CVE-2026-67340_exploit

CVE-2026-67340 — ArcadeDB JAVASCRIPT 트리거 스크립트 RCE 인증 후 인증 후 원격 코드 실행은 ArcadeDBJava 멀티모델 데이터베이스에서 호스트 클래스에 도달하는 JAVASCRIPT 트리거 를 통해 발생합니다. 트리거의 GraalVM 폴리글랏 엔진은 java.lang.을 포함하는 호스트 클래스 허용 목록으로 구성됩니다ScriptTriggerExecutor.setAllowedPackages. 따라서 트리거 스크립트는 다음을 호출할 수 있습니다:...

Exploit for CVE-2026-67340

CVE-2026-67340 — ArcadeDB JAVASCRIPT Trigger-Script RCE post-...

EUVD-2026-51986

ArcadeDB before 26.7.3 binds the real LocalDatabase object into JavaScript trigger contexts with HostAccess.ALL, allowing schema-admins to call getSecurity.createUser without permission checks. Attackers with UPDATESCHEMA permission can create triggers that execute JavaScript to create server-wid...

CVE-2023-39487

PDF-XChange Editor util Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a...

SUSE CVE-2013-6635

Use-after-free vulnerability in the editing implementation in Blink, as used in Google Chrome before 31.0.1650.63, allows remote attackers to cause a denial of service or possibly have unspecified other impact via JavaScript code that triggers removal of a node during processing of the DOM tree,...

SUSE CVE-2018-11396

ephy-session.c in libephymain.so in GNOME Web aka Epiphany through 3.28.2.1 allows remote attackers to cause a denial of service application crash via JavaScript code that triggers access to a NULL URL, as demonstrated by a crafted window.open call...

PT-2022-4479 · Pdf Xchange · Pdf-Xchange Editor

Name of the Vulnerable Software and Affected Versions: PDF-XChange Editor affected versions not specified Description: The issue is related to a buffer overflow in memory, allowing a remote attacker to execute arbitrary code using a specially crafted malicious Doc file. User interaction is...