Foxit PDF Reader Buffer Overflow

The vulnerability of the PDF document viewing program Foxit PDF Reader formerly Foxit Reader and the PDF file editing program Foxit PDF Editor formerly Foxit PhantomPDF is related to reading data beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary...

Foxit PDF Reader Buffer Overflow Information Disclosure

The vulnerability of the PDF document viewing program Foxit PDF Reader formerly Foxit Reader and the PDF file editing program Foxit PDF Editor formerly Foxit PhantomPDF is related to reading data beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized...

Linux Distros Unpatched Vulnerability : CVE-2018-1000816

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Grafana version confirmed for 5.2.4 and 5.3.0 contains a Cross Site Scripting XSS vulnerability in Influxdb and Graphite query editor that can result in Running...

PT-2025-35839

Name of the Vulnerable Software and Affected Versions: ckeditor5 versions 44.2.0 through 45.2.1 ckeditor5 versions 46.0.0 through 46.0.2 ckeditor5-clipboard versions 44.2.0 through 45.2.1 ckeditor5-clipboard versions 46.0.0 through 46.0.2 Description: CKEditor 5 is a modern JavaScript rich-text...

Foxit PDF Reader Buffer Overflow

The vulnerability of the PDF document viewing program Foxit PDF Reader formerly Foxit Reader and the PDF file editing program Foxit PDF Editor formerly Foxit PhantomPDF is related to reading data beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary...

Foxit PDF Reader Buffer Overflow Information Disclosure

The vulnerability of the PDF document viewing program Foxit PDF Reader formerly Foxit Reader and the PDF file editing program Foxit PDF Editor formerly Foxit PhantomPDF lies in the reading of data beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to gain unauthorize...

Foxit PDF Reader Buffer Overflow Information Disclosure

The vulnerability of the PDF document viewing program Foxit PDF Reader formerly Foxit Reader and the PDF file editing program Foxit PDF Editor formerly Foxit PhantomPDF is related to reading data beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized...

Foxit PDF Reader Buffer Overflow

The vulnerability of the PDF document viewing program Foxit PDF Reader formerly Foxit Reader and the PDF file editing program Foxit PDF Editor formerly Foxit PhantomPDF is related to reading data beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary...

CVE-2025-9378: Improper Neutralization of Input During Web Page Generation

The Vayu Blocks – Website Builder for the Block Editor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via multiple attributes in the Lottie block in all versions up to, and including, 1.3.9 due to insufficient input sanitization and output escaping. This makes it possible for...

Flashrom to Hexedit to Root: DEF CON 33 IoT Village Exercise

Each year at DEF CON’s IoT Village, Rapid7 researchers showcase their skills in penetration testing, hardware hacking, and more. At DEF CON 33, Principal Security Researcher, IoT, Deral Heiland took attendees step by step through a brand-new, hands-on exercise that pushed past last year’s lessons...

Linux Distros Unpatched Vulnerability : CVE-2024-43436

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A SQL injection risk flaw was found in the XMLDB editor tool available to site administrators. CVE-2024-43436 Note that Nessus relies on the presence of the...

CVE-2025-9684

A vulnerability was determined in Portabilis i-Educar up to 2.10. This affects an unknown part of the file /module/FormulaMedia/edit of the component Formula de Cálculo de Média Page. This manipulation of the argument ID causes sql injection. Remote exploitation of the attack is possible. The...

CVE-2025-54544

QuickCMS is vulnerable to Stored XSS via aDirFilesDescriptions parameter in files editor functionality. Malicious attacker with admin privileges can inject arbitrary HTML and JS into website, which will be rendered/executed when visiting edited page. By default admin user is not able to add...

CVE-2025-54543

QuickCMS is vulnerable to Stored XSS via sDescriptionMeta parameter in page editor SEO functionality. Malicious attacker with admin privileges can inject arbitrary HTML and JS into website, which will be rendered/executed when visiting edited page. By default admin user is not able to add...

CVE-2025-48310

Cross-Site Request Forgery CSRF vulnerability in wptableeditor Table Editor wp-table-editor allows Cross Site Request Forgery.This issue affects Table Editor: from n/a through = 1.6.4...

Linux Distros Unpatched Vulnerability : CVE-2019-16780

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - WordPress users with lower privileges like contributors can inject JavaScript code in the block editor using a specific payload, which is executed within the...

Linux Distros Unpatched Vulnerability : CVE-2021-39203

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. In affected versions authenticated use...

Linux Distros Unpatched Vulnerability : CVE-2019-14497

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ModuleEditor::convertInstrument in tracker/ModuleEditor.cpp in MilkyTracker 1.02.00 has a heap-based buffer overflow. CVE-2019-14497 Note that Nessus relies on...

Malicious code in editor-script-box (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis d7f28dd5b9539646b395ebc2f66ec29862ccab627cf31e631994ef0ac494ba70 The OpenSSF Package Analysis project identified 'editor-script-box' @ 10.0.1 npm as malicious. It is considered malicious because: - The package...

MAL-2025-41812 Malicious code in editor-script-box (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis d7f28dd5b9539646b395ebc2f66ec29862ccab627cf31e631994ef0ac494ba70 The OpenSSF Package Analysis project identified 'editor-script-box' @ 10.0.1 npm as malicious. It is considered malicious because: - The package...