Dompdf < v0.6.0 - Local File Inclusion

A vulnerability in dompdf.php in dompdf before 0.6.1, when DOMPDFENABLEPHP is enabled, allows context-dependent attackers to bypass chroot protections and read arbitrary files via a PHP protocol and wrappers in the inputfile parameter, as demonstrated by a...

CVE-2014-2383-LFI-to-RCE-Escalation

CVE-2014-2383 Escalada de LFI/RFI a RCE Entorno de prueba: dompdf 0.6.0 - php 7.3.33 - apache 2.4.25 Durante una evaluación de seguridad se descubrió la presencia de CVE-2014-2383. Este documento es una prueba de concepto y no incluye los detalles del descubrimiento inicial para proteger la...

CVE-2022-28368

CVE-2022-28368 - Dompdf RCE Exploit PoC de Dompdf RCE alt text ExploitDB Las versiones de Dompdf 1.2.1 son vulnerables a Ejecución Remota de Código RCE mediante la inyección de CSS en los datos. Se puede engañar al archivo para que almacene una fuente maliciosa con extensión .php en su caché de...

CVE-2023-23924

CVE-2023-23924 Dompdf vulnerable a fallo de validación de URI en el análisis de SVG · CVE-2023-23924 · GitHub Advisory Database https://github.com/advisories/GHSA-3cw5-7cxw-v5qg Ejecución Terminal 1 ❯ cd www ❯ php -S 127.0.0.1:9000 -t . Terminal 2 ❯ cd src ❯ php cve202323924.php Comprobación...

CVE-2026-59941

CVE-2026-59942: Dompdf Resource Exhaustion DoS - Proof of Concept Vulnerability Type: Denial of Service DoS via Resource Exhaustion Affected Software: Dompdf = 3.1.5 Credits: Fabian Rosales far00t01. Disclaimer This repository and its content are provided for educational and research purposes onl...

Dompdf-Exploit-RCE

Dompdf-Exploit-RCE Un script de explotación para CVE-2022-28368 diseñado para hacer la explotación menos molesta, hecho para una máquina de HTB Hecho para hacer el exploit menos tedioso y molesto...

CVE-2022-41343

CVE-2022-41343 🐍 CVE-2022-41343的Python利用 用于dompdf 2.0.1的分阶段反向Shell 基于：Positive Sec的文章 和 PoC 示例 cve-2022-41343 10.10.16.3 44444 用法 usage: cve-2022-41343 -h -l SERVERPORT -s SHELL -n FONTNAME ip port positional arguments: ip Shell回调IP地址/主机 port Shell回调端口 options: -h, --help 显示此帮助信息并退出 -l SERVERPORT...

CVE-2022-28368-handler

CVE-2022-28368-handler Este repositorio contiene un script de Python que manejará la mayor parte del exploit de fuente cacheada de dompdf CVE-2022-28368, solo necesitas crear la solicitud. Incluso proporcionará una cadena de activación para iniciar el exploit : Usage usage: CVE-2022-28368.py -h -...

dompdf-rce

Exploit de RCE para dompdf Este repositorio contiene una aplicación de demostración vulnerable que utiliza dompdf 1.2.0 y un exploit que logra ejecución remota de código mediante un archivo políglota ttf+php. Para más detalles, visite https://positive.security/blog/dompdf-rce Instrucciones 1...

VulnCheck KEV: CVE-2022-28368

Dompdf 1.2.1 allows remote code execution via a .php file in the src:url field of an @font-face Cascading Style Sheets CSS statement within an HTML input file...

CVE-2026-59941 — Updated!

CVE-2026-59942: Dompdf Resource Exhaustion DoS - Proof of Concept Vulnerability Type: Denial of Service DoS via Resource Exhaustion Affected Software: Dompdf = 3.1.5 Credits: Fabian Rosales far00t01. Disclaimer This repository and its content are provided for educational and research purposes onl...

CLSA-2026-1787828763 TuxCare security update for dompdf/dompdf (6 CVEs)

TuxCare rebuilt dompdf/dompdf to address 6 CVEs. Fixed in 0.8.6-p2+tuxcare...

CLSA-2026-1787223739 TuxCare security update for dompdf/dompdf (6 CVEs)

TuxCare rebuilt dompdf/dompdf to address 6 CVEs. Fixed in 1.2.2-p2+tuxcare...

CLSA-2026-1786371522 TuxCare security update for dompdf/dompdf (5 CVEs)

TuxCare rebuilt dompdf/dompdf to address 5 CVEs. Fixed in 3.1.0-p1+tuxcare...

CLSA-2025-1766019429 TuxCare security update for dompdf/dompdf (7 CVEs)

TuxCare rebuilt dompdf/dompdf to address 7 CVEs. Fixed in 1.2.2-p1+tuxcare...

CLSA-2025-1766364765 TuxCare security update for dompdf/dompdf (8 CVEs)

TuxCare rebuilt dompdf/dompdf to address 8 CVEs. Fixed in 0.8.6-p1+tuxcare...

Linux Distros Unpatched Vulnerability : CVE-2026-59941

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Dompdf is an HTML to PDF converter for PHP. Versions 3.15 and prior accept a BMP image and generates a PDF-compatible PNG based only on its declared header...

Linux Distros Unpatched Vulnerability : CVE-2026-56722

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Dompdf is an HTML to PDF converter for PHP. In versions 3.15 and prior, aAn attacker who controls the HTML input can bypass this restriction by embedding a targ...

Linux Distros Unpatched Vulnerability : CVE-2026-59942

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Dompdf is an HTML to PDF converter for PHP. Versions 3.15 and prior are vulnerable to a Denial of Service DoS attack via resource exhaustion. An attacker can...

Linux Distros Unpatched Vulnerability : CVE-2026-59943

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Dompdf is an HTML to PDF converter for PHP. In versions 3.15 and prior, if a malicious actor can supply unrestricted content for rendering by Dompdf they can...