CVE-2026-14765

Epic Games Unreal Engine versions up to and including 5.8.0 are vulnerable to command execution due to an insecure default configuration in the LaunchURL Blueprint node (UKismetSystemLibrary::LaunchURL ). The FURLRequestFilter is empty by default, allowing all URL schemes. On Windows, this trigge...

EUVD-2026-100781

Epic Games Unreal Engine versions up to and including 5.8.0 ship with an insecure default configuration for the LaunchURL Blueprint node UKismetSystemLibrary::LaunchURL. The URL scheme filter FURLRequestFilter is empty by default, which permits all URL schemes. On Windows, this results in a call ...

PT-2026-113608

Epic Games Unreal Engine versions up to and including 5.8.0 ship with an insecure default configuration for the LaunchURL Blueprint node UKismetSystemLibrary::LaunchURL. The URL scheme filter FURLRequestFilter is empty by default, which permits all URL schemes. On Windows, this results in a call ...

Adobe Acrobat Reader DC launchURL Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Acrobat Reader DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

PT-2021-3926

Name of the Vulnerable Software and Affected Versions Acrobat Reader DC versions 2021.005.20054 and earlier Acrobat Reader DC versions 2020.004.30005 and earlier Acrobat Reader DC versions 2017.011.30197 and earlier Description The issue is related to a use-after-free vulnerability that could all...

CVE-2018-19445

A command injection can occur for specially crafted PDF files in Foxit Reader SDK ActiveX Professional 5.4.0.1031 when the JavaScript API app.launchURL is used. An attacker can leverage this to gain remote code execution...

PDF-XChange Viewer 'launchURL' Function Arbitrary Code Execution Vulnerability

PDF-XChange Viewer is a free multifunctional PDF reader. An arbitrary code execution vulnerability exists in the 'launchURL' function in PDF-XChange Viewer version 2.5 Build 314.0. A remote attacker can exploit this vulnerability to execute arbitrary code with the help of a specially crafted PDF...

CVE-2017-13056

The launchURL function in PDF-XChange Viewer 2.5 Build 314.0 might allow remote attackers to execute arbitrary code via a crafted PDF file...

CVE-2017-13056: Improper Input Validation

The launchURL function in PDF-XChange Viewer 2.5 Build 314.0 might allow remote attackers to execute arbitrary code via a crafted PDF file...

PT-2017-12900

Name of the Vulnerable Software and Affected Versions PDF-XChange Viewer version 2.5 Build 314.0 Description The issue concerns the launchURL function, which might allow remote attackers to execute arbitrary code via a crafted PDF file. Recommendations For PDF-XChange Viewer version 2.5 Build...

CVE-2017-7442

Nitro Pro 11.0.3.173 allows remote attackers to execute arbitrary code via saveAs and launchURL calls with directory traversal sequences...

CVE-2017-7442

Nitro Pro 11.0.3.173 allows remote attackers to execute arbitrary code via saveAs and launchURL calls with directory traversal sequences...

CVE-2017-7442: Improper Limitation of a Pathname to a Restricted Directory

Nitro Pro 11.0.3.173 allows remote attackers to execute arbitrary code via saveAs and launchURL calls with directory traversal sequences...

PT-2017-17739

Name of the Vulnerable Software and Affected Versions Nitro Pro version 11.0.3.173 Description The issue allows remote attackers to execute arbitrary code via saveAs and launchURL calls with directory traversal sequences. Recommendations For Nitro Pro version 11.0.3.173, consider disabling the...

Nitro Pro PDF Reader 11.0.3.173 - Javascript API Code Execution (Metasploit)

This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Nitro Pro PDF Reader 11.0.3.173 Javascript API Remote Code Execution', 'Description' = %q This module exploits an unsafe Javascript API implemente...

Windows Media Player 11 ActiveX launchURL() files download

No description provided by source. !------- This is a vulnerability into Windows Media Player ActiveX launchURL function which someone can download what ever file into the vulnerable machine !!! Discovered and written by Jacky! Tested version: 11.0.5358.4827 Tested machine: Windows XP SP3 & Windo...

Windows Media Player 11 ActiveX launchURL() files download

Exploit for unknown platform in category remote exploits ========================================================== Windows Media Player 11 ActiveX launchURL files download ========================================================== arg1='http://'; test.launchURLarg1; 0day.today 2018-01-01...

CVE-2004-0364: Undefined Security Weakness

The WrapNISUM ActiveX component WrapUM.dll in Norton Internet Security 2004 is marked safe for scripting, which allows remote attackers to execute arbitrary programs via the LaunchURL method...