE-Crit: MEDIUM CVE-DESC.: Arbitrary file write vulnerability in fontTools varLib allows a remote attacker to execute arbitrary code when...

Exploit for XML Injection (aka Blind XPath Injection) in Fonttools

fontvarlib.py — CVE-2025-66034 fontTools varLib — Arbi...

Exploit for XML Injection (aka Blind XPath Injection) in Fonttools

fontTools varLib CVE-2025-66034 Exploit...

Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to an XML Injection in fonttools [CVE-2025-66034]

Summary IBM Watson Speech Services Cartridge is vulnerable to an XML Injection in fonttools, an arbitrary file write vulnerability that leads to remote code execution when a malicious .designspace file is processed CVE-2025-66034. fontTools is used in our service runtimes. This vulnerabilitiy has...

TencentOS Server 4: fonttools (TSSA-2025:0963)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2025:0963 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...

Arbitrary File Write

fontTools is vulnerable to an arbitrary file write. The vulnerability is due to improper handling of malicious .designspace files in the fontTools.varLib module, which allows an attacker to achieve remote code execution by writing arbitrary files when processed...

USN-7917-1: fontTools vulnerabilities

It was discovered that the subsetting module of fontTools was vulnerable to an XML External Entity XEE attack. An unauthenticated remote attacker could possibly use this issue to include arbitrary files from the file system or make web requests from the host system. This issue only affected Ubunt...

CVE-2025-66034

This vulnerability in fontTools varLib allows a crafted .designspace file to trigger arbitrary file writes and XML-based content injection during variable-font generation. Because filenames are not sanitized, an attacker can use path traversal to overwrite files anywhere on the filesystem, and...

SUSE CVE-2025-66034

fontTools is a library for manipulating fonts, written in Python. In versions from 4.33.0 to before 4.60.2, the fonttools varLib or python3 -m fontTools.varLib script has an arbitrary file write vulnerability that leads to remote code execution when a malicious .designspace file is processed. The...

GHSA-768J-98CG-P3FV fontTools is Vulnerable to Arbitrary File Write and XML injection in fontTools.varLib

Summary The fonttools varLib or python3 -m fontTools.varLib script has an arbitrary file write vulnerability that leads to remote code execution when a malicious .designspace file is processed. The vulnerability affects the main code path of fontTools.varLib, used by the fonttools varLib CLI and...

EUVD-2025-199882

fontTools is Vulnerable to Arbitrary File Write and XML injection in fontTools.varLib...

fontTools is Vulnerable to Arbitrary File Write and XML injection in fontTools.varLib

Summary The fonttools varLib or python3 -m fontTools.varLib script has an arbitrary file write vulnerability that leads to remote code execution when a malicious .designspace file is processed. The vulnerability affects the main code path of fontTools.varLib, used by the fonttools varLib CLI and...

Linux Distros Unpatched Vulnerability : CVE-2025-66034

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - fontTools is a library for manipulating fonts, written in Python. In versions from 4.33.0 to before 4.60.2, the fonttools varLib or python3 -m fontTools.varLib...