cve-2018-12798

Adobe Acrobat Reader ヒープオーバーフローによるリモートコード実行の脆弱性 脆弱性 メモリバッファの境界内での操作の制限が不適切な脆弱性 脆弱性の説明 この脆弱性により、リモートの攻撃者は、Adobe Acrobat Pro DC の脆弱なインストール環境で任意のコードを実行できます。この脆弱性を悪用するにはユーザーの操作が必要です。ターゲットが悪意のあるページにアクセスするか、悪意のあるファイルを開く必要があります。 特定の欠陥は、Unicode...

CVE-2017-8759

CVE-2017-8759 武器化 PoC このリポジトリには、CVE-2017-8759 の脆弱性を武器化するために使用できるデータが含まれています。 詳細については、https://www.mdsec.co.uk/blog/ にアクセスし、この脆弱性に関連する投稿を参照してください。 いつものように、私の研究は、コミュニティが増大する脅威をより認識できるように支援することと、 adversary simulation...

CVE-disclosures

CVE-2026-3171 与 CVE-2026-3170 – Archana M 由 Archana M 发布的官方漏洞披露。 🔹 CVE-2026-3171 产品： SourceCodester / Patrick Mvuma 患者候诊区排队管理系统 1.0 漏洞类型： 跨站脚本（CWE-79） 受影响文件： /queue.php 攻击向量： 远程 用户交互： 需要 CVSS v3.1： 3.5（AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N） 状态： 已公开披露 描述 对用户输入（firstname / lastname）的中和不当，导致跨站脚本（XSS）漏...

CVE-2025-60656

CVE-2025-60656 - 首页存储型跨站脚本（XSS）漏洞 | ---|--- 研究人员| DotAdrien 严重程度| 8.5 高危 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N 软件| Script Pag 描述 首页的“Recent Ads”（最新广告）模块存在存储型跨站脚本（XSS）漏洞。图片 URL 字段未能对双引号（"）进行过滤。攻击者可注入类似 https://google.com/image.png" 的载荷，当任何用户访问首页时便会触发。...

CVE-2026-21112

Improper input validation in Samsung Tips prior to Android 17 allows local attackers to launch arbitrary activity with Samsung Tips privilege. User interaction is required for triggering this vulnerability...

CVE-2026-21112

Improper input validation in Samsung Tips prior to Android 17 allows local attackers to launch arbitrary activity with Samsung Tips privilege. User interaction is required for triggering this vulnerability...

CVE-2015-3073

CVE-2015-3073 此漏洞允许远程攻击者绕过 Adobe Reader 受安装版本中的 API 限制。利用此漏洞需要用户交互，即目标必须访问恶意页面或打开恶意文件。 具体缺陷存在于 AFParseDate 中。通过创建包含特定 JavaScript 指令的特制 PDF，可以绕过 JavaScript API 限制。远程攻击者可利用此漏洞执行任意代码。 Windows 和 OS X 上，Adobe Reader 和 Acrobat 10.1.14 之前的 10.x 版本以及 11.0.11 之前的 11.x 版本受此漏洞影响。 注意： 代码假设你已将名为 exploit.txt 的...

CVE-2026-81993

Acrobat Reader is affected by a Heap-based Buffer Overflow vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this issue requires user interaction in that a victim must open a malicious...

CVE-2026-80161 Acrobat Reader | Access of Resource Using Incompatible Type ('Type Confusion') (CWE-843)

Acrobat Reader is affected by an Access of Resource Using Incompatible Type 'Type Confusion' vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue requires...

EUVD-2026-74206

Acrobat Reader is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized write access. Exploitation of this issue requires user interaction in that a victi...

EUVD-2026-74204

Acrobat Reader is affected by an Improperly Controlled Modification of Object Prototype Attributes 'Prototype Pollution' vulnerability that could lead to arbitrary file system read. An attacker could exploit this vulnerability to access sensitive files and directories outside the intended access...

CVE-2026-75713

Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting XSS vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute malicious JavaScript within the context of the victim's browser. Exploitation of this issue requires user interaction in...

CVE-2026-75708

Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting XSS vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute malicious JavaScript within the context of the victim's browser. Exploitation of this issue requires user interaction in...

CVE-2026-71357 Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)

Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting XSS vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute malicious JavaScript within the context of the victim's browser. Exploitation of this issue requires user interaction in...

EUVD-2026-74157

Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting XSS vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute malicious JavaScript within the context of the victim's browser. Exploitation of this issue requires user interaction in...

CVE-2026-75726

Adobe Experience Manager is affected by an Improper Input Validation (CWE-20) vulnerability that can lead to a security feature bypass , allowing a low-privileged attacker to gain unauthorized limited write access . Exploitation requires user interaction —the victim must visit a maliciously craft...

EUVD-2026-74145

Adobe Experience Manager is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security measures and gain unauthorized limited write access. Exploitation of this issue require...

CVE-2026-19479 Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)

Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting XSS vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute malicious JavaScript within the context of the victim's browser. Exploitation of this issue requires user interaction in...

CVE-2026-75685

Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability (CWE-79). An attacker can manipulate the DOM environment to execute malicious JavaScript in the victim's browser context. Exploitation requires user interaction , as the victim must visit a crafted webpag...

CVE-2026-75677

Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability (CWE-79). An attacker can manipulate the DOM environment to execute malicious JavaScript within the victim's browser context. Exploitation requires user interaction —a victim must visit a crafted webpage—...