Lucene search
+L

88 matches found

Github Security Blog
Github Security Blog
•added 2026/10/27 3:12 p.m.•4 views

Malware in paychex-pdftron

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

5.9AI score
SaveExploits0References1Affected Software1
Github Security Blog
Github Security Blog
•added 2026/10/25 3:31 p.m.•21 views

Malicious code in paychex-pdftron (npm)

Source: amazon-inspector d32ec8b2ca67156d94943a27b9b7c98f1888d530d7a6f947e49b40f52ec054b3 [email protected] ships an empty stub module.exports = and declares its sole dependency ltidisafe as a bare HTTPS tarball URL https://ltidi.storage.googleapis.com/depenconf/ltidisafe-4.0.5.tgz rather th...

5.9AI score
SaveExploits0References3Affected Software1
Snyk
Snyk
•added 2026/10/25 3:31 p.m.•4 views

Malicious Package

Overview paychex-pdftron is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

9.8CVSS5.9AI score
SaveExploits0References2
osv_mal
osv_mal
•added 2026/10/25 2:42 p.m.•24 views

MAL-2026-18289 Malicious code in paychex-pdftron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d32ec8b2ca67156d94943a27b9b7c98f1888d530d7a6f947e49b40f52ec054b3 [email protected] ships an empty stub module.exports = and declares its sole dependency ltidisafe as a bare HTTPS tarball URL...

5.9AI score
SaveExploits0References2
OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/10/25 2:42 p.m.•22 views

Malicious code in paychex-pdftron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d32ec8b2ca67156d94943a27b9b7c98f1888d530d7a6f947e49b40f52ec054b3 [email protected] ships an empty stub module.exports = and declares its sole dependency ltidisafe as a bare HTTPS tarball URL...

5.9AI score
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2026/01/07 9:49 a.m.•18 views

CVE-2022-27527

A Memory Corruption vulnerability may lead to code execution through maliciously crafted DLL files. It was fixed in PDFTron earlier than 9.0.7 version in Autodesk Navisworks 2022, and 2020...

7.8CVSS7.6AI score0.00506EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•30 views

EUVD-2021-27345

Malware in sbrugna...

7.8CVSS7.4AI score0.01604EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•21 views

EUVD-2021-27346

Malware in sbrugna...

7.8CVSS7.8AI score0.01497EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•25 views

EUVD-2021-25668

Malware in sbrugna...

6.1CVSS6.3AI score0.01116EPSS
SaveExploits1References3
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•23 views

EUVD-2022-41562

Malicious code in bioql PyPI...

8.8CVSS8AI score0.00659EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•23 views

EUVD-2022-29712

Malicious code in bioql PyPI...

7.8CVSS7.4AI score0.00581EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•19 views

EUVD-2022-32359

Malicious code in bioql PyPI...

7.8CVSS7.8AI score0.0079EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•21 views

EUVD-2022-32028

Malicious code in bioql PyPI...

7.8CVSS7.4AI score0.00506EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•18 views

EUVD-2022-41565

Malicious code in bioql PyPI...

7.5CVSS7.3AI score0.00447EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/22 10:39 p.m.•16 views

CVE-2022-27871

Autodesk AutoCAD product suite, Revit, Design Review and Navisworks releases using PDFTron prior to 9.1.17 version may be used to write beyond the allocated buffer while parsing PDF files. This vulnerability may be exploited to execute arbitrary code...

7.8CVSS8.3AI score0.0079EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/22 6:44 p.m.•22 views

CVE-2021-40161

A Memory Corruption vulnerability may lead to code execution through maliciously crafted DLL files through PDFTron earlier than 9.0.7 version...

7.8CVSS8.1AI score0.01497EPSS
SaveExploits0
RedhatCVE
RedhatCVE
•added 2025/05/22 6:43 p.m.•23 views

CVE-2021-39307

PDFTron's WebViewer UI 8.0 or below renders dangerous URLs as hyperlinks in supported documents, including JavaScript URLs, allowing the execution of arbitrary JavaScript code...

6.1CVSS6.5AI score0.01116EPSS
SaveExploits1References1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2024/06/25 1:30 p.m.•15 views

Malicious code in PDFTron.NETCore.Windows.x64.Net (NuGet)

--- -= Per source details. Do not edit below this line.=-...

5.3AI score
SaveExploits0
osv_cve
osv_cve
•added 2022/10/31 9:15 p.m.•21 views

CVE-2022-39018

Broken access controls on PDFtron data in M-Files Hubshare before 3.3.11.3 allows unauthenticated attackers to access restricted PDF files via a known URL...

7.5CVSS5.8AI score0.00523EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2022/10/31 9:15 p.m.•22 views

CVE-2022-39019

Broken access controls on PDFtron WebviewerUI in M-Files Hubshare before 3.3.11.3 allows unauthenticated attackers to upload malicious files to the application server...

7.5CVSS5.8AI score0.00447EPSS
SaveExploits0References1
Rows per page
Query Builder