39 matches found
CVE-2026-57250
When the application opens a PDF and JavaScript resets the form fields, the script re-enters the interface. The underlying native object is damaged, but the application does not perform validation. The function call on the damaged object leads to the application crashing...
CVE-2026-13129 Foxit PDF Editor/Reader Annotation Use-After-Free Remote Code Execution Vulnerability
When the application opens a PDF file, JavaScript uses the damaged field tree to trigger field traversal, resulting in the program holding an invalid form object when accessing the field property path. Eventually, the application crashes due to reading an invalid pointer...
CVE-2026-13129
CVE-2026-13129 affects Foxit PDF Editor/Reader (Annotation feature). The issue is a use-after-free in the handling of the PDF form field tree triggered by JavaScript during field traversal, which can leave the program with an invalid form object and lead to a crash, with potential remote code exe...
CVE-2026-13129
When the application opens a PDF file, JavaScript uses the damaged field tree to trigger field traversal, resulting in the program holding an invalid form object when accessing the field property path. Eventually, the application crashes due to reading an invalid pointer...
EUVD-2026-42182
When the application opens a PDF file, JavaScript uses the damaged field tree to trigger field traversal, resulting in the program holding an invalid form object when accessing the field property path. Eventually, the application crashes due to reading an invalid pointer...
CVE-2026-57250 Foxit PDF Editor/Reader Form Field Use-After-Free Vulnerability
When the application opens a PDF and JavaScript resets the form fields, the script re-enters the interface. The underlying native object is damaged, but the application does not perform validation. The function call on the damaged object leads to the application crashing...
EUVD-2026-42193
When the application opens a PDF and JavaScript resets the form fields, the script re-enters the interface. The underlying native object is damaged, but the application does not perform validation. The function call on the damaged object leads to the application crashing...
Linux kernel 安全漏洞
The Linux kernel is the core of the open-source operating system Linux, developed by the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel, which stems from the ext4mbfindbygoal function potentially allocating blocks from a damaged group, which could lea...
The vulnerability of the ext4_ext_binsearch_idx function in the lwext4 library allows a hacker to cause a service failure.
The vulnerability of the ext4extbinsearchidx function in the lwext4 library, related to reading beyond the array when processing damaged metadata of extent trees, occurs during the analysis of a specially crafted ext4 image. Exploitation of this vulnerability could allow an attacker to cause...
Malicious code in damaged-emerald-hookworm (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 59c0045e631279ab1b48c16acb2f34432c6264bc2b0cd5d33998b4fb6832cb54 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-117458
Malicious code in damaged-emerald-hookworm npm...
EUVD-2025-117456
Malicious code in damaged-salmon-angelfish npm...
EUVD-2025-117457
Malicious code in damaged-rose-hedgehog npm...
MAL-2025-138644 Malicious code in damaged-emerald-hookworm (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 59c0045e631279ab1b48c16acb2f34432c6264bc2b0cd5d33998b4fb6832cb54 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-100148
Malicious code in damagedstoatz3n npm...
EUVD-2025-100150
Malicious code in damagedfireflyz3n npm...
MAL-2025-125662 Malicious code in damaged_firefly_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa1641ec2131d677be2011c95f112b8c806be240d250bcad96f0c522a8c4f999 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-105958
Malicious code in damagedcranez3n npm...
MAL-2025-119345 Malicious code in damaged_crane_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b12b475bee37ae4de2ae1eb124cf15d6d7a1b79c4c949437e393504c063286f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...