Kofax Power PDF Buffer Overflow Vulnerability (CNVD-2024-33722)

Kofax Power PDF is a professional PDF editing and management software from Kofax. Kofax Power PDF suffers from a buffer overflow vulnerability that can be exploited by an attacker to execute arbitrary code...

Kofax Power PDF Out-of-Bounds Write Remote Code Execution Vulnerability

Kofax Power PDF is a professional PDF editing and management software from Kofax. Kofax Power PDF suffers from an out-of-bounds write remote code execution vulnerability that can be exploited by an attacker to execute arbitrary code...

Kofax Power PDF Buffer Overflow Vulnerability (CNVD-2024-33728)

Kofax Power PDF is a professional PDF editing and management software from Kofax. Kofax Power PDF suffers from a buffer overflow vulnerability that can be exploited by an attacker to execute arbitrary code...

Kofax Power PDF Out-of-Bounds Write Vulnerability (CNVD-2024-33726)

Kofax Power PDF is a professional PDF editing and management software from Kofax. Kofax Power PDF suffers from an out-of-bounds write vulnerability that can be exploited by an attacker to execute arbitrary code...

Kofax Power PDF Out-of-Bounds Write Remote Code Execution Vulnerability (CNVD-2024-33688)

Kofax Power PDF is a professional PDF editing and management software from Kofax. Kofax Power PDF suffers from an out-of-bounds write remote code execution vulnerability that can be exploited by an attacker to execute arbitrary code...

New Poco RAT Targets Spanish-Speaking Victims in Phishing Campaign

Spanish language victims are the target of an email phishing campaign that delivers a new remote access trojan RAT called Poco RAT since at least February 2024. The attacks primarily single out mining, manufacturing, hospitality, and utilities sectors, according to cybersecurity company Cofense...

CVE-2024-34140 Adobe Bridge PDF File Parsing Memory Corruption

Bridge versions 14.0.4, 13.0.7, 14.1 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a...

CVE-2024-34140

CVE-2024-34140 affects Adobe Bridge as shipped in Bridge versions 14.0.4, 13.0.7, 14.1 and earlier. The issue is an out-of-bounds read that could disclose memory and potentially bypass ASLR. Exploitation requires user interaction (victim opens a malicious file). The connected sources corroborate ...

CVE-2024-34140 Adobe Bridge PDF File Parsing Memory Corruption

Bridge versions 14.0.4, 13.0.7, 14.1 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a...

Exploit for Protection Mechanism Failure in Artifex Ghostscript

PoC exploit for CVE-2024-29510, a Ghostscript format string vuln...

CVE-2024-6316

The Generate PDF using Contact Form 7 plugin for WordPress is vulnerable to Cross-Site Request Forgery to Arbitrary File Upload in versions up to, and including, 4.0.6. This is due to missing nonce validation and missing file type validation in the 'wpcf7pdfdashboardhtmlpage' function. This makes...

CVE-2024-6316

The Generate PDF using Contact Form 7 plugin for WordPress is vulnerable to Cross-Site Request Forgery to Arbitrary File Upload in versions up to, and including, 4.1.2. This is due to missing nonce validation and missing file type validation in the 'wpcf7pdfdashboardhtmlpage' function. This makes...

CVE-2024-6317

The Generate PDF using Contact Form 7 plugin for WordPress is vulnerable to Cross-Site Request Forgery to Arbitrary File Upload in versions up to, and including, 4.0.6. This is due to missing nonce validation and the plugin not properly validating a file or its path prior to deleting it in the...

CVE-2024-6317

The Generate PDF using Contact Form 7 plugin for WordPress is vulnerable to Cross-Site Request Forgery to Arbitrary File Upload in versions up to, and including, 4.1.2. This is due to missing nonce validation and the plugin not properly validating a file or its path prior to deleting it in the...

CVE-2024-6317 Generate PDF using Contact Form 7 <= 4.1.2 - Cross-Site Request Forgery to Arbitrary File Deletion

The Generate PDF using Contact Form 7 plugin for WordPress is vulnerable to Cross-Site Request Forgery to Arbitrary File Upload in versions up to, and including, 4.1.2. This is due to missing nonce validation and the plugin not properly validating a file or its path prior to deleting it in the...

CVE-2024-6317

CVE-2024-6317 affects the Generate PDF using Contact Form 7 plugin for WordPress. The WordPress plugin is vulnerable to Cross-Site Forgery Request (CSRF) enabling Arbitrary File Deletion in versions up to 4.0.6 due to missing nonce validation and improper file/path validation in wp_cf7_pdf_dashbo...

CVE-2024-37555 WordPress Generate PDF using Contact Form 7 plugin <= 4.1.2 - CSRF to Arbitrary File Upload vulnerability

Unrestricted Upload of File with Dangerous Type vulnerability in ZealousWeb Generate PDF using Contact Form 7 generate-pdf-using-contact-form-7.This issue affects Generate PDF using Contact Form 7: from n/a through = 4.1.2...

CVE-2024-37555

The CVE-2024-37555 entry concerns the WordPress plugin Generate PDF using Contact Form 7, affected versions 4.0.6 and earlier. Affected component is the file upload handling, with the root cause described as an Unrestricted Upload of File with Dangerous Type, enabling arbitrary file upload. Impac...

CVE-2024-37555 WordPress Generate PDF using Contact Form 7 plugin <= 4.0.6 - Arbitrary File Upload vulnerability

Unrestricted Upload of File with Dangerous Type vulnerability in ZealousWeb Generate PDF using Contact Form 7.This issue affects Generate PDF using Contact Form 7: from n/a through 4.0.6...

WordPress Generate PDF using Contact Form 7 plugin <= 4.1.2 - CSRF to Arbitrary File Upload vulnerability

CSRF to Arbitrary File Upload vulnerability discovered by Peng Zhou Patchstack Alliance in WordPress Plugin Generate PDF using Contact Form 7 versions = 4.1.2...