Hacking-pdf.js-vulnerability

🚨 CVE-2024-4367: PDF.js에서의 임의 JavaScript 실행 이 프로젝트는 Mozilla의 PDF.js 라이브러리에서 글꼴 처리 코드의 부적절한 타입 검사로 인해 임의 JavaScript 실행을 허용하는 높은 심각도 취약점인 CVE-2024-4367 을 시연하고 분석합니다. 우리의 연구는 악의적으로 제작된 PDF가 Electron 앱과 같은 컨텍스트에서 JavaScript를 실행하여 잠재적으로 원격 코드 실행으로 이어질 수 있는 방법을 보여줍니다. 🔗 GitHub 저장소 :...

CVE-2024-48662

Cross Site Scripting vulnerability in AdGuard Application v.7.18.1 4778 and before allows an attacker to execute arbitrary code via a crafted payload to the fontMatrix component...

AdGuard 安全漏洞

AdGuard is an ad blocker from AdGuard, Inc. A security vulnerability exists in AdGuard v.7.18.1 4778 and prior versions that stems from the presence of a cross-site scripting vulnerability that allows an attacker to execute arbitrary code via a crafted payload to the fontMatrix component...

PT-2025-2800 · Adguard · Adguard Application

Name of the Vulnerable Software and Affected Versions: AdGuard Application versions 7.18.1 and earlier Description: The issue allows an attacker to execute arbitrary code via a crafted payload to the fontMatrix component. This enables the execution of arbitrary code, potentially leading to...

CVE-2024-48662

Cross Site Scripting vulnerability in AdGuard Application v.7.18.1 4778 and before allows an attacker to execute arbitrary code via a crafted payload to the fontMatrix component...

GHSA-4M3G-6R7G-JV4F Arbitrary JavaScript execution due to using outdated libraries

Summary gradio-pdf projects with dependencies on the pdf.js library are vulnerable to CVE-2024-4367, which allows arbitrary JavaScript execution. PoC 1. Generate a pdf file with a malicious script in the fontmatrix. This will run alert‘XSS’. poc.pdf 2. Run the app. In this PoC, I've used the demo...

Fedora Update for fontmatrix FEDORA-2013-13523

Check for the Version of fontmatrix OpenVAS Vulnerability Test Fedora Update for fontmatrix FEDORA-2013-13523 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under...

Fedora Update for fontmatrix FEDORA-2013-13523

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora Update for fontmatrix FEDORA-2013-13479

Check for the Version of fontmatrix OpenVAS Vulnerability Test Fedora Update for fontmatrix FEDORA-2013-13479 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under...

Fedora Update for fontmatrix FEDORA-2013-13479

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 19 Update: fontmatrix-0.9.99-12.r1218.fc19

A powerful and well designed fonts manager...

Fedora 19 : fontmatrix-0.9.99-12.r1218.fc19 / icu-50.1.2-7.fc19 / libreoffice-4.1.0.3-2.fc19 / etc (2013-13523)

This is an update for icu. Unfortunately, one of the fixes adds a new virtual function to LayoutEngine class, breaking ABI. So dependent packages have to be updated too. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory...