DocViewerExploitApp

DocViewerExploit 应用 - CVE-2021-40724 这是利用 Document Viewer 的源码，由 MobileHackingLab 提供。 关于存在漏洞的应用 这是一个针对 MobileHackingLab DocumentViewer Android 应用动态代码加载 RCE 挑战 的漏洞利用应用。 该挑战模拟了 Adobe Acrobat Reader Android 应用中发现的 CVE-2021-40724 漏洞。 该应用从库文件动态加载代码，但由于应用处理传入 URI 的方式（使用 getLastPathSegment）存在 LFI 漏洞。...

CVE-2021-40724

creationtimestamp| type| source ---|---|--- 2021-10-15 18:28:57+00:00| seen| https://t.me/cibsecurity/30644 2022-01-16 07:02:54+00:00| published-proof-of-concept| https://t.me/cKure/8594 2022-01-21 06:24:19+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/5215 2022-02-18...

CVE-2021-40724

CVE-2021-40724 affects Adobe Acrobat Reader for Android (versions 21.8.0 and earlier). It describes a path traversal vulnerability that could allow arbitrary code execution in the context of the current user, with exploitation requiring the user to open a malicious file. Multiple connected source...

CVE-2021-40724 Adobe Acrobat Reader Android Abritrary Code Execution Vulnerability

Acrobat Reader for Android versions 21.8.0 and earlier are affected by a Path traversal vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that...