Hacking-pdf.js-vulnerability

🚨 CVE-2024-4367: Arbitrary JavaScript Execution in PDF.js This project demonstrates and analyzes CVE-2024-4367 , a high-severity vulnerability in Mozilla’s PDF.js library that allows arbitrary JavaScript execution through improper type checking in font handling code. Our research shows how a...

WEAPONIZING-CVE-2024-4367

WEAPONIZING-CVE-2024-4367 CVE-2024-4367 is a critical vulnerability CVSS 9.8 in PDF.js, allowing arbitrary JavaScript code execution due to insufficient type checks on the FontMatrix object within PDF files. CVE-2024-4367 Exploit Wizard: User Guide CVE IDENTIFIER| CVE-2024-4367 ---|--- SEVERITY|...

Exploit for Improper Check for Unusual or Exceptional Conditions in Mozilla Firefox

CVE-2024-4367 PDF.js FontMatrix PoC Authorized penetration te...

PDF.js CVE-2024-4367 FontMatrix RCE delivery

CVE-2024-4367: Type1 FontMatrix injection runs JavaScript in PDF.js viewers; upload malicious PDF and callback to LHOST for confirmation. !/usr/bin/env python3 -- coding: utf-8 -- """PDF.js CVE-2024-4367 FontMatrix JavaScript execution via PDF upload.""" from future import annotations import os...

PDF CVE-2024-4367 PDF.js Staged Delivery

Generate a CVE-2024-4367 FontMatrix PDF with staged JavaScript for authorized testing: callback, fetch+eval stager, or WebSocket C2. Uses CALLBACKURL not LHOST. PDF.js runs in a browser sandbox — for OS reverse shells use exploits/multi/fileformat/ with framework PAYLOAD. !/usr/bin/env python3 --...

PDF CVE-2024-4367 PDF.js FontMatrix RCE PoC

Generate PDF PoC for CVE-2024-4367: arbitrary JavaScript via unsanitized Type1 FontMatrix in PDF.js fetch callback for validation. !/usr/bin/env python3 -- coding: utf-8 -- from kittysploit import from lib.pdf.mixins import PdfCveMixin from lib.pdf.generators.viewercve import writepdfjsfontmatrix...

CVE-2024-48662

Cross Site Scripting vulnerability in AdGuard Application v.7.18.1 4778 and before allows an attacker to execute arbitrary code via a crafted payload to the fontMatrix component...

AdGuard security vulnerabilities

AdGuard is an ad blocker from AdGuard, Inc. A security vulnerability exists in AdGuard v.7.18.1 4778 and prior versions that stems from the presence of a cross-site scripting vulnerability that allows an attacker to execute arbitrary code via a crafted payload to the fontMatrix component...

PT-2025-2800 · Adguard · Adguard Application

Name of the Vulnerable Software and Affected Versions: AdGuard Application versions 7.18.1 and earlier Description: The issue allows an attacker to execute arbitrary code via a crafted payload to the fontMatrix component. This enables the execution of arbitrary code, potentially leading to...

CVE-2024-48662

Cross Site Scripting vulnerability in AdGuard Application v.7.18.1 4778 and before allows an attacker to execute arbitrary code via a crafted payload to the fontMatrix component...

CVE-2024-48662: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting vulnerability in AdGuard Application v.7.18.1 4778 and before allows an attacker to execute arbitrary code via a crafted payload to the fontMatrix component...

GHSA-4M3G-6R7G-JV4F Arbitrary JavaScript execution due to using outdated libraries

Summary gradio-pdf projects with dependencies on the pdf.js library are vulnerable to CVE-2024-4367, which allows arbitrary JavaScript execution. PoC 1. Generate a pdf file with a malicious script in the fontmatrix. This will run alert‘XSS’. poc.pdf 2. Run the app. In this PoC, I've used the demo...

Fedora Update for fontmatrix FEDORA-2013-13523

Check for the Version of fontmatrix OpenVAS Vulnerability Test Fedora Update for fontmatrix FEDORA-2013-13523 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under...

Fedora Update for fontmatrix FEDORA-2013-13523

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora Update for fontmatrix FEDORA-2013-13479

Check for the Version of fontmatrix OpenVAS Vulnerability Test Fedora Update for fontmatrix FEDORA-2013-13479 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under...

Fedora Update for fontmatrix FEDORA-2013-13479

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 19 Update: fontmatrix-0.9.99-12.r1218.fc19

A powerful and well designed fonts manager...

Fedora 19 : fontmatrix-0.9.99-12.r1218.fc19 / icu-50.1.2-7.fc19 / libreoffice-4.1.0.3-2.fc19 / etc (2013-13523)

This is an update for icu. Unfortunately, one of the fixes adds a new virtual function to LayoutEngine class, breaking ABI. So dependent packages have to be updated too. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory...