CVE-2021-31470

CVE-2021-31470 affects Foxit Reader 10.1.1.37576. The issue is a parsing/use-after-free in handling of U3D objects within PDFs, caused by not validating the existence of an object before performing operations. This can enable remote code execution with the current process context when a user visi...

marjanwaanders.nl Cross Site Scripting vulnerability OBB-1470974

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...