Malicious code in additem (npm)

The package additem was found to contain malicious code...

MAL-2025-14072 Malicious code in additem (npm)

The package additem was found to contain malicious code...

CVE-2018-17644: Use After Free

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.2.0.9297. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

Foxit Reader and Foxit PhantomPDF for Windows Memory Misreference Vulnerability (CNVD-2018-23722)

Foxit Reader for Windows is a Windows-based PDF document reader from China's Foxit Foxit Software Corporation.Foxit PhantomPDF for Windows is its commercial version. A memory misreference vulnerability exists in the processing of the addItem method of TimeField in Foxit Reader 9.2.0.9297 and...

Foxit Reader XFA TimeField addItem Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of the...

web.ase.com XSS vulnerability

Vulnerable URL: https://web.ase.com/store/AddItem.asp?code=7130=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E==000=9.95=ACCESSORY=97ℑ=/Store/Images/7130.png Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicl...

CVE-2010-4710: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the addItem method in the Menu widget in YUI before 2.9.0 allows remote attackers to inject arbitrary web script or HTML via a field that is added to a menu, related to documentation that specifies this field as a text field rather than an HTML field, a...