Adobe Bridge permissions and access control issues (CNVD-2026-30877)

Adobe Bridge is a digital asset management and file organization tool developed by the American company Adobe. Adobe Bridge has vulnerabilities related to permission management and access control. These vulnerabilities stem from issues with unsanable search paths, and attackers can exploit these...

PT-2026-66353

Name of the Vulnerable Software and Affected Versions Adobe Campaign Classic affected versions not specified Description An incorrect authorization issue allows for arbitrary code execution within the context of the current user. This flaw can be exploited without requiring any user interaction...

Adobe Format Plugins Buffer Overflow Vulnerability

Adobe format plugins are a series of format extension plugins developed by the American company Adobe. Adobe format plugins have a buffer overflow vulnerability, and attackers can exploit this vulnerability to execute arbitrary code within the context of the current user...

Adobe Bridge out-of-bounds write vulnerability

Adobe Bridge is a digital asset management and file organization tool developed by the American company Adobe. Adobe Bridge has a out-of-bounds write vulnerability, which allows attackers to execute arbitrary code within the context of the current user...

APSB26-114 : Security update available for Adobe Campaign Classic

Adobe has released a security update for Adobe Campaign Classic. This update addresses critical vulnerabilities that could result in arbitrary code execution and arbitrary file system read. Adobe is not aware of any exploits in the wild for any of the issues addressed in these updates...

Adobe AEM Dispatcher <4.15 - Rules Bypass Detection

Dispatcher before 4.1.5 in Adobe Experience Manager 5.6.1, 6.0.0, and 6.1.0 does not properly implement a URL filter, which allows remote attackers to bypass dispatcher rules via unspecified vectors. !/usr/bin/env python3 -- coding: utf-8 -- """Dispatcher before 4.""" from kittysploit import from...

Adobe Connect < 12.1.5 - Local File Disclosure Detection

Adobe Connect versions 11.4.5 and earlier, 12.1.5 and earlier are affected by an Improper Access Control vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to impact the integrity of a minor feature. Exploitation of this issue does not...

Adobe ColdFusion Component Browser Login Panel Detection

An Adobe ColdFusion Component Browser login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """An Adobe ColdFusion Component Browser login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info =...

Adobe Experience Manager Login Panel Detection

An Adobe Experience Manager login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """An Adobe Experience Manager login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Adobe Experienc...

Adobe AEM ACS Common Exposure Detection

Adobe AEM ACS Common pages exposed. !/usr/bin/env python3 -- coding: utf-8 -- """Adobe AEM ACS Common pages exposed.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Adobe AEM ACS Common Exposure Detection',...

Adobe AEM Debugging Client Libraries Detection

Detects Adobe AEM Debugging Client Libraries. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Adobe AEM Debugging Client Libraries.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Adobe AEM Debugging Client...

Adobe AEM Sling User Info Servlet Exposure Detection

Detects Adobe AEM Sling User Info Servlet Exposure. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Adobe AEM Sling User Info Servlet Exposure.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Adobe AEM Sling Use...

Adobe Media Server Login Panel Detection

An Adobe Media Server login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """An Adobe Media Server login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Adobe Media Server Login...

Adobe AEM CRX Browser Exposure Detection

Detects Adobe AEM CRX Browser Exposure. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Adobe AEM CRX Browser Exposure.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Adobe AEM CRX Browser Exposure Detection',...

Adobe AEM Disk Usage Information Disclosure Detection

Adobe AEM Disk Usage Information is exposed. !/usr/bin/env python3 -- coding: utf-8 -- """Adobe AEM Disk Usage Information is exposed.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Adobe AEM Disk Usage Information...

AEM QueryBuilder JSON Exposure - Bypass Detection

Adobe Experience Manager QueryBuilder endpoint allows unauthenticated attackers to extract sensitive user repository data, including password hashes from the rep:password field in /home/users. This vulnerability bypasses access controls and exposes bcrypt/SHA-256 password hashes through the...

Adobe Experience Manager - Cross-Site Scripting Detection

Adobe Experience Manager contains a cross-site scripting vulnerability via setPreferences. !/usr/bin/env python3 -- coding: utf-8 -- """Adobe Experience Manager contains a cross-site scripting vulnerability via setPreferences.""" from kittysploit import from lib.protocols.http.httpclient import...

Adobe Connect Central Login Panel Detection

An Adobe Connect Central login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """An Adobe Connect Central login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Adobe Connect Central...

CVE-2026-48388: Uncontrolled Search Path Element

Adobe Photoshop Installer was affected by an Uncontrolled Search Path Element vulnerability that could have resulted in arbitrary code execution in the context of the current user. An attacker could have exploited this vulnerability by placing a malicious library in a directory searched by the...

APSB26-87: Security update for Adobe Format Plugins

Adobe has released an update for Adobe Format Plugins. This update addresses critical vulnerabilities that could lead to arbitrary code execution...