malicious-pdf

Malicious PDF Generator ☠️ Generate 67 malicious PDF test files for testing phone-home callbacks, SSRF, XSS, XXE, NTLM credential theft, and data exfiltration in PDF viewers, converters, and web applications. Can be used with Burp Collaborator or Interact.sh Used for penetration testing, bug bount...

hardentools

Hardentools Hardentools is designed to disable a number of "features" exposed by Microsoft Windows 10 and 11 and some widely used applications Microsoft Office, LibreOffice and Adobe PDF Reader, for now. These features, commonly thought for enterprise customers, are generally useless to regular...

CVE-2017-10952

CVE-2017-10952 So this is a high level example of a local code execution attack on Foxit PDF reader. Details of this attack can be found here 1. I've copy pasted the text description of this vulnerability linked in 1 here to preserve the description over time - the description was written by the...

cve-2024-30350-research-notes

CVE-2024-30350 Research Notes Overview CVE-2024-30350 is an out-of-bounds read information disclosure vulnerability in Foxit PDF Reader. The issue was published by Trend Micro Zero Day Initiative as ZDI-24-333 and tracked before disclosure as ZDI-CAN-22708. The public advisory describes the...

CVE-2022-28672

CVE-2022-28672 Discord Server This bug was Use after Free caused by improper handling of javascript object memory references. Blog Foxit PDF Reader - UaF - RCE - JIT Spraying Advisory CVE-2022-28672 Demo...

CLEANSTART-2024-VS90101 If a user clicked into a specifically crafted PDF, the PDF reader could be confused into leaking cross-origin information, when said information is served as chunked data

Security vulnerability affects the thunderbird package. If a user clicked into a specifically crafted PDF, the PDF reader could be confused into leaking cross-origin information, when said information is served as chunked data...

CVE-2026-57239

Foxit PDF Reader LPE Proof of concept exploit for CVE-2026-3775/CVE-2026-3780 and CVE-2026-57239 which lets you obtain NT AUTHORITY\SYSTEM rights via the Foxit PDF Reader updater service. Build Just build the binary, drop it on your target and run it. cargo build --release Usage The program has...

CVE-2022-28672

CVE-2022-28672 CVE-2022-28672 Foxit PDF Reader Vulnerability - UaF - RCE - JIT Spraying FortiOS, FortiProxy and FortiSwitchManager Authentication Bypass IOC CVE-2022-40684 Introduction The recent FortiOS / FortiProxy / FortiSwitchManager CVE has been exploited in the wild. We would like to provid...

CLEANSTART-2024-EQ02730 If a user clicked into a specifically crafted PDF, the PDF reader could be confused into leaking cross-origin information, when said information is served as chunked data

Security vulnerability affects the firefox-esr package. If a user clicked into a specifically crafted PDF, the PDF reader could be confused into leaking cross-origin information, when said information is served as chunked data...

CVE-2026-62264

PDF Reader MCP is a Model Context Protocol server for reading PDF documents. In versions 2.2.0 and later prior to 3.0.1, when MCPTRANSPORT=http enables the opt-in HTTP server, @sylphx/pdf-reader-mcp reads MCPAPIKEY and logs that X-API-Key authentication is enabled but never validates the X-API-Ke...

qwen-core (>=2.0.0, <=2.3.0) potentially affected by CVE-2026-62264 via @sylphx/pdf-reader-mcp (2.7.2)

@sylphx/pdf-reader-mcp NPM version 2.7.2 is affected by a known vulnerability. The following packages have a transitive dependency on @sylphx/pdf-reader-mcp and may be impacted: - qwen-core =2.0.0, =2.3.0 Source cves: CVE-2026-62264 Source advisory: MEND:CVE-2026-62264...

CVE-2026-62264

The @sylphx/pdf-reader-mcp Model Context Protocol server (versions 2.2.0 through 3.0.1 ) contains a vulnerability where the opt-in HTTP transport (MCP_TRANSPORT=http ) fails to validate the X-API-Key header on incoming requests. Although the server logs that authentication is enabled, it only rea...

CVE-2026-62264 PDF Reader MCP: HTTP transport accepts unauthenticated requests despite a configured MCP_API_KEY

PDF Reader MCP is a Model Context Protocol server for reading PDF documents. In versions 2.2.0 and later prior to 3.0.1, when MCPTRANSPORT=http enables the opt-in HTTP server, @sylphx/pdf-reader-mcp reads MCPAPIKEY and logs that X-API-Key authentication is enabled but never validates the X-API-Ke...

CVE-2026-62264 PDF Reader MCP: HTTP transport accepts unauthenticated requests despite a configured MCP_API_KEY

PDF Reader MCP is a Model Context Protocol server for reading PDF documents. In versions 2.2.0 and later prior to 3.0.1, when MCPTRANSPORT=http enables the opt-in HTTP server, @sylphx/pdf-reader-mcp reads MCPAPIKEY and logs that X-API-Key authentication is enabled but never validates the X-API-Ke...

CVE-2026-62264

PDF Reader MCP is a Model Context Protocol server for reading PDF documents. In versions 2.2.0 and later prior to 3.0.1, when "MCPTRANSPORT=http" enables the opt-in HTTP server, "@sylphx/pdf-reader-mcp" reads "MCPAPIKEY" and logs that "X-API-Key" authentication is enabled but never validates the...

EUVD-2026-114317

PDF Reader MCP is a Model Context Protocol server for reading PDF documents. In versions 2.2.0 and later prior to 3.0.1, when MCPTRANSPORT=http enables the opt-in HTTP server, @sylphx/pdf-reader-mcp reads MCPAPIKEY and logs that X-API-Key authentication is enabled but never validates the X-API-Ke...

CVE-2026-62264: SylphxAI pdf-reader-mcp: PDF Reader MCP is a Model Context Protocol server for reading PDF documents

PDF Reader MCP is a Model Context Protocol server for reading PDF documents. In versions 2.2.0 and later prior to 3.0.1, when MCPTRANSPORT=http enables the opt-in HTTP server, @sylphx/pdf-reader-mcp reads MCPAPIKEY and logs that X-API-Key authentication is enabled but never validates the X-API-Ke...

CVE-2026-107053

Insecure permissions in foobnix Librera PDF Reader versionCode 7222 allows unauthorized attackers to arbitrarily write and truncate files in a shared storage space outside of the sandbox...

qwen-core (>=2.0.0, <=2.3.0) potentially affected by CVE-2026-62264 via @sylphx/pdf-reader-mcp (2.7.2)

@sylphx/pdf-reader-mcp NPM version 2.7.2 is affected by a known vulnerability. The following packages have a transitive dependency on @sylphx/pdf-reader-mcp and may be impacted: - qwen-core =2.0.0, =2.3.0 Source cves: CVE-2026-62264 Source advisory: OSV:GHSA-Q344-5V34-GM84...

qwen-core (>=2.0.0, <=2.3.0) potentially affected by CVE-2026-62264 via @sylphx/pdf-reader-mcp (2.7.2)

@sylphx/pdf-reader-mcp NPM version 2.7.2 is affected by a known vulnerability. The following packages have a transitive dependency on @sylphx/pdf-reader-mcp and may be impacted: - qwen-core =2.0.0, =2.3.0 Source cves: CVE-2026-62264 Source advisory: GHSA-Q344-5V34-GM84...