CVE-2017-10952

CVE-2017-10952 以下是对 Foxit PDF 阅读器实施本地代码执行攻击的一个高级示例。此攻击的详细描述可在此处找到1。我已将1中链接到的漏洞文本描述复制粘贴到此处中，以便长期保存该描述——该描述由作者 Root 在 vulners.com 上撰写。 安装 Foxit 安装 FoxitReaderv8.3.0.14878.exe。按步骤完成安装过程。由于这只是一个演示如何利用此版本 Foxit PDF 阅读器的高级示例，因此无需修改浏览器或 Windows 默认应用程序设置来打开 PDF 文件；以下是一些安装截图，可帮助识别安装设置： 攻击演示 1. 安装 Foxit...

malicious-pdf

Malicious PDF Generator ☠️ Generate 67 malicious PDF test files for testing phone-home callbacks, SSRF, XSS, XXE, NTLM credential theft, and data exfiltration in PDF viewers, converters, and web applications. Can be used with Burp Collaborator or Interact.sh Used for penetration testing, bug bount...

hardentools

Hardentools Hardentools は、Microsoft Windows 10 および 11 と、いくつかの広く使用されているアプリケーション（現時点では Microsoft Office、LibreOffice、Adobe PDF...

CVE-2022-28672

CVE-2022-28672 Discord Server このバグは、javascriptオブジェクトのメモリ参照の不適切な処理によって引き起こされた Use after Free です。 ブログ Foxit PDF Reader - UaF - RCE - JIT Spraying アドバイザリ CVE-2022-28672 デモ...

cve-2024-30350-research-notes

CVE-2024-30350 研究笔记 概述 CVE-2024-30350 是 Foxit PDF Reader 中的一个越界读取信息泄露漏洞。该问题由 Trend Micro Zero Day Initiative 以 ZDI-24-333 发布，并在披露前以 ZDI-CAN-22708 进行跟踪。 公开公告将漏洞区域描述为 Foxit PDF Reader 对 Annotation 对象的处理。精心构造的 PDF 可使应用程序读取超出已分配缓冲区末尾的内容。利用该漏洞需要用户交互，例如打开恶意 PDF...

CVE-2026-57239

Foxit PDF Reader LPE Foxit PDF Readerのアップデーターサービスを介してNT AUTHORITY\SYSTEM権限を取得できる、CVE-2026-3775/CVE-2026-3780およびCVE-2026-57239の概念実証エクスプロイトです。 ビルド バイナリをビルドし、ターゲットに配置して実行するだけです。 cargo build --release 使い方 このプログラムには3つの主要エントリーポイントがあります:...

CVE-2022-28672

CVE-2022-28672 CVE-2022-28672 Foxit PDF Readerの脆弱性 - UaF - RCE - JIT Spraying FortiOS、FortiProxy、FortiSwitchManagerの認証バイパスのIOC CVE-2022-40684 はじめに 最近のFortiOS / FortiProxy / FortiSwitchManagerのCVEは、実際に悪用されています。この脆弱性に関する追加情報を提供し、ユーザーが侵害されたかどうかを判断できるようにしたいと思います。この投稿では、FortiOS...

Foxit PDF Reader FileOpen Uninitialized Variable Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the FileOpen...

Foxit PDF Reader JPEG File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsi...

Foxit PDF Reader PDF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsi...

Foxit PDF Reader JPEG2000 Parsing Memory Corruption Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

Foxit PDF Reader FoxitUpdater Race Condition Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Foxit PDF Reader. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the update...

Foxit PDF Reader FoxitUpdater Improper Certificate Validation Local Privilege Escalation Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

Foxit PDF Reader PRC Stream Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of PR...

Foxit PDF Reader Annotation Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of...

Foxit PDF Reader Doc Object Use-After-Free Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

Foxit PDF Reader activeDocs Missing Authorization Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

Foxit PDF Reader Portfolio Directory Traversal Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of...

Foxit PDF Reader RichMedia Annotation Directory Traversal Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of...

Foxit PDF Reader importIcon NTLM Response Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose NTLM responses on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the implementati...