20 matches found
DEBIAN-CVE-2025-32807
A path traversal vulnerability in FusionDirectory before 1.5 allows remote attackers to read arbitrary files on the host that end with .png and .svg or .xpm for some configurations via the icon parameter of a GET request to geticon.php...
UBUNTU-CVE-2025-32807
A path traversal vulnerability in FusionDirectory before 1.5 allows remote attackers to read arbitrary files on the host that end with .png and .svg or .xpm for some configurations via the icon parameter of a GET request to geticon.php...
CVE-2024-35361
CVE-2024-35361 affects MTab Bookmark v1.9.5. A SQL injection vulnerability exists in the /LinkStore/getIcon API endpoint that allows an attacker to execute arbitrary SQL statements without any user privileges. The issue is documented across multiple sources (NVD/Red Hat/CVE records) and is rated ...
PT-2024-26460 · Unknown · Mtab Bookmark
Name of the Vulnerable Software and Affected Versions: MTab Bookmark version 1.9.5 Description: The issue is related to an SQL injection vulnerability in the /LinkStore/getIcon API endpoint. An attacker can execute arbitrary SQL statements through this vulnerability without requiring any user...
SUSE CVE-2009-0927
Stack-based buffer overflow in Adobe Reader and Adobe Acrobat 9 before 9.1, 8 before 8.1.3 , and 7 before 7.1.1 allows remote attackers to execute arbitrary code via a crafted argument to the getIcon method of a Collab object, a different vulnerability than CVE-2009-0658...
Foxit Reader Type Obfuscation Remote Code Execution Vulnerability (CNVD-2018-14478)
Foxit Reader old name: Foxit PDF Reader is a set of software used to read PDF format files, by Fujian Foxit Software developed by Foxit Reader is a set of free to use the software, the operating system is mainly based on Microsoft Windows, and as long as there is a Win32 implementation of the...
CVE-2018-14253
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.1049. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...
Type confusion
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.1049. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...
CVE-2018-14253
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.1049. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...
Adobe Acrobat/Reader < 7.1.1/8.1.3/9.1 - Collab getIcon Universal Exploit
No description provided by source. !/usr/bin/env python Acrobat Reader - Collab getIcon universal exploiter evilpdf.py, tested on Operating Systems: Windows XP SP3 English/French Windows 2003 SP2 English with Application versions: Adobe Reader 9.0.0/8.1.2 English/French Test methods: Standalone...
Adobe Acrobat and Reader Collab 'getIcon()' JavaScript Method Exploit and Report (CVE-2009-0927)
Hi everyone, I published some work I did concerning the adobe reader Collab.getIcon buffer overflow. You can find the package exploit/report/payload on: http://www.coromputer.net/CVE-2009-0927package.zip Cheers, Ivan Rodriguez Almuina kralor - HiC && Crpt...
Adobe Acrobat/Reader < 7.1.1/8.1.3/9.1 Collab getIcon Universal Exploit
No description provided by source. !/usr/bin/env python Acrobat Reader - Collab getIcon universal exploiter evilpdf.py, tested on Operating Systems: Windows XP SP3 English/French Windows 2003 SP2 English with Application versions: Adobe Reader 9.0.0/8.1.2 English/French Test methods: Standalone...
Adobe Acrobat / Reader code execution
Vulnerability is used in-the-wild for hidden malware installations. Recomendations are to disable PDF displaying inside browser and Javascript in PDF documents. Buffer overflow in JBIG2 decoding, buffer overflow in getIcon javascript function...
Adobe Acrobat/Reader < 7.1.1/8.1.3/9.1 Collab getIcon Universal Exploit
Exploit for unknown platform in category local exploits ======================================================================= Adobe Acrobat/Reader 7.1.1/8.1.3/9.1 Collab getIcon Universal Exploit ======================================================================= !/usr/bin/env python Acroba...
Adobe Acrobat/Reader < 7.1.1/8.1.3/9.1 - Collab getIcon Universal
!/usr/bin/env python Acrobat Reader - Collab getIcon universal exploiter evilpdf.py, tested on Operating Systems: Windows XP SP3 English/French Windows 2003 SP2 English with Application versions: Adobe Reader 9.0.0/8.1.2 English/French Test methods: Standalone PDF, embedded PDF in Firefox 3.0.13...
Adobe AcrobatReader 7.1.18.1.39.1 - Collab getIcon Universal
Adobe AcrobatReader 7.1.18.1.39.1 - Collab getIcon Universal !/usr/bin/env python Acrobat Reader - Collab getIcon universal exploiter evilpdf.py, tested on Operating Systems: Windows XP SP3 English/French Windows 2003 SP2 English with Application versions: Adobe Reader 9.0.0/8.1.2 English/French...
Adobe Acrobat JavaScript getIcon method buffer overflow
Added: 03/27/2009 CVE: CVE-2009-0927 BID: 34169 Background Adobe Acrobat is software for creating PDF documents. Adobe Reader is free software for viewing PDF documents. Problem A buffer overflow vulnerability allows command execution when a user opens a PDF file which calls the JavaScript getIco...
Adobe Acrobat和Reader Collab getIcon() JavaScript方式栈溢出漏洞
No description provided by source...
CVE-2009-0927
Stack-based buffer overflow in Adobe Reader and Adobe Acrobat 9 before 9.1, 8 before 8.1.3 , and 7 before 7.1.1 allows remote attackers to execute arbitrary code via a crafted argument to the getIcon method of a Collab object, a different vulnerability than CVE-2009-0658. Recent assessments:...
security flaw
Stack-based buffer overflow in Adobe Reader and Adobe Acrobat 9 before 9.1, 8 before 8.1.3 , and 7 before 7.1.1 allows remote attackers to execute arbitrary code via a crafted argument to the getIcon method of a Collab object, a different vulnerability than CVE-2009-0658...