87 matches found
CVE-2025-66034-htb-ctf
CVE-2025-66034-htb-ctf VariaType Variable Font Generator Exploit This repository contains a specialized exploit for the VariaType machine on Hack The Box. The exploit leverages a vulnerability in how the fontTools library or the web application handles .designspace XML files and metadata...
POC-CVE-2025-66034
fontvarlib.py — CVE-2025-66034 fontTools varLib — Произвольная запись файла + XML-инъекция → Удаленное выполнение кода Содержание Обзор Детали уязвимости Цепочка атаки Требования Установка Конфигурация Использование Как это работает Уязвимый код Контрольный список перед эксплуатацией Протестирова...
varlib-cve-2025-66034
fontTools varLib CVE-2025-66034 Exploit This repo doesn't introduce a new vulnerability. This is a Proof-of-concept exploit for CVE-2025-66034 affecting the fontTools varLib variable font generation pipeline. The vulnerability allows attackers to control the output filename inside a crafted...
CVE-2025-66034
CVE-2025-66034 — fontTools varLib Arbitrary File Write Vulnerability fontTools is a Python library for manipulating font files. Its varLib module processes .designspace files — an XML format that describes how multiple font masters should be interpolated to produce a variable font. Two weaknesses...
CVE-2025-66034
CVE-2025-66034 — fontTools varLib Arbitrary File Write → RCE PoC exploit for an Arbitrary File Write + XML Injection vulnerability infontTools.varLib Tested on HackTheBox — VarIaType Vulnerability fontTools.varLib processes .designspace XML files to build variable fonts. Two weaknesses combine to...
Linux Distros Unpatched Vulnerability : CVE-2026-19694
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - TTX Logger file parser crash in 4.6.0 to 4.6.7 allows denial of service CVE-2026-19694 Note that Nessus relies on the presence of the package as reported by the...
PYSEC-2026-1389 fontTools is Vulnerable to Arbitrary File Write and XML injection in fontTools.varLib
Summary The fonttools varLib or python3 -m fontTools.varLib script has an arbitrary file write vulnerability that leads to remote code execution when a malicious .designspace file is processed. The vulnerability affects the main code path of fontTools.varLib, used by the fonttools varLib CLI and...
fontTools is Vulnerable to Arbitrary File Write and XML injection in fontTools.varLib
SummaryThe fonttools varLib or python3 -m fontTools.varLib script has an arbitrary file write vulnerability that leads to remote code execution when a malicious .designspace file is processed. The vulnerability affects the main code path of fontTools.varLib, used by the fonttools varLib CLI and a...
PYSEC-2026-1388 fonttools XML External Entity Injection (XXE) Vulnerability
Summary As of fonttools=4.28.2 the subsetting module has a XML External Entity Injection XXE vulnerability which allows an attacker to resolve arbitrary entities when a candidate font OT-SVG fonts, which contains a SVG table, is parsed. This allows attackers to include arbitrary files from the...
fonttools XML External Entity Injection (XXE) Vulnerability
SummaryAs of fonttools=4.28.2 the subsetting module has a XML External Entity Injection XXE vulnerability which allows an attacker to resolve arbitrary entities when a candidate font OT-SVG fonts, which contains a SVG table, is parsed. This allows attackers to include arbitrary files from the...
Arbitrary Code Execution
Overview fonttools is a Tools to manipulate font files Affected versions of this package are vulnerable to Arbitrary Code Execution due to the parseBlendList function's usage of built-in Python's eval function when parsing TTX font data. An attacker can execute arbitrary scripts by supplying a...
Exploit for XML Injection (aka Blind XPath Injection) in Fonttools
CVE-2025-66034 — fontTools varLib Arbitrary File Write → RCE...
Advisory ROSA-SA-2026-3220
Software: fonttools 4.49.0 WASP: ROSA-CHROME unaffected versions = fonttools-4.49.0-2 affected versions fonttools-4.49.0-2 CVE-ID: CVE-2025-66034 BDU-ID: None CVE-Crit: MEDIUM CVE-DESC.: Arbitrary file write vulnerability in fontTools varLib allows a remote attacker to execute arbitrary code when...
Exploit for XML Injection (aka Blind XPath Injection) in Fonttools
fontvarlib.py — CVE-2025-66034 fontTools varLib — Arbi...
Exploit for XML Injection (aka Blind XPath Injection) in Fonttools
CVE-2025-66034-Poc-to-Get-RCE-for-HTB-VariaType Just run the...
Security Bulletin: IBM Maximo Application Suite - Visual Inspection Component uses fontTools dependency which is vulnerable to CVE-2025-66034.
Summary IBM Maximo Application Suite - Visual Inspection Component uses fontTools dependency which is vulnerable to CVE-2025-66034. This bulletin contains information regarding the vulnerability and its remediation. Vulnerability Details CVEID:CVE-2025-66034 DESCRIPTION: fontTools is a library fo...
Exploit for XML Injection (aka Blind XPath Injection) in Fonttools
No d...
Exploit for XML Injection (aka Blind XPath Injection) in Fonttools
CVE-2025-66034-Poc-to-Get-RCE-for-HTB-VariaType Just run the...