CVE-2026-77989

This is a reflected XSS in the Joomla Events Manager extension prior to version 5.0.1 . The root cause lies in the buildCurrentPdfLink function, which copies the current request query string into the PDF button URL, and pdfbutton() echoes it without escaping, creating a reflected XSS vector via t...

CVE-2026-77989 Joomla Extension - joomlaeventmanager.net - Reflected XSS via the PDF export link in Joomla Events Manager < 5.0.1

Joomla Extension - joomlaeventmanager.net - Reflected XSS via the PDF export link in Joomla Events Manager 5.0.1 - buildCurrentPdfLink copies the current request query string into the PDF button URL, and pdfbutton echoes it unescaped, leading to an reflected XSS vector...

cve-2025-54988-VulnTikaProject

Apache Tika 漏洞测试项目 这是一个使用 Apache Tika 3.2.1 进行文档处理和文本提取的 Spring Boot 应用程序。 前提条件 需要 Docker 用法 ./start-app.sh 或 docker compose up -d CVE 执行 将你的恶意 PDF（https://github.com/mgthuramoemyint/POC-CVE-2025-54988）上传到端点以进行提取。 curl -X POST -F "[email protected]" http://127.0.0.1:8080/api/extract-text cur...

Apache Tika - XML External Entity Injection

Apache Tika tika-core 1.13-3.2.1, tika-pdf-module 2.0.0-3.2.1, and tika-parsers 1.13-1.28.5 contain an XML External Entity injection caused by processing crafted XFA files inside PDFs, letting attackers perform XXE attacks remotely, exploit requires crafted PDF input. id: CVE-2025-66516 info: nam...

CVE-2025-25620

CVE-2025-25620 Unifiedtransform v2.0 ist anfällig für Stored Cross-Site Scripting XSS in der Funktion „Create Assignment“, wodurch Angreifer bösartige Skripte im Kontext der Sitzungen anderer Benutzer ausführen können. Anbieter: Unifiedtransform PoC Schritt 1: Melden Sie sich als Lehrer bei der...

CVE-2025-66516-Writeup-POC

CVE-2025-66516: Kritische XXE-Sicherheitslücke in Apache Tika Zusammenfassung CVE-2025-66516 ist eine kritische XML-External-Entity-XXE-Einschleusungssicherheitslücke in Apache Tika mit einem CVSS-Score von 10,0 maximale Schwere. Die Sicherheitslücke ermöglicht es entfernten Angreifern, beliebige...

EUVD-2026-66821

Analyzing a PDF with a deeply nested or cyclic table of contents can cause a StackOverflowError in the ingestion thread. Spring AI 2.0.0 Spring AI 1.1.0 - 1.1.8 Spring AI 1.0.0 - 1.0.9...

CVE-2010-1240

CVE-2010-1240 - Incorporando backdoor em um PDF ⚠️ Apenas para fins educacionais e de pesquisa de segurança autorizada Descrição O Adobe Reader e o Acrobat 9.x anteriores à versão 9.3.3, e 8.x anteriores à 8.2.3 no Windows e Mac OS X, não restringem o conteúdo de um campo de texto na caixa de...

CVE-2024-27665

CVE-2024-27665 O Unifiedtransform v2.X é vulnerável a Cross-Site Scripting XSS Armazenado através do recurso de upload de arquivos no módulo Syllabus. Fornecedor: https://github.com/changeweb/Unifiedtransform PoC Passo 1: Faça login no aplicativo e navegue até o módulo Acadêmico. Passo 2: Crie...

CVE-2026-34621

CVE-2026-34621 : Catena di Prototype Pollution e Iniezione JS in Adobe Acrobat 2026 — PoC di Ricerca Panoramica Questo repository contiene materiale di ricerca e codice proof-of-concept sviluppato durante l'analisi della catena di exploit in-the-wild di Adobe Acrobat Reader 2026 che coinvolge:...

CVE-2026-47851

Analyzing a PDF with a deeply nested or cyclic table of contents can cause a StackOverflowError in the ingestion thread. Spring AI 2.0.0 Spring AI 1.1.0 - 1.1.8 Spring AI 1.0.0 - 1.0.9...

Recon-Scan

Recon-Scan ReconScan é um scanner de reconhecimento passivo de código aberto com backend FastAPI, pipeline de worker assíncrono e frontend de página única. Você pode verificar o site implantado em https://recon-scan.vercel.app/ O objetivo é sinal rápido: execute uma varredura, obtenha resultados...

CVE-2022-28672

CVE-2022-28672 CVE-2022-28672 Vulnerabilidade Foxit PDF Reader - UaF - RCE - JIT Spraying IOC de omissão de autenticação do FortiOS, FortiProxy e FortiSwitchManager CVE-2022-40684 Introdução O recente CVE FortiOS / FortiProxy / FortiSwitchManager tem sido explorado na natureza. Gostaríamos de...

unredactor

Un-Redactor Uno strumento di modifica PDF che ti permette di rimuovere le oscurazioni, sovrascrivere con le tue informazioni sopra una casella di oscuramento ed estrarre tutto il testo. Questo strumento è pensato per scopi forensi. Non "recupera" dati realmente distrutti dagli strumenti di...

CVE-2017-10952

CVE-2017-10952 Dies ist ein Beispiel auf hoher Ebene für einen lokalen Code-Ausführungsangriff auf den Foxit PDF Reader. Details zu diesem Angriff finden Sie hier 1. Ich habe die Textbeschreibung dieser Schwachstelle aus 1 hier kopiert, um die Beschreibung im Laufe der Zeit zu erhalten – die...

CVE-2026-47851

CVE-2026-47851 is a denial-of-service vulnerability in the Spring AI PDF Document Reader . When analyzing a PDF whose table of contents (outline tree) is deeply nested or cyclic, unbounded recursion triggers a StackOverflowError in the ingestion thread. The attack requires no privileges or user i...

CVE-2026-47851 Unbounded recursion over attacker-controlled PDF outline tree in Spring AI PDF Document Reader

Analyzing a PDF with a deeply nested or cyclic table of contents can cause a StackOverflowError in the ingestion thread. Spring AI 2.0.0 Spring AI 1.1.0 - 1.1.8 Spring AI 1.0.0 - 1.0.9...

CanaryTokenScanner

Scanner per CanaryToken / HoneyToken Rileva URL sospetti inclusi CanaryTokens all'interno di documenti Microsoft Office e PDF. Formati supportati: Office Open XML: .docx, .xlsx, .pptx .pdf .zip archivi generici Perché esiste CanaryTokens e HoneyTokens e altri URL di tracciamento o dannosi sono...

CVE-2025-55853

CVE-2025-55853 - Inclusioni Locali di File tramite Server Side Request Forgery SoftVision webPDF prima della versione 10.0.2 è vulnerabile a Server-Side Request Forgery SSRF. Informazioni Questo PoC per CVE-2025-55853 dimostra Server-Side Request Forgery nel tool webPDF webPDF. utilizzato per...

All-CEHv13-Module-wise-PDF-Reports

Banner dei Moduli CEHv13 📁 Moduli CEHv13 - Raccolta di Report PDF 📁 Struttura del Repository CEHv13-Modules/ ├── Module-01-Introduction/ │ └── Module-01-Introduction.pdf ├── Module-02-Footprinting/ │ └── Module-02-Footprinting.pdf ├── Module-03-Scanning/ │ └── Module-03-Scanning.pdf ├──...