The vulnerability of the JSON Viewer browser extension, which allows attackers to perform cross-site scripting attacks.

The vulnerability of the JSON Viewer browser extension arises from errors in file processing. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...

IrfanView User Mode Write Access Conflict Vulnerability (CNVD-2019-36931)

IrfanView is an image viewer by Irfan Skiljan software developer in Bosnia and Herzegovina that supports image browsing, image editing, image format conversion and more. IrfanView 4.53 suffers from a user-mode write access conflict vulnerability. An attacker can exploit this vulnerability to read...

CVE-2019-12812

MyBuilder viewer before 6.2.2019.814 allow an attacker to execute arbitrary command via specifically crafted configuration file. This can be leveraged for code execution...

CVE-2019-12812

MyBuilder viewer before 6.2.2019.814 allow an attacker to execute arbitrary command via specifically crafted configuration file. This can be leveraged for code execution...

CVE-2019-12812

MyBuilder viewer before 6.2.2019.814 allow an attacker to execute arbitrary command via specifically crafted configuration file. This can be leveraged for code execution...

CVE-2019-12812

MyBuilder Viewer prior to version 6.2.2019.814 is vulnerable to arbitrary command execution via a specially crafted configuration file, enabling code execution. This is documented across multiple connected sources (e.g., RH-CVE-2019-12812, NVD entry). The exact root cause is described as insecure...

Hack Breaks PDF Encryption, Opens Content to Attackers

Researchers in Germany have invented a new hack that can allow someone to break the encryption of PDF files and access their content — or even forge signed PDF files under certain circumstances. A team from Ruhr University Bochum, FH Münster University of Applied Sciences and Hackmanit GmbH...

VulnCheck KEV: CVE-2014-0810

Unspecified vulnerability in JustSystems Sanshiro 2007 before update 3, 2008 before update 5, 2009 before update 6, and 2010 before update 6, and Sanshiro Viewer before 2.0.2.0, allows remote attackers to execute arbitrary code via a crafted document...

Memory Corruption Vulnerability in Good123 Viewer

Good123 Viewer is an image viewing software. A memory corruption vulnerability exists in Good123 Photo Viewer, which can be exploited by an attacker to cause the program to crash by constructing a malformed BMP image...

The vulnerability of the PDF Viewer component in Firefox ESR and Firefox browsers allows attackers to escalate their privileges.

The vulnerability of the CaptureHandler component in Firefox ESR and Firefox exists due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to gain increased privileges remotely...

Memory Corruption Vulnerability in TIFF Image Processing by Good123 Photo King

Good123 Viewer is an image viewing software. A memory corruption vulnerability exists in the handling of TIFF images by Good123 Viewer, which can be exploited by attackers to cause the program to crash by constructing malformed TIFF images...

The vulnerability of the PDF Viewer component in Firefox ESR and Firefox browsers allows a hacker to execute arbitrary code.

The vulnerability of the PDF Viewer component in Firefox ESR and Firefox browsers is related to errors in code generation. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially created PDF file...

Memory Corruption Vulnerability in TGA Image Processing by Good123 Photo King

Good123 Viewer is an image viewing software. A memory corruption vulnerability exists in the handling of TGA images in Good123 Viewer, which can be exploited by an attacker to cause the program to crash by constructing a malformed TGA image...

WP Server Log Viewer 1.0 - (logfile) Persistent Cross-Site Scripting Vulnerability

Exploit for php platform in category web applications Exploit Title: WP Server Log Viewer 1.0 - 'logfile' Persistent Cross-Site Scripting Exploit Author: strider Software Link: https://github.com/anttiviljami/wp-server-log-viewer Version: 1.0 Tested on: Debian 10 Buster x64 / Kali Linux CVE : Non...

WP Server Log Viewer 1.0 - 'logfile' Persistent Cross-Site Scripting

Exploit Title: WP Server Log Viewer 1.0 - 'logfile' Persistent Cross-Site Scripting Date: 2019-09-10 Exploit Author: strider Software Link: https://github.com/anttiviljami/wp-server-log-viewer Version: 1.0 Tested on: Debian 10 Buster x64 / Kali Linux CVE : None...

CloudBees Jenkins Beaker Builder Information Disclosure Vulnerability

CloudBees Jenkins Hudson Labs is the United States CloudBees company's set of Java-based development of continuous integration tools . The product is mainly used to monitor the continuous software version release/testing projects and some timed tasks . Dependency Graph Viewer Plugin is used in...

Rifatron Intelligent Digital Security System (animate.cgi) Stream Disclosure

!/bin/bash Rifatron Intelligent Digital Security System animate.cgi Stream Disclosure Vendor: Rifatron Co., Ltd. | SAM MYUNG Co., Ltd. Product web page: http://www.rifatron.com Affected version: 5brid DVR HD6-532/516, DX6-516/508/504, MX6-516/508/504, EH6-504 7brid DVR HD3-16V2, DX3-16V2/08V2/04V...

Rifatron Intelligent Digital Security System - animate.cgi Stream Disclosure Vulnerability

Exploit for cgi platform in category web applications !/bin/bash Rifatron Intelligent Digital Security System animate.cgi Stream Disclosure Vendor: Rifatron Co., Ltd. | SAM MYUNG Co., Ltd. Product web page: http://www.rifatron.com Affected version: 5brid DVR HD6-532/516, DX6-516/508/504,...

cad mini viewer suffers from dll hijacking vulnerability (CNVD-2019-33721)

Shanghai Xiaomai Technology is an Internet software and engineering data service provider for the building decoration and related manufacturing industries in China. A dll hijacking vulnerability exists in cad mini viewer CNVD-C-2019-128672. An attacker can exploit the vulnerability to load a...

Xpdf buffer overflow vulnerability (CNVD-2019-31202)

Xpdf is an open source PDF reader from Foo Labs. The product supports decoding LZW compressed format files and read encrypted PDF files. A buffer overflow vulnerability exists in the IdentityFunction::transform of the Function.cc file in Xpdf version 4.01.01, which can be exploited by an attacker...