CVE-2020-14425

Foxit Reader before 10.0 is affected by CVE-2020-14425, enabling Remote Command Execution via the app.opencPDFWebPage JavaScript API; an attacker can execute local files and bypass the security dialog. Exploit activity exists (Exploit-DB). Some advisories (e.g., NCSC) note fixes/updates are avail...

CVE-2020-14425

creationtimestamp| type| source ---|---|--- 2020-11-02 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/48982 2020-11-03 11:07:01+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/2029...

Foxit Reader 9.7.1 Remote Command Execution

Exploit Title: Foxit Reader 9.7.1 - Remote Command Execution Javascript API Exploit Author: Nassim Asrir CVE: CVE-2020-14425. Vendor Homepage: https://www.foxitsoftware.com/ Description: Foxit Reader before 10.0 allows Remote Command Execution via the unsafe app.opencPDFWebPage JavaScript AP whic...