CVE-2010-1240

CVE-2010-1240 PDF启动操作研究工具 用于演示 Adobe Reader 中 CVE-2010-1240 漏洞（通过恶意 PDF 启动操作）的教育研究工具。 ⚠️ 免责声明 本工具严格用于教育目的 和安全研究 ，旨在演示 CVE-2010-1240 漏洞。仅应在受控环境中使用，以学习 PDF 安全机制和漏洞研究。 请勿将此工具用于恶意目的。 📋 描述 本项目演示了 CVE-2010-1240 ，这是 Adobe Reader 中一个通过恶意 PDF 启动操作实现任意代码执行的关键漏洞。该漏洞影响 Adobe Reader 和 Acrobat 9.3.3 及 8.2.3...

CVE-2011-2461_Magento_Patch

CVE-2011-2461MagentoPatch 由 Edmonds Commerce 此CVE与Magento使用的Adobe Flex .swf文件中的CSRF漏洞有关。 您可以在此处找到有关该CVE的更多信息： Peter O'Callaghan - 通过Adobe Flex的Magento CSRF漏洞 Minded Security - 旧事重提，CVE-2011-2461卷土重来！ Adobe - Flex安全问题APSB11-25 文件 此仓库包含editor.swf、uploader.swf和uploaderSingle.swf的修补版本。 安装...

aem-xss

Insignias Licencia MIT Instalación...

Imperva Customers Protected Against StyleSmuggler (CVE-2026-75650) in Adobe Commerce and Magento Open Source

TL;DR:CVE-2026-75650 , dubbed StyleSmuggler, is a critical vulnerability affecting Adobe Commerce and Magento Open Source. The vulnerability allows an unauthenticated attacker to inject malicious PHP code into Magento’s template system and achieve remote code execution. Adobe assigned the...

CVE-2009-2265

CVE-2009-2265 - Adobe ColdFusion 8 Subida de Archivos RCE Una implementación en Rust del POC para el exploit CVE-2009-2265, dirigida a Adobe ColdFusion 8. Resumen de la Vulnerabilidad Esta vulnerabilidad permite a un atacante no autenticado subir archivos arbitrarios a un directorio accesible des...

Adobe Commerce (Magento) - Remote Code Execution

Adobe Commerce versions 2.4.3-p1 and earlier and 2.3.7-p2 and earlier are affected by an improper input validation vulnerability during the checkout process. Exploitation of this issue does not require user interaction and could result in arbitrary code execution. id: CVE-2022-24086 info: name:...

Adobe ColdFusion - Arbitrary File Read

ColdFusion versions 2023.6, 2021.12 and earlier are affected by an Improper Access Control vulnerability that could lead to arbitrary file system read. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized access to sensitive files and perform arbitrary...

Adobe Coldfusion - Cross-Site Scripting

Adobe ColdFusion versions 2023.5 and earlier and 2021.11 and earlier are affected by a reflected Cross-Site Scripting XSS vulnerability. If an unauthenticated attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within th...

CVE-2021-21017

CVE-2021-21017 Otro bug de Byte Order Mark en Adobe Reader : root@kitploit: IA32 plugin, ver. 2020.013.20074. char cdecl FUN2581894cchar baseurl,LPCSTR relurl ............................................................ ............................................................ if baseurl != ch...

blue-team-capstone

Blue Team Capstone Project Overview This project is a Blue Team cybersecurity capstone focused on vulnerability assessment, risk evaluation, and remediation. The assessment focuses on CVE-2009-0658 , a vulnerability affecting Adobe Acrobat and Reader. The goal of the project was to evaluate the...

CVE-2026-34621_PDF_SAMPLE

Análisis Técnico de una Muestra de JavaScript de Adobe Acrobat PDF Multi-Etapa Resumen Este repositorio publica un análisis de ingeniería inversa centrado en el código de una muestra de PDF malicioso que incrusta JavaScript de Adobe Acrobat por etapas. La muestra analizada utiliza un campo de...

cve_2026_34621_advanced

Generador Avanzado de Exploits CVE-2026-34621 Un generador de exploits sofisticado y multiplataforma para CVE-2026-34621 – una vulnerabilidad crítica de contaminación de prototipos en Adobe Acrobat y Reader que permite el escape del sandbox y la ejecución arbitraria de código en Windows y macOS. ...

Vulnerabilities in Adobe Experience Manager

Adobe has identified several vulnerabilities in Adobe Experience Manager. Adobe Experience Manager contains several Cross-Site Scripting XSS vulnerabilities, including DOM-based and stored XSS vulnerabilities. These vulnerabilities allow attackers to inject and execute malicious JavaScript code...

Vulnerabilities in Adobe ColdFusion

Adobe has identified several vulnerabilities in Adobe ColdFusion. These vulnerabilities include a stored Cross-Site Scripting XSS vulnerability, where an attacker with low privileges can inject malicious scripts into form fields, which are then executed in the user’s browser. There is also a...

stylesmuggler-ioc-toolkit

Kit de IOC StyleSmuggler — CVE-2026-75650 Día cero de Magento · Día cero de Adobe Commerce · CVE-2026-75650 · APSB26-146 · VULN-39341 · RCE no autenticado · malware de Magento · eliminación de backdoor de Magento · vulnerabilidad de Magento 2.4.9 · implante Rust · inyección de estilos GraphQL · w...

CVE-2023-21608

CVE-2023-21608 Adobe Acrobat Reader - CVE-2023-21608 - 远程代码执行漏洞利用 博客 https://medium.com/@Kushagra007/adobe-acrobat-reader-resetform-cagg-uaf-rce-exploit-cve-2023-21608-652624346c8f 演示 https://user-images.githubusercontent.com/86009160/218384322-c012229a-1a29-4b2d-b107-b55747e4ee10.mp4...

SessionReaper-CVE-2025-54236

SessionReaper — CVE-2025-54236 针对 CVE-2025-54236 （"SessionReaper"）的统一 PoC，该漏洞是 Magento 2 / Adobe Commerce 中通过 REST API 的嵌套反序列化实现的关键未认证 RCE。 CVSS： 9.1（严重） 根本原因： ServiceInputProcessor 中的输入验证不当（CWE-20）；利用原语为不安全的反序列化（CWE-502） 原始研究员： Daniel "Blaklis" Le Gall（通过 HackerOne 负责任的披露） 命名者： Sansec 修复版本： Adob...

CVE-2018-15982

CVE-2018-15982 Flash sources for CVE-2018-15982 used by NK this is a dump of a fully weaponized activex obj used by NK https://threatpost.com/adobe-patches-zero-day-vulnerability-in-flash-player/139629/ Payloads are in Class 6 and 7...

magento-cve-2024-34102-exploit-cosmicstring

CVE 2024-34102 - Vulnerabilidad XXE CosmicSting en Adobe Commerce y Magento - Material Educativo Este repositorio contiene diapositivas y material de demostración para mi charla sobre la última vulnerabilidad de entidad externa XML XXE en Adobe Commerce y Magento. El propósito de estos materiales...

Remediate-AdobeAcrobat-CVE-2026-34621

Intune Proactive Remediation – Aplicación de versión de Adobe Acrobat/Reader CVE-2026-34621 Este repositorio contiene scripts de Proactive Remediation de Microsoft Intune para reducir la exposición a vulnerabilidades de Adobe Acrobat/Reader mediante: 1. Aplicar una versión mínima parcheada detect...