Lucene search
+L

422 matches found

Kitploit
Kitploit
added 2026/09/16 8:26 p.m.9 views

CVE-2022-28368-handler

CVE-2022-28368-handler Este repositorio contiene un script de Python que manejará la mayor parte del exploit de fuente cacheada de dompdf CVE-2022-28368, solo necesitas crear la solicitud. Incluso proporcionará una cadena de activación para iniciar el exploit : Usage root@kitploit: usage:...

9.8CVSS8.6AI score0.82438EPSS
SaveExploits8
Kitploit
Kitploit
added 2026/09/16 7:35 p.m.12 views

CVE-2014-2383-LFI-to-RCE-Escalation

CVE-2014-2383 LFI/RFI 漏洞升级为 RCE 测试环境:dompdf 0.6.0 - php 7.3.33 - apache 2.4.25 在一次安全评估期间,发现了 CVE-2014-2383。本文档是一个概念验证,出于保护客户隐私的目的,不包含最初发现时的细节。不过,本文档中的内容确实模拟了该漏洞被利用时的环境。 发现 https://github.com/projectdiscovery/nuclei CVE-2014-2383 详情 root@kitploit: A vulnerability in dompdf.php in dompdf before...

6.8CVSS8AI score0.39231EPSS
SaveExploits6References1
Nuclei
Nuclei
added 2026/09/16 2:04 p.m.194 views

Dompdf < v0.6.0 - Local File Inclusion

A vulnerability in dompdf.php in dompdf before 0.6.1, when DOMPDFENABLEPHP is enabled, allows context-dependent attackers to bypass chroot protections and read arbitrary files via a PHP protocol and wrappers in the inputfile parameter, as demonstrated by a...

6.8CVSS7.7AI score0.39231EPSS
SaveExploits6References5
Kitploit
Kitploit
added 2026/09/16 2:04 p.m.10 views

CVE-2022-28368

CVE-2022-28368 - Dompdf RCE Exploit PoC de Dompdf RCE alt text ExploitDB Las versiones de Dompdf 1.2.1 son vulnerables a Ejecución Remota de Código RCE mediante la inyección de CSS en los datos. Se puede engañar al archivo para que almacene una fuente maliciosa con extensión .php en su caché de...

9.8CVSS8.4AI score0.82438EPSS
SaveExploits8
Kitploit
Kitploit
added 2026/09/15 5:32 p.m.8 views

CVE-2023-23924

CVE-2023-23924 Dompdf vulnerable to URI validation failure on SVG parsing · CVE-2023-23924 · GitHub Advisory Database https://github.com/advisories/GHSA-3cw5-7cxw-v5qg Run root@kitploit: Terminal 1 ❯ cd www ❯ php -S 127.0.0.1:9000 -t . Terminal 2 ❯ cd src ❯ php cve202323924.php Check Check the...

10CVSS8.5AI score0.03572EPSS
SaveExploits2References1
Kitploit
Kitploit
added 2026/09/15 7:30 a.m.7 views

CVE-2026-59941

CVE-2026-59942: Dompdf Resource Exhaustion DoS - Proof of Concept Vulnerability Type: Denial of Service DoS via Resource Exhaustion Affected Software: Dompdf = 3.1.5 Credits: Fabian Rosales far00t01. Disclaimer This repository and its content are provided for educational and research purposes onl...

7.5CVSS5.9AI score0.00748EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/09/15 3:57 a.m.10 views

Dompdf-Exploit-RCE

Dompdf-Exploit-RCE Un script de explotación para CVE-2022-28368 diseñado para hacer la explotación menos molesta, hecho para una máquina de HTB Hecho para hacer el exploit menos tedioso y molesto...

9.8CVSS8.3AI score0.82438EPSS
SaveExploits8
Kitploit
Kitploit
added 2026/09/14 7:14 p.m.12 views

CVE-2022-41343

CVE-2022-41343 🐍 Exploit en Python para CVE-2022-41343 Shell inversa por etapas para dompdf 2.0.1 Basado en: el artículo de Positive Sec y PoC Ejemplo root@kitploit: cve-2022-41343 10.10.16.3 44444 Uso root@kitploit: usage: cve-2022-41343 -h -l SERVERPORT -s SHELL -n FONTNAME ip port positional...

7.5CVSS6.4AI score0.04672EPSS
SaveExploits3References1
Kitploit
Kitploit
added 2026/09/10 2:50 a.m.8 views

dompdf-rce

dompdf 的 RCE 漏洞利用 本仓库包含一个使用 dompdf 1.2.0 的易受攻击的演示应用程序,以及一个通过 ttf+php 多语言文件实现远程代码执行的漏洞利用。 更多详情,请访问 https://positive.security/blog/dompdf-rce 使用说明 1. 运行演示应用程序 root@kitploit: $ cd application $ php -S localhost:9000 2. 运行漏洞利用服务器 root@kitploit: $ cd exploit $ php -S localhost:9001 3. 触发漏洞利用...

6AI score
SaveExploits0
OSV
OSV
added 2026/08/10 2:18 p.m.11 views

CLSA-2026-1786371522 TuxCare security update for dompdf/dompdf (5 CVEs)

TuxCare rebuilt dompdf/dompdf to address 5 CVEs. Fixed in 3.1.0-p1+tuxcare...

7.5CVSS5.7AI score0.00748EPSS
SaveExploits5
OSV
OSV
added 2026/08/04 2:52 p.m.8 views

CLSA-2025-1766019429 TuxCare security update for dompdf/dompdf (7 CVEs)

TuxCare rebuilt dompdf/dompdf to address 7 CVEs. Fixed in 1.2.2-p1+tuxcare...

10CVSS6.8AI score0.04672EPSS
SaveExploits10
OSV
OSV
added 2026/08/04 2:52 p.m.8 views

CLSA-2025-1766364765 TuxCare security update for dompdf/dompdf (8 CVEs)

TuxCare rebuilt dompdf/dompdf to address 8 CVEs. Fixed in 0.8.6-p1+tuxcare...

10CVSS6.7AI score0.82438EPSS
SaveExploits18
Tenable Nessus
Tenable Nessus
added 2026/07/29 12:00 a.m.18 views

Linux Distros Unpatched Vulnerability : CVE-2026-59941

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Dompdf is an HTML to PDF converter for PHP. Versions 3.15 and prior accept a BMP image and generates a PDF-compatible PNG based only on its declared header...

7.5CVSS5.8AI score0.00512EPSS
SaveExploits1References3
Tenable Nessus
Tenable Nessus
added 2026/07/29 12:00 a.m.15 views

Linux Distros Unpatched Vulnerability : CVE-2026-59942

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Dompdf is an HTML to PDF converter for PHP. Versions 3.15 and prior are vulnerable to a Denial of Service DoS attack via resource exhaustion. An attacker can...

7.5CVSS5.8AI score0.00748EPSS
SaveExploits1References3
Tenable Nessus
Tenable Nessus
added 2026/07/29 12:00 a.m.18 views

Linux Distros Unpatched Vulnerability : CVE-2026-56722

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Dompdf is an HTML to PDF converter for PHP. In versions 3.15 and prior, aAn attacker who controls the HTML input can bypass this restriction by embedding a targ...

6.3CVSS5.9AI score0.00329EPSS
SaveExploits1References3
Tenable Nessus
Tenable Nessus
added 2026/07/29 12:00 a.m.11 views

Linux Distros Unpatched Vulnerability : CVE-2026-59943

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Dompdf is an HTML to PDF converter for PHP. In versions 3.15 and prior, if a malicious actor can supply unrestricted content for rendering by Dompdf they can...

6.3CVSS5.6AI score0.00299EPSS
SaveExploits1References3
Tenable Nessus
Tenable Nessus
added 2026/07/29 12:00 a.m.12 views

Linux Distros Unpatched Vulnerability : CVE-2026-55555

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Dompdf is an HTML to PDF converter for PHP. Versions 3.15 and prior are vulnerable to a File Existence Oracle attack through the manipulation of the CSS...

7.5CVSS5.5AI score0.00354EPSS
SaveExploits1References3
Tenable Nessus
Tenable Nessus
added 2026/07/29 12:00 a.m.10 views

Linux Distros Unpatched Vulnerability : CVE-2026-55554

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Dompdf is an HTML to PDF converter for PHP. In versions 3.15 and prior, the validateLocalUri method enforces chroot boundaries with a strpos prefix check after...

7.5CVSS5.7AI score0.00326EPSS
SaveExploits1References3
NVD
NVD
added 2026/07/28 9:17 p.m.15 views

CVE-2026-59942

Dompdf is an HTML to PDF converter for PHP. Versions 3.15 and prior are vulnerable to a Denial of Service DoS attack via resource exhaustion. An attacker can crash the PHP process by providing a specially crafted HTML document containing a single image with massive dimensions e.g., 30,000x30,000...

7.5CVSS0.00748EPSS
SaveExploits1References4
OSV
OSV
added 2026/07/28 9:17 p.m.9 views

DEBIAN-CVE-2026-59943

Dompdf is an HTML to PDF converter for PHP. In versions 3.15 and prior, if a malicious actor can supply unrestricted content for rendering by Dompdf they can utilize the SVG rendering functionality to leak filesystem information when rendering PDF files using image references within a data-URI...

5.3CVSS5.8AI score0.00299EPSS
SaveExploits1References1
Rows per page
Query Builder