CVE-2025-66516-Writeup-POC

CVE-2025-66516: Apache Tika में क्रिटिकल XXE भेद्यता कार्यकारी सारांश CVE-2025-66516 Apache Tika में एक क्रिटिकल XML एक्सटर्नल एंटिटी XXE इंजेक्शन भेद्यता है जिसका CVSS स्कोर 10.0 अधिकतम गंभीरता है। यह भेद्यता रिमोट हमलावरों को विशेष रूप से तैयार की गई PDF दस्तावेज़ अपलोड करके मनमानी फ़ाइलें पढ़न...

CVE-2017-9096-iText-XXE

CVE-2017-9096 1. إنشاء ملف PDF ضار يحتوي على XXE احصل على ملف PDF يحتوي على نموذج: root@kitploit: wget https://www.pdfscripting.com/public/FreeStuff/PDFSamples/ModifySubmitExample.pdf -O input.pdf فك ضغط PDF لفعل ذلك، تحتاج إلى فك ضغط PDF باستخدام qpdf --qdf --object-streams=disable input.pdf...

Linux Distros Unpatched Vulnerability : CVE-2026-84310

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - pypdf is a free and open-source pure-python PDF library. Prior to 6.16.1, an attacker can craft a PDF that causes pypdf/doccommon.py getoutline to consume long...

EUVD-2026-68894

pypdf: Inefficient handling of non-whitespace inputs in readuntilwhitespace...

PS-2017-13---CVE-2018-9950

Foxit Reader PDF Parsing Out-Of-Bounds Read Information Disclosure Vulnerability Vulnérabilité Restriction inappropriée des opérations dans les limites d'un tampon mémoire Description de la vulnérabilité Cette vulnérabilité permet à des attaquants distants de divulguer des informations sensibles...

cve-2018-15968

ثغرة كشف معلومات بسبب قراءة خارج الحدود في Adobe Reader الثغرة ثغرة التقييد غير السليم للعمليات ضمن حدود المخزن المؤقت للذاكرة وصف الثغرة تسمح هذه الثغرة للمهاجمين عن بُعد بكشف معلومات حساسة على التثبيتات المعرّضة للخطر من Adobe Reader. يتطلب استغلال هذه الثغرة تفاعل المستخدم، إذ يجب على الهدف...

xpdf-docker

صور Xpdf Docker يحتوي هذا المستودع على صور docker لإصدار Xpdf 4.04، والذي يعد عرضة لثغرة CVE-2022-30524. بناء الصور 📦 يحتوي هذا المستودع على الصورة في 3 نكهات: bullseye/gcc : دبيان "bullseye"، مُبنية باستخدام gcc bullseye/afl : دبيان "bullseye"، مُبنية باستخدام afl-clang-fast++ ملف تعريف تصحيح...

CVE-2026-84310

pypdf is a free and open-source pure-python PDF library. Prior to 6.16.1, an attacker can craft a PDF that causes pypdf/doccommon.py getoutline to consume long runtimes and large amounts of memory when retrieving document outlines with large numbers of entries or deeply nested reused paths becaus...

DEBIAN-CVE-2026-84309

pypdf is a free and open-source pure-python PDF library. Prior to 6.16.0, an attacker can craft a PDF whose cyclic tree structure causes pypdf/generic/datastructures.py TreeObject.insertchild to follow /Next links indefinitely when a writing code path inserts a child, producing an infinite loop...

CVE-2026-84311 pypdf: Possible long runtimes/large memory usage when extracting XForm objects

pypdf is a free and open-source pure-python PDF library. Prior to 6.16.1, an attacker can craft a PDF that causes pypdf/page.py PageObject.extracttext and PageObject.extractxformtext to traverse a directed acyclic graph of reused form XObjects in which each form invokes a child multiple times,...

CVE-2026-84311

pypdf , a pure-Python PDF library, is vulnerable to a denial-of-service condition in versions prior to 6.16.1 . A crafted PDF can trigger exponential traversal in PageObject._extract_text and PageObject.extract_xform_text (in pypdf/_page.py) by invoking a directed acyclic graph of reused form XOb...

CVE-2026-84310

pypdf , a pure-Python PDF library, is vulnerable to denial-of-service via crafted PDFs. The vulnerable component is the _get_outline function in pypdf/_doc_common.py, which lacks global entry-count and nesting-depth limits during outline traversal. A malicious PDF with a large number of outline e...

EUVD-2026-69606

pypdf is a free and open-source pure-python PDF library. Prior to 6.16.1, an attacker can craft a PDF that causes pypdf/doccommon.py getoutline to consume long runtimes and large amounts of memory when retrieving document outlines with large numbers of entries or deeply nested reused paths becaus...

CVE-2026-84310 pypdf: Possible long runtimes/large memory usage when retrieving outlines

pypdf is a free and open-source pure-python PDF library. Prior to 6.16.1, an attacker can craft a PDF that causes pypdf/doccommon.py getoutline to consume long runtimes and large amounts of memory when retrieving document outlines with large numbers of entries or deeply nested reused paths becaus...

CVE-2026-84309 pypdf: Possible infinite loop for TreeObject.insert_child

pypdf is a free and open-source pure-python PDF library. Prior to 6.16.0, an attacker can craft a PDF whose cyclic tree structure causes pypdf/generic/datastructures.py TreeObject.insertchild to follow /Next links indefinitely when a writing code path inserts a child, producing an infinite loop...

CVE-2026-82398

A flaw was found in pypdf. An attacker can craft a PDF that causes long runtimes when the readuntilwhitespace function processes a stream containing a long sequence of bytes without whitespace. This occurs due to inefficient algorithmic complexity, where the function repeatedly performs immutable...

cve-2025-54988-VulnTikaProject

مشروع اختبار ثغرة Apache Tika هذا تطبيق Spring Boot يستخدم Apache Tika 3.2.1 لمعالجة المستندات واستخراج النصوص. المتطلبات الأساسية يتطلب Docker الاستخدام ./start-app.sh أو docker compose up -d تنفيذ CVE قم برفع ملف PDF الضار https://github.com/mgthuramoemyint/POC-CVE-2025-54988 إلى نقطة النهاية...

PT-2026-84463

Name of the Vulnerable Software and Affected Versions pypdf versions prior to 6.16.1 Description An attacker can craft a PDF file that leads to excessive memory consumption and long runtimes. This occurs when extracting text from a page containing numerous reused form XObjects, where a form invok...

DEBIAN-CVE-2026-82398

pypdf is a free and open-source pure-python PDF library. Prior to 6.15.0, an attacker can craft a PDF that causes long runtimes when the pypdf/utils.py function readuntilwhitespace reads a stream containing a long run of bytes without whitespace. The function repeatedly performs immutable bytes...

CVE-2026-82398 pypdf: Inefficient handling of non-whitespace inputs in read_until_whitespace

pypdf is a free and open-source pure-python PDF library. Prior to 6.15.0, an attacker can craft a PDF that causes long runtimes when the pypdf/utils.py function readuntilwhitespace reads a stream containing a long run of bytes without whitespace. The function repeatedly performs immutable bytes...