694 matches found
GHSA-6H7F-QWQM-35PP Arbitrary File Read in phantom-html-to-pdf
This affects the package phantom-html-to-pdf before 0.6.1. PoC js var fs = require'fs' var conversion = require"phantom-html-to-pdf"; conversion.allowLocalFilesAccess = false conversion html: "document.writewindow.location='c:/windows/win.ini'" , functionerr, pdf var output =...
Arbitrary File Read
phantom-html-to-pdf is vulnerable to arbitrary file read. An attacker is able to gain access and read arbitrary files on the host by specifying the file path...
CVE-2020-7763
This affects the package phantom-html-to-pdf before 0.6.1...
CVE-2020-7763
This affects the package phantom-html-to-pdf before 0.6.1...
Design/Logic Flaw
This affects the package phantom-html-to-pdf before 0.6.1...
CVE-2020-7763
CVE-2020-7763 affects the npm package phantom-html-to-pdf and is an arbitrary file read vulnerability present in versions before 0.6.1. The weakness is demonstrated by a PoC (in the GitHub advisory and Snyk reference) that bypasses file access restrictions to read local host files (e.g., using wi...
CVE-2020-7763 Arbitrary File Read
This affects the package phantom-html-to-pdf before 0.6.1...
Arbitrary File Read
Overview phantom-html-to-pdf is a Convert html to pdf using phantomjs Affected versions of this package are vulnerable to Arbitrary File Read. PoC var fs = require'fs' var conversion = require"phantom-html-to-pdf"; conversion.allowLocalFilesAccess = false conversion html:...
Split-Second Phantom Images Fool Autopilots
Researchers are tricking autopilots by inserting split-second images into roadside billboards. Researchers at Israels Ben Gurion University of the Negev … previously revealed that they could use split-second light projections on roads to successfully trick Teslas driver-assistance systems into...
Foxit Reader and PhantomPDF Buffer Overflow Vulnerability (CNVD-2020-57568)
Reader is a set of PDF document reader software . Foxit Reader is a PDF document reader . V8 is one of the open source JavaScript engine . mPDF is a use of PHP to write for the conversion of HTML into PDF files library . A buffer overflow vulnerability exists in Foxit Reader and PhantomPDF versio...
Foxit Reader and PhantomPDF Code Injection Vulnerability
Foxit Reader and Foxit PhantomPDF are both Chinese Foxit Foxit company a PDF document reader. A code injection vulnerability exists in Foxit Reader and PhantomPDF versions prior to 4.1 on macOS. The vulnerability stems from external input data to construct code segments in the process, the networ...
CVE-2020-26539
An issue was discovered in Foxit Reader and PhantomPDF before 10.1. When there is a multiple interpretation error for /V in the Additional Action and Field dictionaries, a use-after-free can occur with resultant remote code execution or an information leak...
Foxit Reader and PhantomPDF Resource Management Error Vulnerability (CNVD-2020-65177)
Foxit Reader and Foxit PhantomPDF are both Chinese Foxit Foxit company a PDF document reader. A resource management error vulnerability exists in the NodeProperties::InferReceiverMapsUnsafe method in Foxit Reader 10.0.0.35798 and earlier versions and Foxit PhantomPDF 10.0.0.35798 and earlier...
Foxit Reader and PhantomPDF Resource Management Error Vulnerability (CNVD-2020-32085)
Foxit Reader and Foxit PhantomPDF are both Chinese Foxit Foxit company a PDF document reader. A resource management error vulnerability exists in Foxit Reader versions prior to 9.7.2 and PhantomPDF versions prior to 9.7.2. An attacker can exploit this vulnerability to cause a denial of service...
Foxit Reader and PhantomPDF Resource Management Error Vulnerability (CNVD-2020-32443)
Foxit Reader and Foxit PhantomPDF are both Chinese Foxit Foxit company a PDF document reader. A resource management error vulnerability exists in Foxit Reader versions prior to 9.7.1 and PhantomPDF versions prior to 9.7.1. The vulnerability stems from a networked system or product that improperly...
Foxit Reader and PhantomPDF Resource Management Error Vulnerability (CNVD-2020-32082)
Foxit Reader and Foxit PhantomPDF are both Chinese Foxit Foxit company a PDF document reader. A resource management error vulnerability exists in Foxit Reader versions prior to 9.7.2 and PhantomPDF versions prior to 9.7.2, which is caused by the execution of JavaScript code after a delete or clos...
Foxit PhantomPDF Code Issue Vulnerability (CNVD-2020-32086)
Foxit PhantomPDF is China's Foxit Foxit company a PDF document reader. A code issue vulnerability exists in Foxit PhantomPDF versions prior to 8.3.12. An attacker could exploit this vulnerability to cause a denial of service...
CVE-2019-20835
An issue was discovered in Foxit Reader and PhantomPDF before 9.5. It has homograph mishandling...