CVE-2026-25940

PoC de CVE-2026-25940 para jsPDF Una prueba de concepto para CVE-2026-25940 que demuestra cómo apariencias de botones de radio AcroForm especialmente diseñadas pueden desencadenar JavaScript incrustado en visores de PDF vulnerables p. ej., Foxit. El repositorio incluye un generador basado en Node...

BugHub

BugHub 这是我的 CVEhub 您可以通过查看项目的 PDF 和图片来获取这些 CVE 的信息。...

CVE-2019-13288

Xpdf version 4.02 2019-sep-25 The Xpdf software and documentation are copyright 1996-2019 Glyph & Cog, LLC. Email: [email protected] WWW: http://www.xpdfreader.com/ The PDF data structures, operators, and specification are documented in ISO 32000-2:2017. What is Xpdf? Xpdf is an open source...

CVE-2026-102090

Kiteworks Core before version 9.5.1 is vulnerable to Content Injection. A URL parameter in the PDF viewer was insufficiently validated, allowing an attacker-controlled document to be loaded and displayed under the trust of the legitimate application domain. This could increase the credibility of...

CVE-2026-102090 Kiteworks Core content injection

Kiteworks Core before version 9.5.1 is vulnerable to Content Injection. A URL parameter in the PDF viewer was insufficiently validated, allowing an attacker-controlled document to be loaded and displayed under the trust of the legitimate application domain. This could increase the credibility of...

EUVD-2026-90371

Kiteworks Core before version 9.5.1 is vulnerable to Content Injection. A URL parameter in the PDF viewer was insufficiently validated, allowing an attacker-controlled document to be loaded and displayed under the trust of the legitimate application domain. This could increase the credibility of...

CVE-2026-102090 Kiteworks Core content injection

Kiteworks Core before version 9.5.1 is vulnerable to Content Injection. A URL parameter in the PDF viewer was insufficiently validated, allowing an attacker-controlled document to be loaded and displayed under the trust of the legitimate application domain. This could increase the credibility of...

CVE-2026-102090

Kiteworks Core versions prior to 9.5.1 are vulnerable to a Content Injection flaw. The root cause is insufficient validation of a URL parameter within the PDF viewer , which allows an attacker to load and display a document under the trust of the legitimate application domain. This vulnerability ...

PT-2026-103528

Name of the Vulnerable Software and Affected Versions Kiteworks Core versions prior to 9.5.1 Description Content Injection occurs due to insufficient validation of a URL parameter in the PDF viewer. This flaw allows an attacker-controlled document to be loaded and displayed under the trust of the...

CVE-2026-102090: URL Redirection to Untrusted Site

Kiteworks Core before version 9.5.1 is vulnerable to Content Injection. A URL parameter in the PDF viewer was insufficiently validated, allowing an attacker-controlled document to be loaded and displayed under the trust of the legitimate application domain. This could increase the credibility of...

The vulnerability of the MuPDf PDF viewer program, related to the occurrence of operations outside the buffer in memory, allows a hacker to trigger a service failure.

The vulnerability of the MuPDf PDF viewer program is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the MuPDf PDF viewer program, related to the lack of mechanisms for encoding or shielding output data, allows a perpetrator to gain access to confidential information.

The vulnerability of the MuPDf PDF viewer program is related to the lack of mechanisms for encoding or shielding output data. Exploiting this vulnerability can allow an attacker to gain access to confidential data...

CVE-2026-84138

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Denial-of-service in the PDF Viewer component...

PDF_XSS

Payloads All The PDFs A list of crafted malicious PDF files...

ROS-20260910-73-0006

The vulnerability of the draw-unpack.c component in the MuPDf PDF viewer program is related to integer overflow. Exploiting this vulnerability could allow an attacker to cause a service failure...

CVE-2026-8623: Improper Neutralization of Input During Web Page Generation

The Dear Flipbook – PDF Flipbook, 3D Flipbook, PDF embed, PDF viewer plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'postcontent class attribute of .dvcss element' parameter in all versions up to, and including, 2.4.30 due to insufficient input sanitization and output...

CVE-2026-8625: Improper Neutralization of Input During Web Page Generation

The Dear Flipbook – PDF Flipbook, 3D Flipbook, PDF embed, PDF viewer plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'postcontent Custom HTML block inner HTML' parameter in all versions up to, and including, 2.4.30 due to insufficient input sanitization and output...

SUSE CVE-2026-84138

Denial-of-service in the PDF Viewer component. This vulnerability was fixed in Firefox 155 and Thunderbird 155...

Linux Distros Unpatched Vulnerability : CVE-2026-84138

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Denial-of-service in the PDF Viewer component. This vulnerability was fixed in Firefox 155 and Thunderbird 155. CVE-2026-84138 Note that Nessus relies on the...

CVE-2026-84138

Denial-of-service in the PDF Viewer component. This vulnerability was fixed in Firefox 155 and Thunderbird 155...