CVE-2024-25938

A use-after-free vulnerability exists in the way Foxit Reader 2024.1.0.23997 handles a Barcode widget. A specially crafted JavaScript code inside a malicious PDF document can trigger reuse of a previously freed object, which can lead to memory corruption and result in arbitrary code execution. An...

CVE-2024-25648

A use-after-free vulnerability exists in the way Foxit Reader 2024.1.0.23997 handles a ComboBox widget. A specially crafted JavaScript code inside a malicious PDF document can trigger reuse of a previously freed object, which can lead to memory corruption and result in arbitrary code execution. A...

CVE-2024-25575

A type confusion vulnerability vulnerability exists in the way Foxit Reader 2024.1.0.23997 handles a Lock object. A specially crafted Javascript code inside a malicious PDF document can trigger this vulnerability, which can lead to memory corruption and result in arbitrary code execution. An...

CVE-2024-47810

A use-after-free vulnerability exists in the way Foxit Reader 2024.3.0.26795 handles a 3D page object. A specially crafted Javascript code inside a malicious PDF document can trigger this vulnerability, which can lead to memory corruption and result in arbitrary code execution. An attacker needs ...

CVE-2024-29072

A privilege escalation vulnerability exists in the Foxit Reader 2024.2.0.25138. The vulnerability occurs due to improper certification validation of the updater executable before executing it. A low privilege user can trigger the update action which can result in unexpected elevation of privilege...

CVE-2024-49576

A use-after-free vulnerability exists in the way Foxit Reader 2024.3.0.26795 handles a checkbox CBFWidget object. A specially crafted Javascript code inside a malicious PDF document can trigger this vulnerability, which can lead to memory corruption and result in arbitrary code execution. An...

CVE-2024-51696

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ben.moody Content Syndication Toolkit Reader content-syndication-toolkit-reader allows Reflected XSS.This issue affects Content Syndication Toolkit Reader: from n/a through = 1.5...

CVE-2024-28888

A use-after-free vulnerability exists in the way Foxit Reader 2024.1.0.23997 handles a checkbox field object. A specially crafted Javascript code inside a malicious PDF document can trigger this vulnerability, which can lead to memory corruption and result in arbitrary code execution. An attacker...

CVE-2024-53718

Cross-Site Request Forgery CSRF vulnerability in Eric Teubert Multi Feed Reader multi-feed-reader allows Stored XSS.This issue affects Multi Feed Reader: from n/a through = 2.2.4...

WordPress Stylish Google Sheet Reader plugin <= 4.0 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by Jorge Diaz ddiax in WordPress Plugin Stylish Google Sheet Reader versions = 4.0...

Malicious code in whatsapp-reader (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-883 Malicious code in whatsapp-reader (npm)

--- -= Per source details. Do not edit below this line.=-...

CVE-2024-56966

An issue in Shanghai Xuan Ting Entertainment Information & Technology Co., Ltd Qidian Reader iOS 5.9.384 allows attackers to access sensitive user information via supplying a crafted link...

Xuan Ting Qidian Reader 安全漏洞

Xuan Ting Qidian Reader is a reading program from Xuan Ting Entertainment Xuan Ting, a Chinese company. A security vulnerability exists in Xuan Ting Qidian Reader iOS version 5.9.384, which can be exploited by an attacker to access sensitive user information by providing a crafted link...

The vulnerability of the PDF document viewing program Foxit PDF Reader (formerly Foxit Reader) lies in its memory usage after decompression. This allows a hacker to execute arbitrary code.

The vulnerability of the PDF document viewing program Foxit PDF Reader formerly Foxit Reader relates to the use of memory after deallocation. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code using a specially created JavaScript script...

CVE-2024-56966

An issue in Shanghai Xuan Ting Entertainment Information & Technology Co., Ltd Qidian Reader iOS 5.9.384 allows attackers to access sensitive user information via supplying a crafted link...

CVE-2024-56966

An issue in Shanghai Xuan Ting Entertainment Information & Technology Co., Ltd Qidian Reader iOS 5.9.384 allows attackers to access sensitive user information via supplying a crafted link...

CVE-2024-56966

CVE-2024-56966 affects Shanghai Xuan Ting Entertainment Information & Technology Co., Ltd. Qidian Reader for iOS, version 5.9.384. The connected documents consistently describe a vulnerability where a crafted link allows an attacker to access sensitive user information, indicating a confidentiali...

PT-2025-3367 · Unknown · Qidian Reader

Name of the Vulnerable Software and Affected Versions: Qidian Reader iOS version 5.9.384 Description: The issue allows attackers to access sensitive user information via supplying a crafted link. Recommendations: For Qidian Reader iOS version 5.9.384, consider avoiding the use of crafted links...

The vulnerability of the PDF document viewing program Foxit PDF Reader (formerly Foxit Reader) lies in the incorrect handling of links before accessing the file. This allows attackers to exploit this flaw to gain increased privileges.

The vulnerability of the PDF document viewing program Foxit PDF Reader formerly Foxit Reader is related to an incorrect definition of the link before accessing the file. Exploiting this vulnerability can allow attackers to enhance their privileges...