CVE-2025-66516-Writeup-POC

CVE-2025-66516: Критическая уязвимость XXE в Apache Tika Краткое описание CVE-2025-66516 — это критическая уязвимость внедрения XML-внешних сущностей XXE в Apache Tika с оценкой CVSS 10.0 максимальная степень серьезности. Уязвимость позволяет удаленным злоумышленникам читать произвольные файлы,...

CVE-2017-9096-iText-XXE

CVE-2017-9096 1. Создание вредоносного PDF с XXE Получите PDF с формой: wget https://www.pdfscripting.com/public/FreeStuff/PDFSamples/ModifySubmitExample.pdf -O input.pdf Распаковка PDF Для этого необходимо распаковать PDF с помощью qpdf --qdf --object-streams=disable input.pdf output.pdf, затем...

PS-2017-13---CVE-2018-9950

Уязвимость информационного раскрытия при чтении за пределами границ при разборе PDF в Foxit Reader Уязвимость Неправильное ограничение операций в рамках границ буфера памяти Описание уязвимости Эта уязвимость позволяет удаленным злоумышленникам раскрывать конфиденциальную информацию в уязвимых...

xpdf-docker

Xpdf Docker-образы Этот репозиторий содержит Docker-образы для Xpdf версии 4.04, уязвимой к CVE-2022-30524. Сборка образов 📦 Образ представлен в 3 вариантах: bullseye/gcc : Debian "bullseye", собран с помощью gcc bullseye/afl : Debian "bullseye", собран с помощью afl-clang-fast++ отладочный профи...

CVE-2026-102996 pypdf: Possible large memory usage when parsing font data

pypdf is a free and open-source pure-python PDF library. Prior to 6.18.1, a crafted PDF can provide a TrueType or Type1 simple font with an unusually large /Widths array, causing pypdf/font.py Font.collectttt1characterwidths to process entries beyond the 256 character codes meaningful for a simpl...

cve-2025-54988-VulnTikaProject

Проект тестирования уязвимости Apache Tika Это приложение Spring Boot, использующее Apache Tika 3.2.1 для обработки документов и извлечения текста. Предварительные требования Наличие Docker Использование ./start-app.sh или docker compose up -d Выполнение CVE Загрузите ваш вредоносный PDF...

CentOS Linux 7 [TuxCare] Security Update: clamav / clamav-data / clamav-devel / clamav-doc / etc Multiple Vulnerabilities (CENTOS7:CLSA-2024:1732562044)

The CentOS Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS7:CLSA-2024:1732562044 advisory. - A vulnerability in the PDF parsing module of Clam AntiVirus ClamAV versions 1.4.0, 1.3.2 and prior versions, all 1.2.x versions, 1.0.6...

cisco-CVE-2023-31488

О проекте Исследователь безопасности: ly1g3, ly1g3attuta.io Отпечаток GPG: https://keys.openpgp.org/vks/v1/by-fingerprint/5FE85CE4E8F675F5ABD2C0A33CE8BE447ED6D586 Обзор: zero-click RCE через email с правами root - удалённое выполнение кода / повреждение памяти / ROP-цепочка CVE: CVE-2023-31488...

USN-8837-1: pdfminer vulnerabilities

It was discovered that pdfminer did not safely parse specially crafted PDF files. An attacker could possibly use these issues to execute arbitrary code. CVE-2025-64512, CVE-2025-70559...

cve-2018-15968

Уязвимость раскрытия информации в Adobe Reader из-за чтения за пределами буфера Уязвимость Некорректное ограничение операций в границах буфера памяти Описание уязвимости Эта уязвимость позволяет удалённым злоумышленникам раскрывать конфиденциальную информацию в уязвимых установках Adobe Reader. Д...

CVE-2025-64512-pdfminer-PoC

CVE-2025-64512 — PoC десериализации CMapDB в pdfminer.six Доказательство концепции PoC уязвимости десериализации в pdfminer.six, которая приводит к выполнению произвольного кода при разборе специально созданного PDF. ЦЕЛЬ / ПРАВОВОЙ ОТКАЗ Этот репозиторий предоставлен только для образовательных...

Foxit PDF Reader PDF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsi...

CVE-2026-92177

pdfforge PDF Architect PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of pdfforge PDF Architect. User interaction is required to exploit this vulnerability in that the target...

CVE-2026-92178

pdfforge PDF Architect PDF File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of pdfforge PDF Architect. User interaction is required to exploit this vulnerability in that the target mu...

CVE-2026-92179

pdfforge PDF Architect PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of pdfforge PDF Architect. User interaction is required to exploit this vulnerability in that the target...

CVE-2026-92177 pdfforge PDF Architect PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

pdfforge PDF Architect PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of pdfforge PDF Architect. User interaction is required to exploit this vulnerability in that the target...

EUVD-2026-79138

pdfforge PDF Architect PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of pdfforge PDF Architect. User interaction is required to exploit this vulnerability in that the target...

CVE-2026-92177

pdfforge PDF Architect is affected by an out-of-bounds write vulnerability in its PDF file parsing functionality. The root cause is a lack of proper validation of user-supplied data, which allows a write past the end of an allocated object. A remote attacker can leverage this flaw to execute arbi...

CVE-2026-92178 pdfforge PDF Architect PDF File Parsing Memory Corruption Remote Code Execution Vulnerability

pdfforge PDF Architect PDF File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of pdfforge PDF Architect. User interaction is required to exploit this vulnerability in that the target mu...

EUVD-2026-79137

pdfforge PDF Architect PDF File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of pdfforge PDF Architect. User interaction is required to exploit this vulnerability in that the target mu...