Lucene search
+L

420 matches found

Nuclei
Nuclei
added 2026/08/27 4:24 a.m.187 views

Dompdf < v0.6.0 - Local File Inclusion

A vulnerability in dompdf.php in dompdf before 0.6.1, when DOMPDFENABLEPHP is enabled, allows context-dependent attackers to bypass chroot protections and read arbitrary files via a PHP protocol and wrappers in the inputfile parameter, as demonstrated by a...

6.8CVSS8.2AI score0.39231EPSS
SaveExploits6References5
Kitploit
Kitploit
added 2026/08/27 4:00 a.m.1 views

dompdf-rce

dompdf용 RCE 익스플로잇 이 저장소는 dompdf 1.2.0을 사용하는 취약한 데모 애플리케이션과 ttf+php 폴리글롯 파일을 통한 원격 코드 실행을 달성하는 익스플로잇을 포함하고 있습니다. 자세한 내용은 https://positive.security/blog/dompdf-rce를 방문하세요. 지침 1. 데모 애플리케이션 실행 root@kitploit: $ cd application $ php -S localhost:9000 2. 익스플로잇 서버 실행 root@kitploit: $ cd exploit $ php -S...

5.3AI score
SaveExploits0
Kitploit
Kitploit
added 2026/08/27 3:36 a.m.2 views

CVE-2022-28368

CVE-2022-28368 - Dompdf RCE Dompdf RCE PoC 익스플로잇 alt text ExploitDB Dompdf 버전 1.2.1은 데이터에 CSS를 주입하여 원격 코드 실행RCE에 취약합니다. 파일이 악성 글꼴을 .php 파일 확장자로 글꼴 캐시에 저장하도록 속일 수 있으며, 이후 웹에서 해당 파일에 접근하여 실행할 수 있습니다. 사용법 root@kitploit: git clone https://github.com/rvizx/CVE-2022-28368 cd CVE-2022-28368 python3 -m p...

9.8CVSS8.7AI score0.82438EPSS
SaveExploits8
Kitploit
Kitploit
added 2026/08/27 2:50 a.m.2 views

dompdf-rce

RCE exploit for dompdf This repository contains a vulnerable demo application using dompdf 1.2.0 and an exploit that achieves remote code execution via a ttf+php polyglot file. For more details, please visit https://positive.security/blog/dompdf-rce Instructions 1. Run the demo application...

6.3AI score
SaveExploits0
Kitploit
Kitploit
added 2026/08/27 2:40 a.m.3 views

CVE-2014-2383-LFI-to-RCE-Escalation

CVE-2014-2383 LFI/RFI RCE로의 권한 상승 테스트 환경: dompdf 0.6.0 - php 7.3.33 - apache 2.4.25 보안 평가 중 CVE-2014-2383의 존재가 발견되었습니다. 이 문서는 개념 증명PoC이며, 고객의 개인정보를 보호하기 위해 최초 발견 당시의 세부 사항은 포함하지 않습니다. 다만 이 문서의 내용은 해당 취약점이 악용된 환경을 모방합니다. 발견 https://github.com/projectdiscovery/nuclei CVE-2014-2383 세부 사항...

6.8CVSS8.3AI score0.39231EPSS
SaveExploits6References1
Kitploit
Kitploit
added 2026/08/27 12:11 a.m.2 views

CVE-2023-23924

CVE-2023-23924 Dompdf vulnerável a falha de validação de URI na análise de SVG · CVE-2023-23924 · Banco de Dados de Avisos do GitHub https://github.com/advisories/GHSA-3cw5-7cxw-v5qg Execução root@kitploit: Terminal 1 ❯ cd www ❯ php -S 127.0.0.1:9000 -t . Terminal 2 ❯ cd src ❯ php cve202323924.ph...

10CVSS8.6AI score0.03572EPSS
SaveExploits2References1
Kitploit
Kitploit
added 2026/08/26 10:38 a.m.4 views

Dompdf-Exploit-RCE

Dompdf-Exploit-RCE Uno script di exploit per CVE-2022-28368 progettato per rendere lo sfruttamento meno fastidioso, realizzato per una macchina HTB Realizzato per rendere l'exploit meno tedioso e fastidioso...

9.8CVSS8.7AI score0.82438EPSS
SaveExploits8
Kitploit
Kitploit
added 2026/08/24 9:36 p.m.2 views

CVE-2022-28368-handler

CVE-2022-28368-handler Questo repository contiene uno script Python che gestisce la maggior parte dell'exploit del font cache di dompdf CVE-2022-28368, tutto ciò che devi fare è creare la richiesta. Fornirà anche una stringa trigger per avviare l'exploit : Utilizzo root@kitploit: usage:...

9.8CVSS8.8AI score0.82438EPSS
SaveExploits8
OSV
OSV
added 2026/08/04 2:52 p.m.6 views

CLSA-2025-1766019429 TuxCare security update for dompdf/dompdf (7 CVEs)

TuxCare rebuilt dompdf/dompdf to address 7 CVEs. Fixed in 1.2.2-p1+tuxcare...

10CVSS6.8AI score0.04421EPSS
SaveExploits10
OSV
OSV
added 2026/08/04 2:52 p.m.6 views

CLSA-2025-1766364765 TuxCare security update for dompdf/dompdf (8 CVEs)

TuxCare rebuilt dompdf/dompdf to address 8 CVEs. Fixed in 0.8.6-p1+tuxcare...

10CVSS6.7AI score0.82438EPSS
SaveExploits18
Tenable Nessus
Tenable Nessus
added 2026/07/29 12:00 a.m.12 views

Linux Distros Unpatched Vulnerability : CVE-2026-59942

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Dompdf is an HTML to PDF converter for PHP. Versions 3.15 and prior are vulnerable to a Denial of Service DoS attack via resource exhaustion. An attacker can...

7.5CVSS5.5AI score0.00748EPSS
SaveExploits1References3
Tenable Nessus
Tenable Nessus
added 2026/07/29 12:00 a.m.12 views

Linux Distros Unpatched Vulnerability : CVE-2026-56722

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Dompdf is an HTML to PDF converter for PHP. In versions 3.15 and prior, aAn attacker who controls the HTML input can bypass this restriction by embedding a targ...

6.3CVSS6AI score0.00329EPSS
SaveExploits1References3
Tenable Nessus
Tenable Nessus
added 2026/07/29 12:00 a.m.13 views

Linux Distros Unpatched Vulnerability : CVE-2026-59941

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Dompdf is an HTML to PDF converter for PHP. Versions 3.15 and prior accept a BMP image and generates a PDF-compatible PNG based only on its declared header...

7.5CVSS5.5AI score0.00512EPSS
SaveExploits1References3
Tenable Nessus
Tenable Nessus
added 2026/07/29 12:00 a.m.9 views

Linux Distros Unpatched Vulnerability : CVE-2026-59943

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Dompdf is an HTML to PDF converter for PHP. In versions 3.15 and prior, if a malicious actor can supply unrestricted content for rendering by Dompdf they can...

6.3CVSS5.4AI score0.00299EPSS
SaveExploits1References3
Tenable Nessus
Tenable Nessus
added 2026/07/29 12:00 a.m.9 views

Linux Distros Unpatched Vulnerability : CVE-2026-55554

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Dompdf is an HTML to PDF converter for PHP. In versions 3.15 and prior, the validateLocalUri method enforces chroot boundaries with a strpos prefix check after...

7.5CVSS5.5AI score0.00326EPSS
SaveExploits1References3
Tenable Nessus
Tenable Nessus
added 2026/07/29 12:00 a.m.11 views

Linux Distros Unpatched Vulnerability : CVE-2026-55555

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Dompdf is an HTML to PDF converter for PHP. Versions 3.15 and prior are vulnerable to a File Existence Oracle attack through the manipulation of the CSS...

7.5CVSS5.4AI score0.00354EPSS
SaveExploits1References3
OSV
OSV
added 2026/07/28 9:17 p.m.7 views

DEBIAN-CVE-2026-59943

Dompdf is an HTML to PDF converter for PHP. In versions 3.15 and prior, if a malicious actor can supply unrestricted content for rendering by Dompdf they can utilize the SVG rendering functionality to leak filesystem information when rendering PDF files using image references within a data-URI...

6.3CVSS5.8AI score0.00299EPSS
SaveExploits1References1
NVD
NVD
added 2026/07/28 9:17 p.m.12 views

CVE-2026-59942

Dompdf is an HTML to PDF converter for PHP. Versions 3.15 and prior are vulnerable to a Denial of Service DoS attack via resource exhaustion. An attacker can crash the PHP process by providing a specially crafted HTML document containing a single image with massive dimensions e.g., 30,000x30,000...

7.5CVSS0.00748EPSS
SaveExploits1References4
OSV
OSV
added 2026/07/28 9:17 p.m.9 views

DEBIAN-CVE-2026-59941

Dompdf is an HTML to PDF converter for PHP. Versions 3.15 and prior accept a BMP image and generates a PDF-compatible PNG based only on its declared header dimensions and never bounds width × height before the image is converted through GD. A 58-byte BMP whose header declares e.g. 6000×6000 is...

7.5CVSS5.9AI score0.00512EPSS
SaveExploits1References1
NVD
NVD
added 2026/07/28 9:17 p.m.14 views

CVE-2026-59941

Dompdf is an HTML to PDF converter for PHP. Versions 3.15 and prior accept a BMP image and generates a PDF-compatible PNG based only on its declared header dimensions and never bounds width × height before the image is converted through GD. A 58-byte BMP whose header declares e.g. 6000×6000 is...

7.5CVSS0.00512EPSS
SaveExploits1References3
Rows per page
Query Builder