cve-2024-4367-PoC-fixed

cve-2024-4367-PoC-fixed PDF.js es un visor de PDF basado en JavaScript mantenido por Mozilla. Esta vulnerabilidad permite a un atacante ejecutar código JavaScript arbitrario inmediatamente después de abrir un archivo PDF malicioso. Esto afecta a todos los usuarios de Firefox 126, ya que Firefox...

CVE-2026-93378

A flaw was found in Google Chrome. A remote attacker who had compromised the renderer process could exploit missing authorization in the Storage component via a crafted PDF file. This could allow them to bypass site isolation, potentially leading to unauthorized access to data or further system...

Wagtail-CMS-XSS

Wagtail-6.4.1-CMS-XSS CVE-2025-45388 Wagtail CMS 6.4.1 XSS almacenado Vulnerabilidad PoC de XSS almacenado en CMS Resumen Este repositorio demuestra una vulnerabilidad de XSS almacenado encontrada en la plataforma Wagtail 6.4.1 CMS. Se incrusta un JavaScript malicioso en un archivo PDF, y cada ve...

CVE-2025-64512-Polyglot-PoC

CVE-2025-64512 Polyglot Payload In the last weeks in November 2025, an interesting vulnerability CVE-2025-64512 was disclosed in pdfminer.six, a popular Python project to process PDF files, used in particular in AI pipelines. The vulnerability enables remote code execution by deserializing...

CVE-2024-27665

CVE-2024-27665 Unifiedtransform v2.X es vulnerable a Cross-Site Scripting XSS Almacenado mediante la función de carga de archivos en el módulo Syllabus. Vendor: https://github.com/changeweb/Unifiedtransform PoC Paso 1: Inicie sesión en la aplicación y navegue al módulo Academic. Paso 2: Cree...

CVE-2024-4367-hands-on-01

!IMPORTANT Este repositorio es para aprender sobre vulnerabilidades. Realice este taller únicamente en un ordenador adecuado que usted gestione. No realice nunca actividades ilegales. Además, el autor no se hace responsable de ningún daño o responsabilidad derivados de este repositorio...

CVE-2024-4367

CVE-2024-4367 PoC Uso root@kitploit: python poc.py mal.pdf "alert'0xr2r'" Referencias CVE-2024-4367: Ejecución arbitraria de JS en PDF.js PDF.js PoC Escáner plantillas...

CVE-2026-93381

Buffer overflow in PDFium in Google Chrome on on Windows prior to 153.0.8010.52 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code inside the sandbox via a crafted PDF file. Chromium security severity: High...

CVE-2025-66837

CVE-2025-66837 Carga de archivos maliciosos Descripción Una vulnerabilidad de carga de archivos en ARIS permite a los atacantes ejecutar código arbitrario mediante la carga de un archivo PDF/Malware manipulado Puntuación CVSS: 6.8 Media Tipo de ataque Remoto Autenticado Versiones afectadas...

CVE-2024-38077-check

Análisis de vulnerabilidad de archivos PDF asíncronos. Mi capacidad es limitada, todavía no puedo lograr RCE. Por favor, que los expertos me guíen. Para la verificación de la vulnerabilidad, solo es necesario cambiar la IP. root@kitploit: if name == 'main': printlogo...

Astra Linux – Vulnerability in Chromium

The use of “after free” in PDFium in Google Chrome before version 149.0.7827.53 allowed a remote attacker to execute arbitrary code within a sandbox through a crafted PDF file. Chromium security severity: Low...

Astra Linux – Vulnerability in Chromium

The use of “after free” in PDFium in Google Chrome before version 149.0.7827.53 allowed a remote attacker to execute arbitrary code within a sandbox through a crafted PDF file. Chromium security severity: Low...

Astra Linux – Vulnerability in Chromium

Uninitialized data in PDFium in Google Chrome prior to 90.0.4430.72 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted PDF file...

Astra Linux – Vulnerability in Poppler

A vulnerability was discovered in the freedesktop Poppler version 20.12.1. This vulnerability allows remote attackers to trigger a Denial-of-Service DoS attack through a crafted .pdf file, targeting the FoFiType1C::cvtGlyph function...

The vulnerability of PDF components in Google Chrome and Microsoft Edge web browsers allows a hacker to trigger a service failure.

The vulnerability of PDF components in Google Chrome and Microsoft Edge browsers is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to cause a service failure using a specially created PDF file...

The vulnerability of the PDFium component in Google Chrome and Microsoft Edge web browsers allows a hacker to trigger a service failure.

The vulnerability of the PDFium component in Google Chrome and Microsoft Edge browsers is related to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to cause a service failure through the use of a specially created PDF file...

The vulnerability of the PDFium component in Google Chrome and Microsoft Edge web browsers allows a hacker to trigger a service failure.

The vulnerability of the PDFium component in Google Chrome and Microsoft Edge browsers is related to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to cause a service failure through the use of a specially created PDF file...

The vulnerability of the File System Access component in Google Chrome and Microsoft Edge web browsers allows attackers to gain access to confidential data and compromise data integrity.

The vulnerability of the File System Access component in Google Chrome and Microsoft Edge is related to lack of access control. Exploiting this vulnerability can allow a remote attacker to gain access to confidential data and influence data integrity through a specially created PDF file...

CVE-2026-82472

Documenso before 2.13.0 accepts PDF file uploads on the /api/files/upload-pdf endpoint without requiring authentication, session tokens, or API credentials. Unauthenticated attackers can upload arbitrary PDF files indefinitely to exhaust storage resources or fill the database with unlinked docume...

CVE-2026-79021

Missing authorization in InterestGroups in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass system access restrictions via a crafted PDF file. Chromium security severity: Low...