Malicious Package

Overview bem-page-object is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

CVE-2026-57241

The application opens the PDF, and JavaScript performs operations on the page and the document, causing the page-related objects within the application to lose synchronization; however, the renderer still trusts the outdated page count, and eventually the application crashes due to out-of-bounds...

CVE-2026-57241 Foxit PDF Editor/Reader Page Out-of-bounds Read Vulnerability

The application opens the PDF, and JavaScript performs operations on the page and the document, causing the page-related objects within the application to lose synchronization; however, the renderer still trusts the outdated page count, and eventually the application crashes due to out-of-bounds...

Malicious code in bem-page-object (npm)

The package bem-page-object was found to contain malicious code...

MAL-2025-15592 Malicious code in bem-page-object (npm)

The package bem-page-object was found to contain malicious code...

CVE-2024-47810

A use-after-free vulnerability exists in the way Foxit Reader 2024.3.0.26795 handles a 3D page object. A specially crafted Javascript code inside a malicious PDF document can trigger this vulnerability, which can lead to memory corruption and result in arbitrary code execution. An attacker needs ...

CVE-2024-47810: Use After Free

A use-after-free vulnerability exists in the way Foxit Reader 2024.3.0.26795 handles a 3D page object. A specially crafted Javascript code inside a malicious PDF document can trigger this vulnerability, which can lead to memory corruption and result in arbitrary code execution. An attacker needs ...

Code injection

fastbots is a library for fast bot and scraper development using selenium and the Page Object Model POM design. Prior to version 0.1.5, an attacker could modify the locators.ini locator file with python code that without proper validation it's executed and it could lead to rce. The vulnerability ...

CVE-2023-48699 fastbots Eval Injection vulnerability

fastbots is a library for fast bot and scraper development using selenium and the Page Object Model POM design. Prior to version 0.1.5, an attacker could modify the locators.ini locator file with python code that without proper validation it's executed and it could lead to rce. The vulnerability ...

discord-musicbot (>=0.0.2.dev20170604, <=0.0.3.dev20170604), germanium (>=2.0.6, <=2.0.8) +6 more potentially affected by CVE-2023-5590 via selenium (3.4.3)

selenium PYPI version 3.4.3 is affected by a known vulnerability. The following packages have a transitive dependency on selenium and may be impacted: - discord-musicbot =0.0.2.dev20170604, =2.0.6, =1.1.0, =0.2.3, =1.4.0, =0.8.0, =0.1.0a88, =0.1.0b10 Source cves: CVE-2023-5590 Source advisory:...

page-object (0.2.2) potentially affected by CVE-2023-5590 via selenium (3.4.0)

selenium PYPI version 3.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on selenium and may be impacted: - page-object 0.2.2 Source cves: CVE-2023-5590 Source advisory: OSV:PYSEC-2023-206...

page-object (0.2.2) potentially affected by CVE-2022-28108 via selenium (3.4.0)

selenium PYPI version 3.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on selenium and may be impacted: - page-object 0.2.2 Source cves: CVE-2022-28108 Source advisory: OSV:PYSEC-2022-43167...

Foxit PDF Editor for Mac < 11.1.1 Multiple Vulnerabilities

According to its version, the Foxit PDF Editor for Mac application previously named Foxit PhantomPDF for Mac installed on the remote macOS host is prior to 11.1.1. It is, therefore affected by multiple vulnerabilities: - An out-of-bounds read error exists in Foxit PDF Editor for Mac due to the...

django-cms -- XSS Vulnerability

Cross-site scripting XSS vulnerability Jonas Obrist reports: The security issue allows users with limited admin access to elevate their privileges through XSS injection using the pageattribute template tag. Only users with admin access and the permission to edit at least one django CMS page objec...