CVE-2022-28368-handler

CVE-2022-28368-handler Este repositorio contiene un script de Python que manejará la mayor parte del exploit de fuente cacheada de dompdf CVE-2022-28368, solo necesitas crear la solicitud. Incluso proporcionará una cadena de activación para iniciar el exploit : Usage root@kitploit: usage:...

CVE-2014-2383-LFI-to-RCE-Escalation

CVE-2014-2383 LFI/RFI 漏洞升级为 RCE 测试环境：dompdf 0.6.0 - php 7.3.33 - apache 2.4.25 在一次安全评估期间，发现了 CVE-2014-2383。本文档是一个概念验证，出于保护客户隐私的目的，不包含最初发现时的细节。不过，本文档中的内容确实模拟了该漏洞被利用时的环境。 发现 https://github.com/projectdiscovery/nuclei CVE-2014-2383 详情 root@kitploit: A vulnerability in dompdf.php in dompdf before...

Dompdf < v0.6.0 - Local File Inclusion

A vulnerability in dompdf.php in dompdf before 0.6.1, when DOMPDFENABLEPHP is enabled, allows context-dependent attackers to bypass chroot protections and read arbitrary files via a PHP protocol and wrappers in the inputfile parameter, as demonstrated by a...

CVE-2022-28368

CVE-2022-28368 - Dompdf RCE Exploit PoC de Dompdf RCE alt text ExploitDB Las versiones de Dompdf 1.2.1 son vulnerables a Ejecución Remota de Código RCE mediante la inyección de CSS en los datos. Se puede engañar al archivo para que almacene una fuente maliciosa con extensión .php en su caché de...

CVE-2023-23924

CVE-2023-23924 Dompdf vulnerable to URI validation failure on SVG parsing · CVE-2023-23924 · GitHub Advisory Database https://github.com/advisories/GHSA-3cw5-7cxw-v5qg Run root@kitploit: Terminal 1 ❯ cd www ❯ php -S 127.0.0.1:9000 -t . Terminal 2 ❯ cd src ❯ php cve202323924.php Check Check the...

CVE-2026-59941

CVE-2026-59942: Dompdf Resource Exhaustion DoS - Proof of Concept Vulnerability Type: Denial of Service DoS via Resource Exhaustion Affected Software: Dompdf = 3.1.5 Credits: Fabian Rosales far00t01. Disclaimer This repository and its content are provided for educational and research purposes onl...

Dompdf-Exploit-RCE

Dompdf-Exploit-RCE Un script de explotación para CVE-2022-28368 diseñado para hacer la explotación menos molesta, hecho para una máquina de HTB Hecho para hacer el exploit menos tedioso y molesto...

CVE-2022-41343

CVE-2022-41343 🐍 Exploit en Python para CVE-2022-41343 Shell inversa por etapas para dompdf 2.0.1 Basado en: el artículo de Positive Sec y PoC Ejemplo root@kitploit: cve-2022-41343 10.10.16.3 44444 Uso root@kitploit: usage: cve-2022-41343 -h -l SERVERPORT -s SHELL -n FONTNAME ip port positional...

dompdf-rce

dompdf 的 RCE 漏洞利用 本仓库包含一个使用 dompdf 1.2.0 的易受攻击的演示应用程序，以及一个通过 ttf+php 多语言文件实现远程代码执行的漏洞利用。 更多详情，请访问 https://positive.security/blog/dompdf-rce 使用说明 1. 运行演示应用程序 root@kitploit: $ cd application $ php -S localhost:9000 2. 运行漏洞利用服务器 root@kitploit: $ cd exploit $ php -S localhost:9001 3. 触发漏洞利用...

CLSA-2026-1786371522 TuxCare security update for dompdf/dompdf (5 CVEs)

TuxCare rebuilt dompdf/dompdf to address 5 CVEs. Fixed in 3.1.0-p1+tuxcare...

CLSA-2025-1766019429 TuxCare security update for dompdf/dompdf (7 CVEs)

TuxCare rebuilt dompdf/dompdf to address 7 CVEs. Fixed in 1.2.2-p1+tuxcare...

CLSA-2025-1766364765 TuxCare security update for dompdf/dompdf (8 CVEs)

TuxCare rebuilt dompdf/dompdf to address 8 CVEs. Fixed in 0.8.6-p1+tuxcare...

Linux Distros Unpatched Vulnerability : CVE-2026-59941

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Dompdf is an HTML to PDF converter for PHP. Versions 3.15 and prior accept a BMP image and generates a PDF-compatible PNG based only on its declared header...

Linux Distros Unpatched Vulnerability : CVE-2026-59942

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Dompdf is an HTML to PDF converter for PHP. Versions 3.15 and prior are vulnerable to a Denial of Service DoS attack via resource exhaustion. An attacker can...

Linux Distros Unpatched Vulnerability : CVE-2026-56722

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Dompdf is an HTML to PDF converter for PHP. In versions 3.15 and prior, aAn attacker who controls the HTML input can bypass this restriction by embedding a targ...

Linux Distros Unpatched Vulnerability : CVE-2026-59943

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Dompdf is an HTML to PDF converter for PHP. In versions 3.15 and prior, if a malicious actor can supply unrestricted content for rendering by Dompdf they can...

Linux Distros Unpatched Vulnerability : CVE-2026-55555

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Dompdf is an HTML to PDF converter for PHP. Versions 3.15 and prior are vulnerable to a File Existence Oracle attack through the manipulation of the CSS...

Linux Distros Unpatched Vulnerability : CVE-2026-55554

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Dompdf is an HTML to PDF converter for PHP. In versions 3.15 and prior, the validateLocalUri method enforces chroot boundaries with a strpos prefix check after...

CVE-2026-59942

Dompdf is an HTML to PDF converter for PHP. Versions 3.15 and prior are vulnerable to a Denial of Service DoS attack via resource exhaustion. An attacker can crash the PHP process by providing a specially crafted HTML document containing a single image with massive dimensions e.g., 30,000x30,000...

DEBIAN-CVE-2026-59943

Dompdf is an HTML to PDF converter for PHP. In versions 3.15 and prior, if a malicious actor can supply unrestricted content for rendering by Dompdf they can utilize the SVG rendering functionality to leak filesystem information when rendering PDF files using image references within a data-URI...