CVE-2023-52076-PoC

CVE-2023-52076-PoC 针对 CVE-2023-52076 的概念验证（PoC），该漏洞是影响 MATE 桌面环境下 Atril/Xreader 文档查看器的一个严重路径遍历与任意文件写入漏洞。 该脚本生成一个构造的 EPUB 载荷，其中包含针对 SSH 配置或自启动桌面条目的 zip-slip 路径，从而可在目标系统上实现远程命令执行。 功能简介 1. 支持两种利用模式：SSH 密钥注入或自启动 RCE。 2. 生成 RSA 密钥对（仅 SSH 模式）。 3. 构建有效的 EPUB，其中嵌入 zip-slip 路径以触发易受攻击的解压流程。 4. 使用...

CVE-2025-55780

CVE-2025-55780 MuPDF 1.26.4 EPUBレンダリング関数におけるヌルポインタ間接参照 CVE参照 - CVE-2025-55780 影響を受けるバージョン : 1.26.7 およびそれ以前 発見およびテスト環境 : 1.26.4 深刻度 CVSSv3 スコア : 7.5 High 修正コミット : https://cgit.ghostscript.com/cgi-bin/cgit.cgi/mupdf.git/commit/?id=bdd5d241748807378a78a622388e0312332513c5 Bugzilla :...

CVE-2026-104982

A path traversal vulnerability exists in Linux Mint Xreader up to version 4.6.5 . The flaw resides in the EPUB File Handler component, specifically affecting the setup_document_content_list/g_strdup_printf functions within the backend/epub/epub-document.c file. This vulnerability can be exploited...

CVE-2026-104982 Linux Mint Xreader EPUB File epub-document.c g_strdup_printf path traversal

A flaw has been found in Linux Mint Xreader up to 4.6.5. This issue affects the function setupdocumentcontentlist/gstrdupprintf of the file backend/epub/epub-document.c of the component EPUB File Handler. This manipulation causes path traversal. The attack is possible to be carried out remotely...

EUVD-2026-91986

A flaw has been found in Linux Mint Xreader up to 4.6.5. This issue affects the function setupdocumentcontentlist/gstrdupprintf of the file backend/epub/epub-document.c of the component EPUB File Handler. This manipulation causes path traversal. The attack is possible to be carried out remotely...

slippy-book-exploit

Slippy-book：EPUB 文件解析目录遍历远程代码执行 CVE-2023-44451 Xreader、CVE-2023-52076 Atril（已保留）： RCE 漏洞影响流行的 Linux 发行版，包括 Mint、Kali、Parrot、Manjaro 等。EPUB 文件解析目录遍历远程代码执行 在 Linux 的 MATE/ 和 Linux Mint 的默认文档查看器软件中发现了一个严重的路径遍历和任意文件写入漏洞，影响 Kali Linux、Parrot Security OS、Ubuntu-Mate、Linux Mint、Xubuntu 以及所有其他使用 MATE 或...

CVE-2026-82642 Readest: unsanitized iframe srcdoc attribute in the EPUB sanitizer can lead to arbitrary code execution

Readest is an open-source e-book reader built on Tauri. In versions prior to 0.11.16, EPUB chapter HTML is sanitized with DOMPurify using a configuration that forbade only the tag FORBIDTAGS: 'script' in apps/readest-app/src/services/transformers/sanitizer.ts. DOMPurify does not parse the content...

CVE-2026-82642 Readest: unsanitized iframe srcdoc attribute in the EPUB sanitizer can lead to arbitrary code execution

Readest is an open-source e-book reader built on Tauri. In versions prior to 0.11.16, EPUB chapter HTML is sanitized with DOMPurify using a configuration that forbade only the tag FORBIDTAGS: 'script' in apps/readest-app/src/services/transformers/sanitizer.ts. DOMPurify does not parse the content...

CVE-2026-82642: Improper Neutralization of Input During Web Page Generation

Readest is an open-source e-book reader built on Tauri. In versions prior to 0.11.16, EPUB chapter HTML is sanitized with DOMPurify using a configuration that forbade only the...

[SECURITY] [DLA 4744-1] calibre security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-4744-1 [email protected] https://www.debian.org/lts/security/ Abhijith PA August 18, 2026 https://wiki.debian.org/LTS -...

Debian dla-4744 : calibre - security update

The remote Debian 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4744 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4744-1 [email protected]...

Linux Distros Unpatched Vulnerability : CVE-2026-73248

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - calibre is an e-book manager. Prior to 9.12.0, calibre processes attacker-controlled compositetemplate metadata from a malicious EPUB, OPF, PDF, or similar file...

CVE-2026-73248

calibre is an e-book manager. Prior to 9.12.0, calibre processes attacker-controlled compositetemplate metadata from a malicious EPUB, OPF, PDF, or similar file through program: and a nested template call whose formatter does not inherit allowpythontemplates=False, allowing a nested python:...

DEBIAN-CVE-2026-73248

calibre is an e-book manager. Prior to 9.12.0, calibre processes attacker-controlled compositetemplate metadata from a malicious EPUB, OPF, PDF, or similar file through program: and a nested template call whose formatter does not inherit allowpythontemplates=False, allowing a nested python:...

UBUNTU-CVE-2026-73248

calibre is an e-book manager. Prior to 9.12.0, calibre processes attacker-controlled compositetemplate metadata from a malicious EPUB, OPF, PDF, or similar file through program: and a nested template call whose formatter does not inherit allowpythontemplates=False, allowing a nested python:...

EUVD-2026-57014

calibre is an e-book manager. Prior to 9.12.0, calibre processes attacker-controlled compositetemplate metadata from a malicious EPUB, OPF, PDF, or similar file through program: and a nested template call whose formatter does not inherit allowpythontemplates=False, allowing a nested python:...

CVE-2026-73248

calibre is an e-book manager. Prior to 9.12.0, calibre processes attacker-controlled compositetemplate metadata from a malicious EPUB, OPF, PDF, or similar file through program: and a nested template call whose formatter does not inherit allowpythontemplates=False, allowing a nested python:...

CVE-2026-73248

calibre is an e-book manager. Prior to 9.12.0, calibre processes attacker-controlled compositetemplate metadata from a malicious EPUB, OPF, PDF, or similar file through program: and a nested template call whose formatter does not inherit allowpythontemplates=False, allowing a nested python:...

CVE-2026-73248: Improper Control of Generation of Code

calibre is an e-book manager. Prior to 9.12.0, calibre processes attacker-controlled compositetemplate metadata from a malicious EPUB, OPF, PDF, or similar file through program: and a nested template call whose formatter does not inherit allowpythontemplates=False, allowing a nested python:...

PT-2026-70939

calibre is an e-book manager. Prior to 9.12.0, calibre processes attacker-controlled composite template metadata from a malicious EPUB, OPF, PDF, or similar file through program: and a nested template call whose formatter does not inherit allow python templates=False, allowing a nested python:...