CVE-2025-66516-Writeup-POC

CVE-2025-66516：Apache Tika 中的严重 XXE 漏洞 执行摘要 CVE-2025-66516 是 Apache Tika 中的一个严重 XML 外部实体（XXE）注入漏洞，其 CVSS 评分为 10.0 （最高严重性）。该漏洞允许远程攻击者通过上传包含恶意 XFA（XML Forms Architecture，XML 表单架构）内容的特制 PDF 文档，读取任意文件、执行服务端请求伪造（SSRF）并窃取敏感数据。 属性| 值 ---|--- CVE ID| CVE-2025-66516 CVSS 评分| 10.0（严重） 披露日期| 2025 年 12 月 4 日...

CVE-2017-9096-iText-XXE

CVE-2017-9096 1. Creación del PDF malicioso que contiene XXE Obtén un PDF que contenga un formulario: wget https://www.pdfscripting.com/public/FreeStuff/PDFSamples/ModifySubmitExample.pdf -O input.pdf Descomprimir el PDF Para ello, debes descomprimir el PDF con qpdf --qdf --object-streams=disable...

PS-2017-13---CVE-2018-9950

Foxit Reader PDF解析越界读取信息泄露漏洞 漏洞 内存缓冲区边界内操作限制不当漏洞 漏洞描述 此漏洞允许远程攻击者在受影响的 Foxit Reader 安装上泄露敏感信息。利用此漏洞需要用户交互，即目标必须访问恶意页面或打开恶意文件。 具体缺陷存在于 PDF 文档的解析过程中。问题源于未能正确验证用户提供的数据，可能导致读取已分配对象末尾之后的数据。攻击者可结合其他漏洞利用此问题，在当前进程上下文中执行代码。 CVE ID CVE-2018-9950 厂商 www.foxitsoftware.com 产品 Foxit Reader 8.3.5.30351 及更早版本 Fox...

xpdf-docker

Xpdf Docker 镜像 此仓库包含 Xpdf 4.04 版本的 Docker 镜像，该版本存在漏洞 CVE-2022-30524。 构建镜像 📦 本仓库提供 3 种不同风格的镜像： bullseye/gcc ：Debian "bullseye"，使用 gcc 构建 bullseye/afl ：Debian "bullseye"，使用 afl-clang-fast++ 构建（调试模式） focal/afl ：Ubuntu 20.04 LTS Focal Fossa，使用 afl-clang-fast++ 构建（调试模式） 以下风格是指向其他风格的别名： bullseye →...

CVE-2026-102996 pypdf: Possible large memory usage when parsing font data

pypdf is a free and open-source pure-python PDF library. Prior to 6.18.1, a crafted PDF can provide a TrueType or Type1 simple font with an unusually large /Widths array, causing pypdf/font.py Font.collectttt1characterwidths to process entries beyond the 256 character codes meaningful for a simpl...

cve-2025-54988-VulnTikaProject

Proyecto de Prueba de Vulnerabilidad de Apache Tika Esta es una aplicación Spring Boot que utiliza Apache Tika 3.2.1 para el procesamiento de documentos y extracción de texto. Requisitos previos Tener Docker Uso ./start-app.sh o docker compose up -d Ejecución de CVE Sube tu PDF malicioso...

CentOS Linux 7 [TuxCare] Security Update: clamav / clamav-data / clamav-devel / clamav-doc / etc Multiple Vulnerabilities (CENTOS7:CLSA-2024:1732562044)

The CentOS Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS7:CLSA-2024:1732562044 advisory. - A vulnerability in the PDF parsing module of Clam AntiVirus ClamAV versions 1.4.0, 1.3.2 and prior versions, all 1.2.x versions, 1.0.6...

cisco-CVE-2023-31488

关于 安全研究员：ly1g3，ly1g3attuta.io GPG 指纹：https://keys.openpgp.org/vks/v1/by-fingerprint/5FE85CE4E8F675F5ABD2C0A33CE8BE447ED6D586 概述：通过电子邮件实现零点击 RCE 提权至 root - 远程代码执行/内存损坏/ROP 链 CVE：CVE-2023-31488 时间线： 发现 - ly1g3 报告 - ly1g3 修复 - Cisco 和 Lexmark 漏洞分析 在对 Cisco 邮件安全设备（ESA）进行模糊测试时，我在 Lexmark Perceptive...

USN-8837-1: pdfminer vulnerabilities

It was discovered that pdfminer did not safely parse specially crafted PDF files. An attacker could possibly use these issues to execute arbitrary code. CVE-2025-64512, CVE-2025-70559...

cve-2018-15968

Adobe Reader 越界读取信息泄露漏洞 漏洞 对内存缓冲区边界内操作的限制不当漏洞 漏洞描述 此漏洞允许远程攻击者在易受攻击的 Adobe Reader 安装上泄露敏感信息。利用此漏洞需要用户交互，即目标必须访问恶意页面或打开恶意 PDF 文件。 该特定缺陷存在于解析畸形 PDF 文件的过程中。问题源于对用户提供的数据缺乏正确验证，可能导致读取超出已分配对象末尾的数据。攻击者可利用此漏洞结合其他漏洞，在当前进程上下文中执行代码 。 CVE ID CVE-2018-15968 厂商 www.adobe.com 产品 Acrobat DC 2018.011.20063 及更早版本...

CVE-2025-64512-pdfminer-PoC

CVE-2025-64512 — PoC de deserialización de CMapDB en pdfminer.six Prueba de concepto de una vulnerabilidad de deserialización en pdfminer.six que conduce a la ejecución de código arbitrario al analizar un PDF manipulado. PROPÓSITO / AVISO LEGAL Este repositorio se proporciona solo con fines...

Foxit PDF Reader PDF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsi...

CVE-2026-92177

pdfforge PDF Architect PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of pdfforge PDF Architect. User interaction is required to exploit this vulnerability in that the target...

CVE-2026-92178

pdfforge PDF Architect PDF File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of pdfforge PDF Architect. User interaction is required to exploit this vulnerability in that the target mu...

CVE-2026-92179

pdfforge PDF Architect PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of pdfforge PDF Architect. User interaction is required to exploit this vulnerability in that the target...

EUVD-2026-79138

pdfforge PDF Architect PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of pdfforge PDF Architect. User interaction is required to exploit this vulnerability in that the target...

CVE-2026-92177 pdfforge PDF Architect PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

pdfforge PDF Architect PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of pdfforge PDF Architect. User interaction is required to exploit this vulnerability in that the target...

CVE-2026-92177

pdfforge PDF Architect is affected by an out-of-bounds write vulnerability in its PDF file parsing functionality. The root cause is a lack of proper validation of user-supplied data, which allows a write past the end of an allocated object. A remote attacker can leverage this flaw to execute arbi...

EUVD-2026-79137

pdfforge PDF Architect PDF File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of pdfforge PDF Architect. User interaction is required to exploit this vulnerability in that the target mu...

CVE-2026-92178 pdfforge PDF Architect PDF File Parsing Memory Corruption Remote Code Execution Vulnerability

pdfforge PDF Architect PDF File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of pdfforge PDF Architect. User interaction is required to exploit this vulnerability in that the target mu...