3182 matches found
CVE-2024-4367
CVE-2024-4367 PoC Utilizzo root@kitploit: python poc.py mal.pdf "alert'0x2r2'" Riferimenti CVE-2024-4367: Esecuzione JS arbitraria in PDF.js PDF.js PoC Scanner templates...
CVE-2025-64512
CVE-2025-64512 Esecuzione arbitraria di codice in pdfminer.six tramite input PDF appositamente creato PoC basato su https://github.com/pdfminer/pdfminer.six/security/advisories/GHSA-wf5f-4jwr-ppcp % python3 mkpickle.py Usage: mkpickle.py output Ex: mkpickle.py 'curl IP:PORT/rce' evil.pickle.gz %...
CVE-2024-4367-hands-on
!IMPORTANT Questo repository è pensato per apprendere le vulnerabilità. Questo hands-on deve essere eseguito esclusivamente su un computer adeguato di tua proprietà. Non compiere mai azioni illegali. Inoltre, l'autore non si assume alcuna responsabilità per eventuali danni derivanti dall'uso di...
CVE-2017-10952
CVE-2017-10952 Questo è un esempio di alto livello di un attacco di esecuzione di codice locale su Foxit PDF Reader. I dettagli di questo attacco possono essere trovati qui 1. Ho copiato e incollato la descrizione testuale di questa vulnerabilità collegata in 1 qui per preservare la descrizione n...
CVE-2024-4367-POC
CVE-2024-4367 POC Verwendung root@kitploit: python poc.py malicious.pdf "alert'S4vvy'" Referenzen CVE-2024-4367: Beliebige JS-Ausführung in PDF.js PDF.js...
cve-2024-4367-poc
CVE-2024-4367 POC per PDF.js POC per la vulnerabilità CVE-2024-4367 di PDF.js - Lo script pdf-modify.py può essere utilizzato per modificare i tuoi PDF e iniettare payload. Utilizzo 1. Assicurati che CVE-2024-4367-POC-base-placeholder.pdf sia nella directory di lavoro. 2. Decommenta/modifica la...
CVE-2025-64512
CVE-2025-64512 – pdfminer.six-Deserialisierungs-PoC Übersicht Dieser Proof-of-Concept demonstriert eine Schwachstelle in pdfminer.six CVE-2025-64512, die zur Ausführung beliebiger Befehle führen kann, wenn eine schädliche PDF-Datei verarbeitet wird. Der Exploit verwendet eine präparierte PDF-Date...
CVE-2025-20260-POC
CVE-2025-20260 EXPLOIT Dies ist ein Proof-of-Concept für CVE-2025-20260. Es handelt sich um eine Sicherheitslücke in den PDF-Scan-Prozessen der ClamAV-Software. Durch das Senden einer speziell präparierten, schädlichen PDF-Datei kann ein Pufferüberlauf verursacht werden, der zu einem...
CVE-2015-3073
CVE-2015-3073 Diese Schwachstelle ermöglicht es Remote-Angreifern, API-Beschränkungen bei verwundbaren Installationen von Adobe Reader zu umgehen. Für die Ausnutzung dieser Schwachstelle ist eine Benutzerinteraktion erforderlich, da das Ziel eine bösartige Seite besuchen oder eine bösartige Datei...
CVE-2026-46529
RCE tramite iniezione di argv in PDF CVE-2026-46529 atril/xreader/evince Proof-of-concept funzionante per l'iniezione di argv in evspawn shell/ev-application.c. Un singolo clic in qualsiasi punto della pagina renderizzata di un PDF appositamente creato innesca l'esecuzione arbitraria di codice co...
CVE-2026-79119
Use after free in PDF in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted PDF file. Chromium security severity: Low...
CVE-2019-13288
CVE-2019-13288 – Xpdf के Parser::getObj में अनंत पुनरावृत्ति अवलोकन CVE-2019-13288 एक भेद्यता है जो Xpdf संस्करण 4.01.01 में, विशेष रूप से Parser.cc में Parser::getObj फ़ंक्शन के भीतर पहचानी गई है। यह दोष एक विशेष रूप से तैयार की गई PDF फ़ाइल को संसाधित करते समय अनंत पुनरावृत्ति का कारण बन सकता ह...
CVE-2025-64512
CVE-2025-64512 — Unsichere Deserialisierung Pickle in pdfminer.six über präparierte PDFs ⚠️ Haftungsausschluss: Dieses Tool ist ausschließlich für Bildungszwecke und autorisierte Penetrationstests gedacht. Verwenden Sie es nur gegen Systeme, die Ihnen gehören oder für die Sie eine ausdrückliche...
pdfjs-vuln-demo
Progetto Demo della Vulnerabilità PDF.js Questo progetto ha lo scopo di fungere da proof of concept per dimostrare lo sfruttamento della vulnerabilità nella libreria PDF.js pdfjs-dist segnalata in CVE-2024-4367 Per iniziare Fai il fork e clona questo repository npm install npm run dev Per testare...
Astra Linux – Vulnerability in Chromium
A heap buffer overflow in PDFium in Google Chrome prior to version 147.0.7727.101 allowed a remote attacker to execute arbitrary code within a sandbox through a crafted PDF file. Chromium security severity: High...
Linux Distros Unpatched Vulnerability : CVE-2026-20346
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability in the PDF file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition or possibly other expanded...
UBUNTU-CVE-2026-71870
pypdf is a free and open-source pure-python PDF library. Prior to 6.15.0, a crafted PDF can cause large memory consumption when pypdf/cmap.py function parsebfrange parses unusually large source-code or destination-string tokens in a font /ToUnicode CMap during text extraction. This issue is fixed...
CVE-2026-20346
A vulnerability in the PDF file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition or possibly other expanded impacts as a result of memory corruption on an affected device. This vulnerability is due to improper boundary checks for content in PDF file...
Cross-site Scripting (XSS)
Overview org.webjars.npm:pdfjs-dist is a Portable Document Format PDF library that is built with HTML5. Affected versions of this package are vulnerable to Cross-site Scripting XSS via the enableScripting configuration when loading a crafted PDF file. An attacker can execute arbitrary JavaScript...
Cross-site Scripting (XSS)
Overview pdfjs-dist is a Portable Document Format PDF library that is built with HTML5. Affected versions of this package are vulnerable to Cross-site Scripting XSS via the enableScripting configuration when loading a crafted PDF file. An attacker can execute arbitrary JavaScript code in the...