CVE-2022-28672

CVE-2022-28672 Discord Server Ce bogue était une Use after Free causée par une mauvaise gestion des références mémoire des objets javascript. Blog Foxit PDF Reader - UaF - RCE - JIT Spraying Avis CVE-2022-28672 Démo...

hardentools

Hardentools Hardentools wurde entwickelt, um eine Reihe von „Funktionen“ zu deaktivieren, die von Microsoft Windows 10 und 11 und einigen weit verbreiteten Anwendungen Microsoft Office, LibreOffice und Adobe PDF Reader, vorerst bereitgestellt werden. Diese Funktionen, die üblicherweise für...

CVE-2017-10952

CVE-2017-10952 Questo è un esempio di alto livello di un attacco di esecuzione di codice locale su Foxit PDF Reader. I dettagli di questo attacco possono essere trovati qui 1. Ho copiato e incollato la descrizione testuale di questa vulnerabilità collegata in 1 qui per preservare la descrizione n...

CVE-2022-28672

CVE-2022-28672 CVE-2022-28672 Foxit PDF Reader भेद्यता - UaF - RCE - JIT स्प्रेइंग FortiOS, FortiProxy और FortiSwitchManager प्रमाणीकरण बाइपास IOC CVE-2022-40684 परिचय हाल ही में FortiOS / FortiProxy / FortiSwitchManager CVE का वास्तविक दुनिया में शोषण किया जा चुका है। हम भेद्यता के बारे में...

CVE-2026-57239

Foxit PDF Reader LPE Proof-of-Concept-Exploit für CVE-2026-3775/CVE-2026-3780 und CVE-2026-57239, mit dem Sie über den Updater-Dienst von Foxit PDF Reader NT AUTHORITY\SYSTEM-Rechte erlangen können. Erstellen Einfach die Binärdatei bauen, auf dem Zielsystem ablegen und ausführen. root@kitploit:...

malicious-pdf

Malicious PDF Generator ☠️ Generate 67 malicious PDF test files for testing phone-home callbacks, SSRF, XSS, XXE, NTLM credential theft, and data exfiltration in PDF viewers, converters, and web applications. Can be used with Burp Collaborator or Interact.sh Used for penetration testing, bug bount...

CVE-2026-13126 Foxit PDF Editor/Reader Annotation Use-After-Free Remote Code Execution Vulnerability

The embedded JavaScript in the PDF deleted the pages, making the object invalid. The application attempted to perform a write operation on the invalid pop-up annotations, resulting in the program crashing...

CVE-2026-13128 Foxit PDF Editor/Reader Doc Object Use-After-Free Remote Code Execution Vulnerability

Embedding JavaScript within a PDF file will cause the page to be deleted. Subsequent scripts will continue to access the relevant properties of the document view, eventually leading to the crash of the application...

CVE-2026-13129 Foxit PDF Editor/Reader Annotation Use-After-Free Remote Code Execution Vulnerability

When the application opens a PDF file, JavaScript uses the damaged field tree to trigger field traversal, resulting in the program holding an invalid form object when accessing the field property path. Eventually, the application crashes due to reading an invalid pointer...

CVE-2026-57248

The CVE-2026-57248 entry concerns Foxit PDF Editor/Reader where opening a PDF and performing JavaScript to write annotation attributes can bypass object type/argument checks, corrupting the internal annotation structure and causing a crash on release. This is described as a local, user-interactio...

CVE-2026-57255

CVE-2026-57255 affects Foxit PDF Editor/Reader. A PDF with an abnormal color space contains attributes referencing a semantically malformed function; the function’s output isn’t validated, leading to an illegal pointer read that accesses an out-of-bounds region and crashes the application. The de...

CVE-2026-57237 Foxit PDF Editor/Reader Annotation Use-After-Free Remote Code Execution Vulnerability

When the application opens a PDF and JavaScript modifies the properties of form fields, it causes the state of the underlying objects referenced by the program to become invalid. Eventually, it reads an illegal memory address, which leads to the crash of the application...

CVE-2026-57257 Security vulnerability in Foxit PDF Editor/Reader — PRC 3D BRep Renderer Heap OOB Read

During the PRC parsing stage, there is a lack of boundary verification for the PRC entity index, which leads to an out-of-bounds read of the entity array. As a result, the application crashes...

Foxit PDF Reader < 2026.1.2 Multiple Vulnerabilities

According to its version, the Foxit PDF Reader application previously named Foxit Reader installed on the remote Windows host is prior to 2026.1.2. It is, therefore affected by multiple vulnerabilities: Note that Nessus has not tested for this issue but has instead relied only on the application'...

Foxit PDF Reader for Mac < 2026.1.2 Multiple Vulnerabilities

According to its version, the Foxit PDF Reader for Mac application previously named Foxit Reader for Mac installed on the remote macOS host is prior to 2026.1.2. It is, therefore affected by multiple vulnerabilities: Note that Nessus has not tested for this issue but has instead relied only on th...

CVE-2026-5937 Foxit PDF Editor/Reader's insufficient parameter validation leads to denial-of-service vulnerability

Insufficient parameter verification leads to the occurrence of format errors in files, which will trigger an unhandled "std::invalidargument" exception, ultimately causing the program to terminate...

Foxit PDF Reader和Foxit PDF Editor 资源管理错误漏洞

Foxit PDF Reader and Foxit PDF Editor are products of Foxit Corporation, a Chinese company. Foxit PDF Reader is a PDF reader. Foxit PDF Editor is a PDF editor. Both Foxit PDF Reader and Foxit PDF Editor have a resource management vulnerability. This vulnerability arises from the special XFA PDF...

Foxit PDF Reader AcroForm Signature Use-After-Free Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

Foxit PDF Reader < 2026.1.1 Multiple Vulnerabilities

According to its version, the Foxit PDF Reader application previously named Foxit Reader installed on the remote Windows host is prior to 2026.1.1. It is, therefore affected by multiple vulnerabilities: - Document structural anomalies caused inconsistencies between page element relationships and...

Foxit PDF Reader AcroForm Signature Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of...