CVE-2024-9743 Tungsten Automation Power PDF PDF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

Tungsten Automation Power PDF PDF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Tungsten Automation Power PDF. User interaction is required to exploit this vulnerabilit...

CVE-2024-9743

Power PDF by Tungsten Automation is affected by a heap-based buffer overflow in PDF file parsing due to improper validation of user-supplied data length before copying into a fixed-length heap buffer. This can enable remote code execution when a user opens a malicious PDF or visits a malicious pa...

CVE-2024-48294

A NULL pointer dereference in the component libPdfCore.dll of Wondershare PDF Reader v1.0.9.2544 allows attackers to cause a Denial of Service DoS via a crafted PDF file...

CVE-2024-48294

CVE-2024-48294 concerns Wondershare PDF Reader v1.0.9.2544. Affected component: libPdfCore.dll . The vulnerability is a NULL pointer dereference that allows a crafted PDF to cause a Denial of Service (DoS) . Documented in Red Hat/NVD/CNNVD entries; exploitation details are not provided in these d...

CVE-2024-48294

A NULL pointer dereference in the component libPdfCore.dll of Wondershare PDF Reader v1.0.9.2544 allows attackers to cause a Denial of Service DoS via a crafted PDF file...

CVE-2024-48294

A NULL pointer dereference in the component libPdfCore.dll of Wondershare PDF Reader v1.0.9.2544 allows attackers to cause a Denial of Service DoS via a crafted PDF file...

The vulnerability affects the AcroForm Handler component of the PDF Foxit Reader (formerly Foxit Reader) and the Foxit PDF Editor (formerly Foxit PhantomPDF) software for viewing electronic documents. This vulnerability allows a malicious actor to execute arbitrary code.

The vulnerability of the AcroForm Handler component in the PDF Foxit Reader software formerly Foxit Reader and the Foxit PDF Editor software for editing PDF files is related to the use of memory after it is released. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

CVE-2024-11123

A vulnerability, which was classified as problematic, was found in 上海灵当信息科技有限公司 Lingdang CRM up to 8.6.4.3. This affects an unknown part of the file /crm/data/pdf.php. The manipulation of the argument url with the input ../config.inc.php leads to path traversal. It is possible to initiate the...

The vulnerability of the PDF editing program Foxit PDF Editor (formerly Foxit PhantomPDF) relates to the execution of operations beyond the buffer boundaries in memory, allowing an attacker to execute arbitrary code.

The vulnerability of the Foxit PDF Editor formerly Foxit PhantomPDF PDF editing program is related to the execution of operations beyond the buffer in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code using a specially created PDF file...

The vulnerability of the PDF editing program Foxit PDF Editor (formerly Foxit PhantomPDF) relates to the execution of operations beyond the buffer boundaries in memory, allowing an attacker to execute arbitrary code.

The vulnerability of the Foxit PDF Editor formerly Foxit PhantomPDF PDF editing program is related to the execution of operations beyond the buffer in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code using a specially created PDF file...

XSS by uploading pdf file

This report is not public...

RCE & Full Read SSRF & Arbitrary File Read in /web_crawl endpoint

Description The webcrawl function in documentapp.py contains a RCE vulnerability. This function receives the URL parameter, accesses and obtains the HTML content of the URL through Chromium headless, and converts the HTML content into a PDF file. Users can obtain the converted PDF file through th...

Debian dla-3917 : python-reportlab-doc - security update

The remote Debian 11 host has packages installed that are affected by a vulnerability as referenced in the dla-3917 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-3917-1 [email protected] https://www.debian.org/lts/security/...

Tungsten Automation Power PDF PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Tungsten Automation Power PDF. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

Tungsten Automation Power PDF PDF File Parsing Memory Corruption Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Tungsten Automation Power PDF. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

Tungsten Automation Power PDF PDF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Tungsten Automation Power PDF. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...

Tungsten Automation Power PDF PDF File Parsing Memory Corruption Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Tungsten Automation Power PDF. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

Tungsten Automation Power PDF PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Tungsten Automation Power PDF. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

CentOS 6 : chromium-browser (RHSA-2020:1970)

The remote CentOS Linux 6 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2020:1970 advisory. - Out of bounds read and write in PDFium in Google Chrome prior to 81.0.4044.122 allowed a remote attacker to potentially exploit heap corruption via a...

CVE-2024-45962

October 3.6.30 allows an authenticated admin account to upload a PDF file containing malicious JavaScript into the target system. If the file is accessed through the website, it could lead to a Cross-Site Scripting XSS attack or execute arbitrary code via a crafted JavaScript to the target...