Denial of Service Vulnerability in Phantom Route X32G

The X32G is a wireless router. A denial of service vulnerability exists in the Phantom Router X32G. An attacker can exploit the vulnerability to cause a denial of service to the target router and its upper tier carrier's router by sending a carefully constructed packet to a specific destination...

CVE-2018-20313

Foxit Reader before 9.5, and PhantomPDF before 8.3.10 and 9.x before 9.5, has a proxyPreviewAction race condition that can cause a stack-based buffer overflow or an out-of-bounds read...

PT-2021-8830 · Wondershare +6 · Pdfelement6 Pro +10

Name of the Vulnerable Software and Affected Versions: Foxit Reader versions prior to 9.4 PhantomPDF versions prior to 8.3.9 and 9.x prior to 9.4 eXpert PDF 12 Ultimate affected versions not specified Expert PDF Reader affected versions not specified Nitro Pro affected versions not specified Nitr...

Directory Traversal Vulnerability in Phantom Route X18G Web Server

Phantom Router X18G is a router from Shenzhen Meike Star Communication Technology Co. A directory traversal vulnerability exists in the Mirage Router X18G Web Server, which can be exploited by an attacker to obtain sensitive information...

Directory Traversal Vulnerability in Phantom Route X18G Upnp Server

Phantom Router X18G is a router from Shenzhen Meike Star Communication Technology Co. A directory traversal vulnerability exists in the Mirage Router X18G Upnp Server, which can be exploited by an attacker to obtain sensitive information...

Foxit Reader和Foxit PhantomPDF 代码问题漏洞

Foxit Reader and Foxit PhantomPDF are both Chinese Foxit Foxit company a PDF document reader. A security vulnerability exists in Foxit Reader and PhantomPDF, which can be exploited by attackers to spoof authenticated PDF documents via a malicious annotation attack, as the product does not take in...

The vulnerability of the Foxit Reader text viewer program and the Foxit PhantomPDF PDF editing program, related to the use after release, allows a violator to execute arbitrary code.

The vulnerability of the Foxit Reader text viewer program and the Foxit PhantomPDF PDF editing program is related to its use after release. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code...

CVE-2020-28203

An issue was discovered in Foxit Reader and PhantomPDF 10.1.0.37527 and earlier. There is a null pointer access/dereference while opening a crafted PDF file, leading the application to crash denial of service...

@dfeidao/server (>=4.5.201902251312, <=4.6.201910181238), @fabrix/spool-pdf (>=1.5.0-alpha.1, <=1.5.0) +27 more potentially affected by CVE-2020-7763 via phantom-html-to-pdf (>=0.1.2, <=0.6.1)

phantom-html-to-pdf NPM version =0.1.2, =4.5.201902251312, =1.5.0-alpha.1, =5.0.201901071713, =5.0.201812141540, =1.0.1-server20190117165116, =1.0.201901260938, =1.0.0, =1.0.0, =3.0.0-beta.1, =3.0.0-beta.1, =2.0.0, =1.0.202005312012, =1.0.3, =1.0.7, =1.6.8 and more Source cves: CVE-2020-7763 Sour...

GHSA-6H7F-QWQM-35PP Arbitrary File Read in phantom-html-to-pdf

This affects the package phantom-html-to-pdf before 0.6.1. PoC js var fs = require'fs' var conversion = require"phantom-html-to-pdf"; conversion.allowLocalFilesAccess = false conversion html: "document.writewindow.location='c:/windows/win.ini'" , functionerr, pdf var output =...

Arbitrary File Read in phantom-html-to-pdf

This affects the package phantom-html-to-pdf before 0.6.1. PoC js var fs = require'fs' var conversion = require"phantom-html-to-pdf"; conversion.allowLocalFilesAccess = false conversion html: "document.writewindow.location='c:/windows/win.ini'" , functionerr, pdf var output =...

Arbitrary File Read

phantom-html-to-pdf is vulnerable to arbitrary file read. An attacker is able to gain access and read arbitrary files on the host by specifying the file path...

CVE-2020-7763

This affects the package phantom-html-to-pdf before 0.6.1...

CVE-2020-7763

This affects the package phantom-html-to-pdf before 0.6.1...

Design/Logic Flaw

This affects the package phantom-html-to-pdf before 0.6.1...

CVE-2020-7763

CVE-2020-7763 affects the npm package phantom-html-to-pdf and is an arbitrary file read vulnerability present in versions before 0.6.1. The weakness is demonstrated by a PoC (in the GitHub advisory and Snyk reference) that bypasses file access restrictions to read local host files (e.g., using wi...

CVE-2020-7763 Arbitrary File Read

This affects the package phantom-html-to-pdf before 0.6.1...

CVE-2020-7763: Improper Limitation of a Pathname to a Restricted Directory

This affects the package phantom-html-to-pdf before 0.6.1...

@dfeidao/server (>=4.5.201902251314, <=4.6.201910181238), @fabrix/spool-pdf (>=1.5.0-alpha.1, <=1.5.0) +23 more potentially affected by CVE-2020-7763 via phantom-html-to-pdf (>=0.1.2, <=0.6.0)

phantom-html-to-pdf NPM version =0.1.2, =4.5.201902251314, =1.5.0-alpha.1, =5.0.201901071713, =5.0.201812141540, =1.0.1-server20190117165116, =1.0.201901260938, =2.0.0, =1.0.202005312012, =1.0.3, =0.1.0, =0.4.0, =1.0.1, =1.0.3 - jsreport-fop-xsl-pdf 1.0.4 and more Source cves: CVE-2020-7763 Sourc...

Arbitrary File Read

Overview phantom-html-to-pdf is a Convert html to pdf using phantomjs Affected versions of this package are vulnerable to Arbitrary File Read. PoC var fs = require'fs' var conversion = require"phantom-html-to-pdf"; conversion.allowLocalFilesAccess = false conversion html:...