10134 matches found
php-exploit_cve-2022-31630
CVE-2022-31630 – Proof of Concept Exploit 警告： 此代码仅用于教育和隔离实验室环境中的测试。未经授权在其他系统上使用是非法且不负责任的。 📌 描述 CVE-2022-31630 是 PHP GD 扩展中 imageloadfont 函数的一个越界读取（Out-of-Bounds Read）漏洞。该漏洞允许能够控制 PHP 应用程序加载的字体文件的攻击者读取所分配缓冲区之外的数据。可能造成的影响包括： 拒绝服务（崩溃） – 应用程序停止响应。 信息泄露 – 内存中的敏感数据（例如密钥、令牌或其他数据片段）可能被读取。 受影响的 PHP 版本 PHP...
CVE-2022-31630---Proof-of-Concept-Exploit-untuk-PHP-7.4.33
CVE-2022-31630 - PHP 7.4.33 的概念验证利用 警告：此代码仅用于教育和隔离实验室环境中的测试目的。在未经授权的情况下用于其他系统是非法的，且不负责任。 📋 描述 CVE-2022-31630 是 PHP GD 扩展中的越界读取 OOB 漏洞，具体位于 imageloadfont 函数中。该漏洞允许能够控制 PHP 应用程序加载的字体文件的攻击者读取分配缓冲区之外的数据，从而可能导致： · 拒绝服务（崩溃） · 信息泄露（泄露敏感内存内容） 此漏洞影响 PHP 版本： · 7.4.x 版本低于 7.4.33 · 8.0.x 版本低于 8.0.25 · 8.1.x...
CVE-2021-25094
CVE-2021-25094 Tatsu Plugin ZIP File addcustomfont 无限制上传 用法 php p.php...
VulnCheck KEV: CVE-2022-28368
Dompdf 1.2.1 allows remote code execution via a .php file in the src:url field of an @font-face Cascading Style Sheets CSS statement within an HTML input file...
CVE-2026-63275
A flaw was found in LibreOffice. When a user opens a specially crafted document containing embedded CFF fonts, a stack-based buffer overflow can occur when reading the hints of a glyph due to improper bounds checking. This issue can cause memory corruption, resulting in an application crash...
CVE-2026-91793
When opening a specially crafted PDF, Foxit PDF Editor/Reader executes scripts that modify annotation rich-text attributes containing malformed font data. During subsequent annotation appearance reconstruction, it accesses an object after it has been released, resulting in a use-after-free...
CVE-2026-91793 Foxit PDF Editor/Reader Doc Object Use-After-Free Information Disclosure Vulnerability
When opening a specially crafted PDF, Foxit PDF Editor/Reader executes scripts that modify annotation rich-text attributes containing malformed font data. During subsequent annotation appearance reconstruction, it accesses an object after it has been released, resulting in a use-after-free...
CVE-2026-91793
Foxit PDF Editor/Reader is susceptible to a use-after-free condition when opening a specially crafted PDF . The vulnerability is triggered when the software executes scripts that modify annotation rich-text attributes containing malformed font data . During the subsequent reconstruction of annota...
EUVD-2026-85129
When opening a specially crafted PDF, Foxit PDF Editor/Reader executes scripts that modify annotation rich-text attributes containing malformed font data. During subsequent annotation appearance reconstruction, it accesses an object after it has been released, resulting in a use-after-free...
PT-2026-97212
Name of the Vulnerable Software and Affected Versions Foxit PDF Editor/Reader affected versions not specified Description Opening a specially crafted PDF causes the application to execute scripts that modify annotation rich-text attributes containing malformed font data. During the subsequent...
DEBIAN-CVE-2026-63275
LibreOffice can read CFF fonts, which may be embedded in documents. A stack buffer overflow existed when reading the hints of a glyph. The number of hints was checked against the wrong bound, so a glyph declaring more hints than the array can hold wrote past its end. In fixed versions the hint...
CVE-2026-63275
LibreOffice can read CFF fonts, which may be embedded in documents. A stack buffer overflow existed when reading the hints of a glyph. The number of hints was checked against the wrong bound, so a glyph declaring more hints than the array can hold wrote past its end. In fixed versions the hint...
CVE-2026-63276
CVE-2026-63276 is a stack buffer overflow in LibreOffice 's CFF-to-Type 1 font conversion, which occurs when the application subsets fonts during PDF export. A glyph that emits many operators writes past the end of a fixed-size buffer with no bounds check. In fixed versions, remaining capacity is...
CVE-2026-63276 Stack buffer overflow in CFF to Type 1 font conversion
LibreOffice converts CFF fonts to Type 1 when it subsets a font, which happens when a document is exported to PDF, and CFF fonts may be embedded in documents. A stack buffer overflow existed in that conversion. The converted operators were written into a fixed size buffer with no check that they...
EUVD-2026-84355
LibreOffice can read CFF fonts, which may be embedded in documents. A stack buffer overflow existed when reading the hints of a glyph. The number of hints was checked against the wrong bound, so a glyph declaring more hints than the array can hold wrote past its end. In fixed versions the hint...
CVE-2026-63275 Stack buffer overflow in CFF font hint handling
LibreOffice can read CFF fonts, which may be embedded in documents. A stack buffer overflow existed when reading the hints of a glyph. The number of hints was checked against the wrong bound, so a glyph declaring more hints than the array can hold wrote past its end. In fixed versions the hint...
CVE-2026-63275
LibreOffice is vulnerable to a stack buffer overflow when processing CFF fonts embedded in documents. The root cause is a bounds-checking error: the number of glyph hints was validated against the wrong limit, allowing a crafted glyph to declare more hints than the stack array could hold and writ...
Server-Side Request Forgery (SSRF)
Nuxt OG Image is vulnerable to Server-Side Request Forgery SSRF. The vulnerability is due to insufficient validation of attacker-controlled font URLs before performing server-side requests, which allows an unauthenticated attacker to access internal services such as loopback, private, link-local,...
EulerOS Virtualization 2.11.1 : freetype (EulerOS-SA-2026-3414)
According to the versions of the freetype package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : An out of bounds write exists in FreeType versions 2.13.0 and below newer versions of FreeType are not vulnerable when attempting ...