Lucene search
+L

420 matches found

Kitploit
Kitploit
added 2026/08/27 2:41 p.m.2 views

CVE-2023-23924

CVE-2023-23924 Dompdf anfällig für URI-Validierungsfehler beim SVG-Parsing · CVE-2023-23924 · GitHub Advisory Database https://github.com/advisories/GHSA-3cw5-7cxw-v5qg Ausführen root@kitploit: Terminal 1 ❯ cd www ❯ php -S 127.0.0.1:9000 -t . Terminal 2 ❯ cd src ❯ php cve202323924.php Prüfen...

10CVSS8.6AI score0.03572EPSS
SaveExploits2References1
Nuclei
Nuclei
added 2026/08/27 4:24 a.m.187 views

Dompdf < v0.6.0 - Local File Inclusion

A vulnerability in dompdf.php in dompdf before 0.6.1, when DOMPDFENABLEPHP is enabled, allows context-dependent attackers to bypass chroot protections and read arbitrary files via a PHP protocol and wrappers in the inputfile parameter, as demonstrated by a...

6.8CVSS8.2AI score0.39231EPSS
SaveExploits6References5
Kitploit
Kitploit
added 2026/08/27 4:21 a.m.2 views

dompdf-rce

RCE-Exploit für dompdf Dieses Repository enthält eine verwundbare Demo-Anwendung, die dompdf 1.2.0 verwendet, und einen Exploit, der Remote-Code-Ausführung über eine ttf+php-Polyglot-Datei erreicht. Für weitere Details siehe https://positive.security/blog/dompdf-rce Anleitung 1. Starte die...

5.2AI score
SaveExploits0
Kitploit
Kitploit
added 2026/08/27 3:36 a.m.2 views

CVE-2022-28368

CVE-2022-28368 - Dompdf RCE Dompdf RCE PoC Exploit alt text ExploitDB Dompdf-Versionen 1.2.1 sind anfällig für Remote Code Execution RCE durch das Injizieren von CSS in die Daten. Die Datei kann dazu gebracht werden, eine schädliche Schriftart mit der Dateierweiterung .php in ihrem...

9.8CVSS8.7AI score0.82438EPSS
SaveExploits8
Kitploit
Kitploit
added 2026/08/27 2:50 a.m.2 views

dompdf-rce

RCE exploit for dompdf This repository contains a vulnerable demo application using dompdf 1.2.0 and an exploit that achieves remote code execution via a ttf+php polyglot file. For more details, please visit https://positive.security/blog/dompdf-rce Instructions 1. Run the demo application...

6.3AI score
SaveExploits0
Kitploit
Kitploit
added 2026/08/27 1:41 a.m.3 views

CVE-2014-2383-LFI-to-RCE-Escalation

CVE-2014-2383 эскалация LFI/RFI до RCE Тестовая среда: dompdf 0.6.0 - php 7.3.33 - apache 2.4.25 В ходе оценки безопасности было обнаружено наличие CVE-2014-2383. Этот документ является доказательством концепции и не содержит деталей первоначального обнаружения для защиты конфиденциальности...

6.8CVSS8.3AI score0.39231EPSS
SaveExploits6References1
Kitploit
Kitploit
added 2026/08/26 10:38 a.m.4 views

Dompdf-Exploit-RCE

Dompdf-Exploit-RCE Uno script di exploit per CVE-2022-28368 progettato per rendere lo sfruttamento meno fastidioso, realizzato per una macchina HTB Realizzato per rendere l'exploit meno tedioso e fastidioso...

9.8CVSS8.7AI score0.82438EPSS
SaveExploits8
Kitploit
Kitploit
added 2026/08/24 9:36 p.m.3 views

CVE-2022-28368-handler

CVE-2022-28368-handler Questo repository contiene uno script Python che gestisce la maggior parte dell'exploit del font cache di dompdf CVE-2022-28368, tutto ciò che devi fare è creare la richiesta. Fornirà anche una stringa trigger per avviare l'exploit : Utilizzo root@kitploit: usage:...

9.8CVSS8.8AI score0.82438EPSS
SaveExploits8
OSV
OSV
added 2026/08/04 2:52 p.m.6 views

CLSA-2025-1766019429 TuxCare security update for dompdf/dompdf (7 CVEs)

TuxCare rebuilt dompdf/dompdf to address 7 CVEs. Fixed in 1.2.2-p1+tuxcare...

10CVSS6.8AI score0.04421EPSS
SaveExploits10
OSV
OSV
added 2026/08/04 2:52 p.m.6 views

CLSA-2025-1766364765 TuxCare security update for dompdf/dompdf (8 CVEs)

TuxCare rebuilt dompdf/dompdf to address 8 CVEs. Fixed in 0.8.6-p1+tuxcare...

10CVSS6.7AI score0.82438EPSS
SaveExploits18
Tenable Nessus
Tenable Nessus
added 2026/07/29 12:00 a.m.12 views

Linux Distros Unpatched Vulnerability : CVE-2026-56722

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Dompdf is an HTML to PDF converter for PHP. In versions 3.15 and prior, aAn attacker who controls the HTML input can bypass this restriction by embedding a targ...

6.3CVSS6AI score0.00329EPSS
SaveExploits1References3
Tenable Nessus
Tenable Nessus
added 2026/07/29 12:00 a.m.13 views

Linux Distros Unpatched Vulnerability : CVE-2026-59941

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Dompdf is an HTML to PDF converter for PHP. Versions 3.15 and prior accept a BMP image and generates a PDF-compatible PNG based only on its declared header...

7.5CVSS5.5AI score0.00512EPSS
SaveExploits1References3
Tenable Nessus
Tenable Nessus
added 2026/07/29 12:00 a.m.12 views

Linux Distros Unpatched Vulnerability : CVE-2026-59942

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Dompdf is an HTML to PDF converter for PHP. Versions 3.15 and prior are vulnerable to a Denial of Service DoS attack via resource exhaustion. An attacker can...

7.5CVSS5.5AI score0.00748EPSS
SaveExploits1References3
Tenable Nessus
Tenable Nessus
added 2026/07/29 12:00 a.m.9 views

Linux Distros Unpatched Vulnerability : CVE-2026-55554

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Dompdf is an HTML to PDF converter for PHP. In versions 3.15 and prior, the validateLocalUri method enforces chroot boundaries with a strpos prefix check after...

7.5CVSS5.5AI score0.00326EPSS
SaveExploits1References3
Tenable Nessus
Tenable Nessus
added 2026/07/29 12:00 a.m.11 views

Linux Distros Unpatched Vulnerability : CVE-2026-55555

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Dompdf is an HTML to PDF converter for PHP. Versions 3.15 and prior are vulnerable to a File Existence Oracle attack through the manipulation of the CSS...

7.5CVSS5.4AI score0.00354EPSS
SaveExploits1References3
Tenable Nessus
Tenable Nessus
added 2026/07/29 12:00 a.m.9 views

Linux Distros Unpatched Vulnerability : CVE-2026-59943

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Dompdf is an HTML to PDF converter for PHP. In versions 3.15 and prior, if a malicious actor can supply unrestricted content for rendering by Dompdf they can...

6.3CVSS5.4AI score0.00299EPSS
SaveExploits1References3
NVD
NVD
added 2026/07/28 9:17 p.m.12 views

CVE-2026-59942

Dompdf is an HTML to PDF converter for PHP. Versions 3.15 and prior are vulnerable to a Denial of Service DoS attack via resource exhaustion. An attacker can crash the PHP process by providing a specially crafted HTML document containing a single image with massive dimensions e.g., 30,000x30,000...

7.5CVSS0.00748EPSS
SaveExploits1References4
OSV
OSV
added 2026/07/28 9:17 p.m.7 views

DEBIAN-CVE-2026-59943

Dompdf is an HTML to PDF converter for PHP. In versions 3.15 and prior, if a malicious actor can supply unrestricted content for rendering by Dompdf they can utilize the SVG rendering functionality to leak filesystem information when rendering PDF files using image references within a data-URI...

6.3CVSS5.8AI score0.00299EPSS
SaveExploits1References1
NVD
NVD
added 2026/07/28 9:17 p.m.14 views

CVE-2026-59941

Dompdf is an HTML to PDF converter for PHP. Versions 3.15 and prior accept a BMP image and generates a PDF-compatible PNG based only on its declared header dimensions and never bounds width × height before the image is converted through GD. A 58-byte BMP whose header declares e.g. 6000×6000 is...

7.5CVSS0.00512EPSS
SaveExploits1References3
OSV
OSV
added 2026/07/28 9:17 p.m.9 views

DEBIAN-CVE-2026-59941

Dompdf is an HTML to PDF converter for PHP. Versions 3.15 and prior accept a BMP image and generates a PDF-compatible PNG based only on its declared header dimensions and never bounds width × height before the image is converted through GD. A 58-byte BMP whose header declares e.g. 6000×6000 is...

7.5CVSS5.9AI score0.00512EPSS
SaveExploits1References1
Rows per page
Query Builder