CVE-2018-19445

A command injection can occur for specially crafted PDF files in Foxit Reader SDK ActiveX Professional 5.4.0.1031 when the JavaScript API app.launchURL is used. An attacker can leverage this to gain remote code execution...

EUVD-2025-19445

Malicious code in bioql PyPI...

CVE-2018-19445

A command injection can occur for specially crafted PDF files in Foxit Reader SDK ActiveX Professional 5.4.0.1031 when the JavaScript API app.launchURL is used. An attacker can leverage this to gain remote code execution...

CVE-2018-19445

A command injection can occur for specially crafted PDF files in Foxit Reader SDK ActiveX Professional 5.4.0.1031 when the JavaScript API app.launchURL is used. An attacker can leverage this to gain remote code execution...

CVE-2018-19445

CVE-2018-19445 affects Foxit Reader SDK ActiveX Pro (5.4.0.1031) where the JavaScript API app.launchURL can be abused to inject commands, enabling remote code execution. The root cause is insufficient validation of user-supplied strings before executing them via a system call in the ActiveX compo...