PT-2022-17959

Name of the Vulnerable Software and Affected Versions Akeo Consulting Rufus Executable version 3.17.1846 Akeo Consulting Rufus Portable Executable version 3.17p Description The issue allows attackers to execute arbitrary code or escalate privileges by placing a crafted x86 DLL in the same directo...

Untrusted Search Path

Description A current working directory type of DLL hijacking vulnerability is found in all executbales in ventoy-1.0.70-windows.zip, including: 1 Ventoy2Disk.exe 2 VentoyPlugson.exe 3 VentoyVlnk.exe Proof of Concept Step 1 : Craft a malicious x86 dll named as "TextShaping.dll" and place in the...

PT-2018-10706

Name of the Vulnerable Software and Affected Versions Foxit Reader version 9.0.1.1049 Description This issue allows remote attackers to disclose sensitive information on vulnerable installations. User interaction is required, where the target must visit a malicious page or open a malicious file...

PT-2018-10707

Name of the Vulnerable Software and Affected Versions Foxit Reader version 9.0.1.1049 Description This issue allows remote attackers to execute arbitrary code on vulnerable installations. User interaction is required, where the target must visit a malicious page or open a malicious file. The flaw...

PT-2018-10705

Name of the Vulnerable Software and Affected Versions Foxit Reader version 9.0.1.1049 Description This issue allows remote attackers to disclose sensitive information on vulnerable installations. User interaction is required, where the target must visit a malicious page or open a malicious file...

PT-2018-19137

Name of the Vulnerable Software and Affected Versions Foxit Reader version 9.0.1.1049 Description This issue allows remote attackers to execute arbitrary code on vulnerable installations. User interaction is required, where the target must visit a malicious page or open a malicious file. The flaw...

PT-2018-19134

Name of the Vulnerable Software and Affected Versions Foxit Reader version 9.0.1.104 Description This issue allows remote attackers to disclose sensitive information on vulnerable installations. User interaction is required, where the target must visit a malicious page or open a malicious file. T...

PT-2018-19135

Name of the Vulnerable Software and Affected Versions Foxit Reader version 9.0.1.1049 Description This issue allows remote attackers to disclose sensitive information on vulnerable installations. User interaction is required, where the target must visit a malicious page or open a malicious file...

PT-2017-8419

Name of the Vulnerable Software and Affected Versions Foxit Reader versions 7.3.4.311 and earlier Description The issue is related to a heap-based buffer overflow in the CreateFXPDFConvertor function in ConvertToPdf x86.dll, which allows remote attackers to execute arbitrary code via a large...