slippy-book-exploit

Slippy-book：EPUB 文件解析目录遍历远程代码执行 CVE-2023-44451 Xreader、CVE-2023-52076 Atril（已保留）： RCE 漏洞影响流行的 Linux 发行版，包括 Mint、Kali、Parrot、Manjaro 等。EPUB 文件解析目录遍历远程代码执行 在 Linux 的 MATE/ 和 Linux Mint 的默认文档查看器软件中发现了一个严重的路径遍历和任意文件写入漏洞，影响 Kali Linux、Parrot Security OS、Ubuntu-Mate、Linux Mint、Xubuntu 以及所有其他使用 MATE 或...

atril_cbt-inject-exploit

CVE-2023-44452、CVE-2023-51698：Linux Mint Xreader/MATE Atril CBT 文件解析参数注入远程代码执行漏洞 一个影响使用 MATE、Cinnamon 及部分 Xfce 桌面环境的流行 Linux 操作系统的严重一键 RCE/命令注入漏洞。 受影响的操作系统： Linux Mint Kali Linux（安全专业人员、研究人员中流行的操作系统） Parrot OS（安全专业人员、研究人员中流行的操作系统） Ubuntu-Mate Xubuntu Fedora Cinnamon Fedora Mate Manjaro Mate Manja...

document-viewer-link-handler-security-assessment

CVE-2026-46529 - Atril Evince XReader PDFのクリック可能なリンクによるRCE コンサルタント形式のサイバーセキュリティレポート ドキュメントビューアのリンクハンドラリスクに関するプロフェッショナルな脆弱性評価レポート。影響分析、是正措置、緩和戦略を含みます。 📍 レポート概要 項目| 詳細 ---|--- レポートタイプ| 脆弱性評価レポート エンゲージメントコンテキスト| セキュリティリサーチ 主な焦点| アプリケーションセキュリティ 対象読者| セキュリティチーム、エンジニアリングチーム、採用担当者 出力スタイル|...

Rocky Linux 8 [CIQ] Security Update: evince / evince-browser-plugin / evince-browser-plugin-debuginfo / etc (crlsa-2026_28998)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202628998 advisory. atril: evince: xreader: PDF /GoToR action argv injection enables single-click RCE via --gtk-module dlopen CVE-2026-46529 Tenable has extracted the preceding...

CVE-2023-52076-PoC

CVE-2023-52076-PoC CVE-2023-52076 の概念実証（Proof-of-concept）です。これは、MATE Desktop 環境に影響する Atril/Xreader ドキュメントビューアにおける、重大なパストラバーサルおよび任意ファイル書き込みの脆弱性です。 このスクリプトは、SSH 設定または自動起動（autostart）デスクトップエントリのいずれかを標的とした zip-slip パスを含む細工済み EPUB ペイロードを生成し、標的システム上でのリモートコマンド実行を可能にします。 機能 1. SSH キーインジェクションと autostart RC...

MiracleLinux 9 : evince-40.5-4.el9_8.1 (AXSA:2026-1365:02)

The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2026-1365:02 advisory. atril: evince: xreader: PDF /GoToR action argv injection enables single-click RCE via --gtk-module dlopen CVE-2026-46529 Tenable has extracted the preceding...

Exploit for Path Traversal in Mate-Desktop Atril

CVE-2023-52076-PoC Proof-of-concept for CVE-2023-52076...

atril: evince: xreader: PDF /GoToR action argv injection enables single-click RCE via --gtk-module dlopen

A flaw was found in Atril, Evince and Xreader. A malicious link inside a specially crafted PDF document can cause arbitrary code execution when clicked due to improper quoting of attacker-controlled PDF link-destination fields during remote go-to /GoToR actions. This issue allows an attacker to...

atril: evince: xreader: PDF /GoToR action argv injection enables single-click RCE via --gtk-module dlopen

A flaw was found in Atril, Evince and Xreader. A malicious link inside a specially crafted PDF document can cause arbitrary code execution when clicked due to improper quoting of attacker-controlled PDF link-destination fields during remote go-to /GoToR actions. This issue allows an attacker to...

RHEL 8 : evince (RHSA-2026:42692)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:42692 advisory. The evince packages provide a simple multi-page document viewer for Portable Document Format PDF, PostScript PS, Encapsulated PostScript EPS files,...

atril: evince: xreader: PDF /GoToR action argv injection enables single-click RCE via --gtk-module dlopen

A flaw was found in Atril, Evince and Xreader. A malicious link inside a specially crafted PDF document can cause arbitrary code execution when clicked due to improper quoting of attacker-controlled PDF link-destination fields during remote go-to /GoToR actions. This issue allows an attacker to...

Exploit for CVE-2026-46529

─── CVE-2026-46529 ─── 🏴 AMN SECURITY 🏴 مركز أب...

MiracleLinux 8 : evince-3.28.4-17.el8_10.ML.1 (AXSA:2026-1137:01)

The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2026-1137:01 advisory. atril: evince: xreader: PDF /GoToR action argv injection enables single-click RCE via --gtk-module dlopen CVE-2026-46529 Tenable has extracted the preceding...

atril: evince: xreader: PDF /GoToR action argv injection enables single-click RCE via --gtk-module dlopen

A flaw was found in Atril, Evince and Xreader. A malicious link inside a specially crafted PDF document can cause arbitrary code execution when clicked due to improper quoting of attacker-controlled PDF link-destination fields during remote go-to /GoToR actions. This issue allows an attacker to...

RHEL 9 : evince (RHSA-2026:33416)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:33416 advisory. The evince packages provide a simple multi-page document viewer for Portable Document Format PDF, PostScript PS, Encapsulated PostScript EPS files,...

atril: evince: xreader: PDF /GoToR action argv injection enables single-click RCE via --gtk-module dlopen

A flaw was found in Atril, Evince and Xreader. A malicious link inside a specially crafted PDF document can cause arbitrary code execution when clicked due to improper quoting of attacker-controlled PDF link-destination fields during remote go-to /GoToR actions. This issue allows an attacker to...

RHEL 9 : evince (RHSA-2026:33169)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:33169 advisory. The evince packages provide a simple multi-page document viewer for Portable Document Format PDF, PostScript PS, Encapsulated PostScript EPS files,...

Important: Red Hat Security Advisory: evince security update

An update for evince is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...

atril: evince: xreader: PDF /GoToR action argv injection enables single-click RCE via --gtk-module dlopen

A flaw was found in Atril, Evince and Xreader. A malicious link inside a specially crafted PDF document can cause arbitrary code execution when clicked due to improper quoting of attacker-controlled PDF link-destination fields during remote go-to /GoToR actions. This issue allows an attacker to...

RLSA-2026:27819 Important: evince security update

The evince packages provide a simple multi-page document viewer for Portable Document Format PDF, PostScript PS, Encapsulated PostScript EPS files, and, with additional back-ends, also the Device Independent File format DVI files. Security Fixes: atril: evince: xreader: PDF /GoToR action argv...