Xupeng

**Name of the Vulnerable Software and Affected Versions** Foxit PDF Editor/Reader (affected versions not specified) **Description** An issue exists where the application fails to perform proper type checking when parsing a PDF containing an abnormal annotation referenced by other objects. This type confusion leads to an application crash. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** The product name cannot be determined (affected versions not specified) **Description** A crash occurs when the application opens a PDF file and JavaScript deletes PDF fields. The subsequent logic continues to use old field pointers, leading to invalid pointer references. A pointer is a variable that stores the memory address of another value. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Foxit PDF Editor/Reader (affected versions not specified) **Description** An issue occurs when the application opens a PDF and JavaScript performs operations on the page and document. This causes page-related objects to lose synchronization, while the renderer continues to rely on an outdated page count, leading to an application crash due to out-of-bounds access (a condition where the program reads or writes data outside the intended memory boundary). **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Foxit PDF Editor/Reader (affected versions not specified) **Description** A use-after-free issue occurs when the application opens a PDF and JavaScript modifies the form. Due to incomplete lifecycle management and a lack of null value validation for related objects on the page, the application continuously dereferences invalid objects during page state changes, resulting in a crash. Use-after-free is a condition where a program continues to use a pointer after it has been freed, which can lead to instability or memory corruption. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Foxit PDF Editor/Reader (affected versions not specified) **Description** During page opening and form formatting, a JavaScript reentrancy—a situation where a function is interrupted and called again before its first execution completes—leads to an inconsistent document status. This causes the application to use outdated page information and attempt to access invalid memory addresses, resulting in an application crash. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Foxit PDF Editor/Reader (affected versions not specified) **Description** A use-after-free issue occurs when JavaScript resets a form. The synchronization process lacks re-entry protection and object lifecycle verification, which causes the control pointer to fail during the traversal process. The application then continues to dereference the failed pointer, leading to a crash.

**Name of the Vulnerable Software and Affected Versions** Foxit PDF Editor/Reader (affected versions not specified) **Description** When opening a PDF, the application fails to validate abnormal annotation relationships and field combinations while traversing and building annotation elements related to hyperlinks. This causes internal objects to enter an invalid state, leading to an invalid pointer write during the destruction phase, which results in an application crash. This is a use-after-free issue, which occurs when a program continues to use a pointer after it has been freed. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Foxit PDF Editor/Reader (affected versions not specified) **Description** An issue exists where the application fails to perform proper argument validation when processing abnormally constructed objects. When JavaScript triggers signature verification, the signature plugin does not validate the abnormal string during the copying process, which leads to an application crash. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Foxit PDF Editor/Reader (affected versions not specified) **Description** The application experiences a use-after-free condition where it re-enters the document structure during field processing and deletes the current page. The system then attempts to continue using field objects that were obtained prior to the deletion, resulting in an illegal read and a subsequent application crash. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Foxit PDF Editor/Reader (affected versions not specified) **Description** Insufficient object type and argument checks occur when the application opens a PDF file and JavaScript writes annotation attributes. This leads to damage in the internal structure of the annotations, causing the application to crash during the subsequent release process. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Foxit PDF Editor/Reader (affected versions not specified) **Description** An issue occurs when the application opens a PDF file and a script resets the annotation status, followed by an additional action that triggers the reset form event. During the re-entry process, the application accesses invalid objects, leading to a crash. This is caused by a Use-After-Free condition, which happens when a program continues to use a pointer after it has been freed, potentially leading to memory corruption. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Foxit PDF Editor/Reader (affected versions not specified) **Description** An issue occurs when the application opens a PDF and JavaScript resets the form fields, causing the script to re-enter the interface. This process damages the underlying native object, and because the application fails to perform proper validation, a subsequent function call on the damaged object results in an application crash. This is a use-after-free condition, which happens when a program continues to use a pointer after it has been freed. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Foxit PDF Editor/Reader (affected versions not specified) **Description** An issue occurs when the application opens a PDF file. The construction process for the cloud-like appearance fails to implement proper upper limits and consistency checks. This leads to out-of-bounds access to the underlying array, which results in an application crash. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** code-projects Online Job Search Engine version 1.0 **Description** A SQL injection issue exists in the Online Job Search Engine 1.0, specifically within the `/searchjob.php` file. The `txtspecialization` parameter is susceptible to manipulation, allowing for the execution of arbitrary SQL commands. This vulnerability is remotely exploitable and does not require authentication. The exploit has been publicly disclosed. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.