[SECURITY] Fedora 38 Update: atril-1.26.2-2.fc38

Mate-document-viewer is simple document viewer. It can display and print Portable Document Format PDF, PostScript PS, Encapsulated PostScript EPS, DVI, DJVU, epub and XPS files. When supported by the document format, mate-document-viewer allows searching for text, copying text to the clipboard,...

Stack-based Buffer Overflow

epub2txtedge is vulnerable of Stack-based Buffer Overflow. The vulnerability due to processing a crafted EPUB document with function xhtmltranslateentity in xhtml. It allows an attacker could potentially exploit this issue by providing specially crafted input within an EPUB file...

[SECURITY] Fedora 39 Update: atril-1.26.2-1.fc39

Mate-document-viewer is simple document viewer. It can display and print Portable Document Format PDF, PostScript PS, Encapsulated PostScript EPS, DVI, DJVU, epub and XPS files. When supported by the document format, mate-document-viewer allows searching for text, copying text to the clipboard,...

CVE-2023-52076 Remote Code Execution Vulnerability in Atril's EPUB ebook parsing

Atril Document Viewer is the default document reader of the MATE desktop environment for Linux. A path traversal and arbitrary file write vulnerability exists in versions of Atril prior to 1.26.2. This vulnerability is capable of writing arbitrary files anywhere on the filesystem to which the use...

Exploit for Path Traversal in Linuxmint Xreader

Slippy-book: EPUB File Parsing Directory Traversal Remote Code...

SUSE CVE-2023-44451

Linux Mint Xreader EPUB File Parsing Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Linux Mint Xreader. User interaction is required to exploit this vulnerability in that the target must...

Linux Mint Xreader EPUB File Parsing Directory Traversal Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Linux Mint Xreader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

PT-2023-8023

Name of the Vulnerable Software and Affected Versions Linux Mint Xreader affected versions not specified Description This issue allows remote attackers to execute arbitrary code on affected installations of Linux Mint Xreader. User interaction is required to exploit this issue, where the target...

HTMLDOC buffer overflow vulnerability (CNVD-2023-67081)

HTMLDOC is an open source program that can convert HTML and Markdown files to EPUB, Indexed HTML, PostScript and PDF formats. HTMLDOC version 1.9.12 suffers from a buffer overflow vulnerability that stems from an out-of-bounds flaw found in the parsetree function of toc.cxx, which results in the...

CVE-2023-24720

An arbitrary file upload vulnerability in readium-js v0.32.0 allows attackers to execute arbitrary code via uploading a crafted EPUB file...

Privilege escalation

An arbitrary file upload vulnerability in readium-js v0.32.0 allows attackers to execute arbitrary code via uploading a crafted EPUB file...

CVE-2023-24720

An arbitrary file upload vulnerability in readium-js v0.32.0 allows attackers to execute arbitrary code via uploading a crafted EPUB file...

readium-js 代码问题漏洞

readium-js is Readium open source an EPUB processing engine written in Javascript . A security vulnerability exists in readium-js version v0.32.0, which stems from an arbitrary file upload vulnerability that can be exploited by an attacker to execute arbitrary code by uploading a crafted EPUB fil...

PT-2023-19747 · Unknown · Readium-Js

Name of the Vulnerable Software and Affected Versions: readium-js version 0.32.0 Description: The issue allows attackers to execute arbitrary code via uploading a crafted EPUB file, exploiting an arbitrary file upload vulnerability. Recommendations: For readium-js version 0.32.0, at the moment,...

CVE-2023-24720

An arbitrary file upload vulnerability in readium-js v0.32.0 allows attackers to execute arbitrary code via uploading a crafted EPUB file...

CVE-2023-24720

An arbitrary file upload vulnerability in readium-js v0.32.0 allows attackers to execute arbitrary code via uploading a crafted EPUB file...

SUSE CVE-2016-10187

The E-book viewer in calibre before 2.75 allows remote attackers to read arbitrary files via a crafted epub file with JavaScript...

编号撤回

HTMLDOC is an open source program that converts HTML and Markdown files to EPUB, Indexed HTML, PostScript and PDF formats. This CVE number has been withdrawn...

CVE-2021-32428

The CVE-2021-32428 entry describes a SQL injection in the viaviwebtech Android EBook App (Books App, PDF, ePub, Online Book Reading, Download Books). The vulnerability is triggered through the author_id parameter to api.php, indicating an input validation flaw in that endpoint. CVSS metrics indic...

Malicious code in handbook-epub (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5edd736393f9c1bdbfd02f3d1a92f23913f61168099b0602f974509d6c91179a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...