malicious-pdf

Malicious PDF Generator ☠️ Generate 67 malicious PDF test files for testing phone-home callbacks, SSRF, XSS, XXE, NTLM credential theft, and data exfiltration in PDF viewers, converters, and web applications. Can be used with Burp Collaborator or Interact.sh Used for penetration testing, bug bount...

CVE-2022-28672

CVE-2022-28672 Discord Server 이 버그는 JavaScript 객체 메모리 참조의 부적절한 처리로 인해 발생한 Use after Free입니다. 블로그 Foxit PDF Reader - UaF - RCE - JIT Spraying 권고 CVE-2022-28672 데모...

CVE-2017-10952

CVE-2017-10952 이것은 Foxit PDF 리더에 대한 로컬 코드 실행 공격의 고급 예제입니다. 이 공격에 대한 자세한 내용은 여기 1에서 확인할 수 있습니다. 1에 링크된 이 취약점에 대한 텍스트 설명을 여기에 복사하여 시간이 지나도 설명이 보존되도록 했습니다. 해당 설명은 vulners.com의 저자 Root가 작성했습니다. Foxit 설치 FoxitReaderv8.3.0.14878.exe를 설치합니다. 설치 과정을 진행합니다. 이는 Foxit PDF 리더의 이 버전을 악용하는 방법에 대한 고급 데모일 뿐이므로,...

cve-2024-30350-research-notes

CVE-2024-30350 リサーチノート 概要 CVE-2024-30350 は、Foxit PDF Reader における境界外読み取り（out-of-bounds read）の情報漏えい脆弱性です。この問題は Trend Micro Zero Day Initiative により ZDI-24-333 として公開され、開示前は ZDI-CAN-22708 として追跡されていました。 公開アドバイザリでは、脆弱な領域を Foxit PDF Reader の Annotation オブジェクトの処理として説明しています。細工された PDF...

CVE-2022-28672

CVE-2022-28672 CVE-2022-28672 Foxit PDF Readerの脆弱性 - UaF - RCE - JIT Spraying FortiOS、FortiProxy、FortiSwitchManagerの認証バイパスのIOC CVE-2022-40684 はじめに 最近のFortiOS / FortiProxy / FortiSwitchManagerのCVEは、実際に悪用されています。この脆弱性に関する追加情報を提供し、ユーザーが侵害されたかどうかを判断できるようにしたいと思います。この投稿では、FortiOS...

CVE-2026-57239

Foxit PDF Reader LPE 다음 취약점에 대한 개념 증명 익스플로잇입니다: CVE-2026-3775/CVE-2026-3780 및 CVE-2026-57239. Foxit PDF Reader 업데이터 서비스를 통해 NT AUTHORITY\SYSTEM 권한을 얻을 수 있습니다. 빌드 바이너리를 빌드한 후 타겟에 복사하고 실행하기만 하면 됩니다. root@kitploit: cargo build --release 사용법 프로그램에는 세 가지 주요 진입점이 있습니다: check, exploit, cleanup. 인수가 수행하는...

Foxit PDF Reader < 2026.1.3 Vulnerability

According to its version, the Foxit PDF Reader application previously named Foxit Reader installed on the remote Windows host is prior to 2026.1.3. It is, therefore affected by vulnerability: - Foxit PDF Editor/Reader inconsistently alerts users when signature fields are abnormally modified,...

CVE-2026-13128 Foxit PDF Editor/Reader Doc Object Use-After-Free Remote Code Execution Vulnerability

Embedding JavaScript within a PDF file will cause the page to be deleted. Subsequent scripts will continue to access the relevant properties of the document view, eventually leading to the crash of the application...

CVE-2026-13129 Foxit PDF Editor/Reader Annotation Use-After-Free Remote Code Execution Vulnerability

When the application opens a PDF file, JavaScript uses the damaged field tree to trigger field traversal, resulting in the program holding an invalid form object when accessing the field property path. Eventually, the application crashes due to reading an invalid pointer...

CVE-2026-57248

The CVE-2026-57248 entry concerns Foxit PDF Editor/Reader where opening a PDF and performing JavaScript to write annotation attributes can bypass object type/argument checks, corrupting the internal annotation structure and causing a crash on release. This is described as a local, user-interactio...

CVE-2026-57255

CVE-2026-57255 affects Foxit PDF Editor/Reader. A PDF with an abnormal color space contains attributes referencing a semantically malformed function; the function’s output isn’t validated, leading to an illegal pointer read that accesses an out-of-bounds region and crashes the application. The de...

CVE-2026-57237 Foxit PDF Editor/Reader Annotation Use-After-Free Remote Code Execution Vulnerability

When the application opens a PDF and JavaScript modifies the properties of form fields, it causes the state of the underlying objects referenced by the program to become invalid. Eventually, it reads an illegal memory address, which leads to the crash of the application...

CVE-2026-57257 Security vulnerability in Foxit PDF Editor/Reader — PRC 3D BRep Renderer Heap OOB Read

During the PRC parsing stage, there is a lack of boundary verification for the PRC entity index, which leads to an out-of-bounds read of the entity array. As a result, the application crashes...

Foxit PDF Reader < 2026.1.2 Multiple Vulnerabilities

According to its version, the Foxit PDF Reader application previously named Foxit Reader installed on the remote Windows host is prior to 2026.1.2. It is, therefore affected by multiple vulnerabilities: Note that Nessus has not tested for this issue but has instead relied only on the application'...

Foxit PDF Reader for Mac < 2026.1.2 Multiple Vulnerabilities

According to its version, the Foxit PDF Reader for Mac application previously named Foxit Reader for Mac installed on the remote macOS host is prior to 2026.1.2. It is, therefore affected by multiple vulnerabilities: Note that Nessus has not tested for this issue but has instead relied only on th...

CVE-2026-5937 Foxit PDF Editor/Reader's insufficient parameter validation leads to denial-of-service vulnerability

Insufficient parameter verification leads to the occurrence of format errors in files, which will trigger an unhandled "std::invalidargument" exception, ultimately causing the program to terminate...

Foxit PDF Reader和Foxit PDF Editor 资源管理错误漏洞

Foxit PDF Reader and Foxit PDF Editor are products of Foxit Corporation, a Chinese company. Foxit PDF Reader is a PDF reader. Foxit PDF Editor is a PDF editor. Both Foxit PDF Reader and Foxit PDF Editor have a resource management vulnerability. This vulnerability arises from the special XFA PDF...

Foxit PDF Reader AcroForm Signature Use-After-Free Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

Foxit PDF Reader < 2026.1.1 Multiple Vulnerabilities

According to its version, the Foxit PDF Reader application previously named Foxit Reader installed on the remote Windows host is prior to 2026.1.1. It is, therefore affected by multiple vulnerabilities: - Document structural anomalies caused inconsistencies between page element relationships and...

Foxit PDF Reader AcroForm Signature Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of...