202 matches found
CVE-2026-30291
An arbitrary file overwrite vulnerability in Ora Tools PDF Reader ' Reader & Editor APPv4.3.5 allows attackers to overwrite critical internal files via the file import process, leading to arbitrary code execution or information exposure...
CVE-2026-30291
An arbitrary file overwrite vulnerability in Ora Tools PDF Reader ' Reader & Editor APPv4.3.5 allows attackers to overwrite critical internal files via the file import process, leading to arbitrary code execution or information exposure...
Ora Tools PDF Reader 安全漏洞
Ora Tools PDF Reader is a document reading tool developed by Ora Tools Corporation in China. It supports browsing and basic processing of PDF files. There is a security vulnerability in the APPv4.3.5 version of Ora Tools PDF Reader. This vulnerability stems from the possibility of arbitrary file...
PT-2026-29531
An arbitrary file overwrite vulnerability in Ora Tools PDF Reader ' Reader & Editor APPv4.3.5 allows attackers to overwrite critical internal files via the file import process, leading to arbitrary code execution or information exposure...
CVE-2026-30291
CVE-2026-30291 affects Ora Tools PDF Reader/Editor (APP v4.3.5). The vulnerability allows arbitrary file overwrites through the file-import process, which can lead to arbitrary code execution or information exposure. Connected sources (Red Hat, ENISA EUVD, NVD, CVE lists) confirm the same descrip...
CVE-2026-30291
An arbitrary file overwrite vulnerability in Ora Tools PDF Reader ' Reader & Editor APPv4.3.5 allows attackers to overwrite critical internal files via the file import process, leading to arbitrary code execution or information exposure...
CVE-2026-30291
An arbitrary file overwrite vulnerability in Ora Tools PDF Reader ' Reader & Editor APPv4.3.5 allows attackers to overwrite critical internal files via the file import process, leading to arbitrary code execution or information exposure...
python security update
2.7.5-94.0.3 - Fix for CVE-2025-12084 Orabug: 38902314...
firefox security update
140.4.0-4.0.1 - Update to 140.4.0 ESR Orabug: 38595697CVE-2025-11708CVE-2025-11709 CVE-2025-11710CVE-2025-11711CVE-2025-11712CVE-2025-11714 CVE-2025-11715...
EUVD-2025-178325
Malicious code in izar-ora-exec-genomics npm...
EUVD-2025-177420
Malicious code in ora-release-it-ichnology-subscription npm...
EUVD-2025-179427
Malicious code in cz-conventional-changelog-ora-rehype-xanadu npm...
EUVD-2025-179325
Malicious code in dependencies-taurus-dotenv-safe-ora npm...
EUVD-2025-178586
Malicious code in hawkingradiation-ora-celeste-toml npm...
EUVD-2025-177422
Malicious code in ora-polaris-uranology-planckscale npm...
EUVD-2025-175650
Malicious code in warp-ora-duplex-jekyll npm...
EUVD-2025-177394
Malicious code in outercore-quasarjet-ora-saturnology npm...
EUVD-2025-175562
Malicious code in wezen-mutation-ora-grunt npm...
Malicious code in warp-ora-duplex-jekyll (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d66ff385a22dffe023d98891710432d0c59ead5f5af2c822fff70f98049abf12 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...