PT-2026-107256

Five more CVE IDs are in. MITRE assigned CVE-2026-95248 and CVE-2026-95250 through CVE-2026-95253 to five findings we published in batch 11 — SCADA/HMI, graph analytics, document viewing and data-centre console management. All five were found, verified and disclosed by our AI-driven research...

EUVD-2018-7422

Malware in sbrugna...

EUVD-2018-7665

Malware in sbrugna...

CVE-2018-15805

Accusoft PrizmDoc HTML5 Document Viewer before 13.5 contains an XML external entity XXE vulnerability, allowing an attacker to read arbitrary files or cause a denial of service resource consumption...

Xxe

Accusoft PrizmDoc HTML5 Document Viewer before 13.5 contains an XML external entity XXE vulnerability, allowing an attacker to read arbitrary files or cause a denial of service resource consumption...

CVE-2018-15805

Accusoft PrizmDoc HTML5 Document Viewer before 13.5 contains an XML external entity XXE vulnerability, allowing an attacker to read arbitrary files or cause a denial of service resource consumption...

PT-2018-13218

Name of the Vulnerable Software and Affected Versions Accusoft PrizmDoc HTML5 Document Viewer versions prior to 13.5 Description The issue allows an attacker to read arbitrary files or cause a denial of service due to an XML external entity XXE vulnerability. Recommendations For versions prior to...

CVE-2018-15805: Improper Restriction of XML External Entity Reference

Accusoft PrizmDoc HTML5 Document Viewer before 13.5 contains an XML external entity XXE vulnerability, allowing an attacker to read arbitrary files or cause a denial of service resource consumption...

CVE-2018-15546

Accusoft PrizmDoc version 13.3 and earlier contains a Stored Cross-Site Scripting issue through a crafted PDF file...

Cross site scripting

Accusoft PrizmDoc version 13.3 and earlier contains a Stored Cross-Site Scripting issue through a crafted PDF file...

CVE-2018-15546

Accusoft PrizmDoc version 13.3 and earlier contains a Stored Cross-Site Scripting issue through a crafted PDF file...

CVE-2018-15546

Accusoft PrizmDoc version 13.3 and earlier contains a Stored Cross-Site Scripting vulnerability triggered by a specially crafted PDF file. The issue affects PrizmDoc’s handling of PDFs, enabling injection of script/HTML that could be executed in a victim’s browser. Documented across CVE-2018-1554...

PT-2018-13080

Name of the Vulnerable Software and Affected Versions Accusoft PrizmDoc versions 13.3 and earlier Description The issue is a Stored Cross-Site Scripting problem that can be triggered through a crafted PDF file. Recommendations For Accusoft PrizmDoc versions 13.3 and earlier, update to a version...

CVE-2018-15546: Improper Neutralization of Input During Web Page Generation

Accusoft PrizmDoc version 13.3 and earlier contains a Stored Cross-Site Scripting issue through a crafted PDF file...