CVE-2026-34529

CVE-2026-34529 – File Browser stored XSS via crafted EPUB (GHSA-5VPR-4FGW-F69H) . The Github advisory discloses a vulnerability in File Browser where the EPUB preview function can run JavaScript in the victim’s browser. Root cause: Preview.vue passes epubOptions with allowScriptedContent: true to...

Calibre 代码注入漏洞

Calibre is an open-source, free tool developed by Kovid Goyal, a personal developer from India. It serves as a comprehensive e-book reading management and format conversion tool. Versions of Calibre 9.1.0 and earlier had a code injection vulnerability. This vulnerability stemmed from path travers...

EUVD-2018-21565

Malware in sbrugna...

EUVD-2016-1374

Malware in sbrugna...

EUVD-2021-26183

Malware in sbrugna...

EUVD-2016-10293

Malware in sbrugna...

EUVD-2025-18504

Malicious code in bioql PyPI...

EUVD-2024-52991

Malicious code in bioql PyPI...

CVE-2025-6196

A flaw was found in libgepub, a library used to read EPUB files. The software mishandles file size calculations when opening specially crafted EPUB files, leading to incorrect memory allocations. This issue causes the application to crash. Known affected usage includes desktop services like...

DEBIAN-CVE-2025-6196

A flaw was found in libgepub, a library used to read EPUB files. The software mishandles file size calculations when opening specially crafted EPUB files, leading to incorrect memory allocations. This issue causes the application to crash. Known affected usage includes desktop services like...

CVE-2025-6196

A flaw was found in libgepub, a library used to read EPUB files. The software mishandles file size calculations when opening specially crafted EPUB files, leading to incorrect memory allocations. This issue causes the application to crash. Known affected usage includes desktop services like...

PT-2025-25663 · Libgepub +1 · Libgepub +1

Name of the Vulnerable Software and Affected Versions: libgepub affected versions not specified Description: A flaw exists in libgepub, a library used to read EPUB files. The software incorrectly handles file size calculations when processing specially crafted EPUB files, resulting in incorrect...

MGASA-2019-0249 Updated sigil packages fix security vulnerability

Updated sigil package fixes security vulnerability: Mike Salvatore discovered that Sigil mishandled certain malformed EPUB files. An attacker could use this vulnerability to write arbitrary files to the filesystem CVE-2019-14452...

Foxit PhantomPDF < 8.3.11 Multiple Vulnerabilities

According to its version, the Foxit PhantomPDF application formally known as Phantom installed on the remote Windows host is prior to 8.3.11. It is, therefore affected by multiple vulnerabilities: - An uninitialized pointer flaw exists when calling xfa.event.rest XFA JavaScript that can cause the...

Ubuntu: Security Advisory (USN-4055-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2016-9487

EpubCheck 4.0.1 does not properly restrict resolving external entities when parsing XML in EPUB files during validation. An attacker who supplies a specially crafted EPUB file may be able to exploit this behavior to read arbitrary files, or have the victim execute arbitrary requests on his behalf...

CVE-2016-9487

EpubCheck 4.0.1 does not properly restrict resolving external entities when parsing XML in EPUB files during validation. An attacker who supplies a specially crafted EPUB file may be able to exploit this behavior to read arbitrary files, or have the victim execute arbitrary requests on his behalf...

CVE-2016-9487

EpubCheck 4.0.1 does not properly restrict resolving external entities when parsing XML in EPUB files during validation. An attacker who supplies a specially crafted EPUB file may be able to exploit this behavior to read arbitrary files, or have the victim execute arbitrary requests on his behalf...

CVE-2016-9487 EpubCheck 4.0.1 is vulnerable to external XML entity processing attacks

EpubCheck 4.0.1 does not properly restrict resolving external entities when parsing XML in EPUB files during validation. An attacker who supplies a specially crafted EPUB file may be able to exploit this behavior to read arbitrary files, or have the victim execute arbitrary requests on his behalf...

CVE-2016-9487

Summary of CVE-2016-9487 (EpubCheck 4.0.1): The vulnerability arises from improper restriction of XML External Entities (XXE) when parsing XML in EPUBs during validation, allowing a specially crafted EPUB to read arbitrary files or cause the victim to issue arbitrary requests leveraging trust rel...