malicious-pdf

Malicious PDF Generator ☠️ Generate 67 malicious PDF test files for testing phone-home callbacks, SSRF, XSS, XXE, NTLM credential theft, and data exfiltration in PDF viewers, converters, and web applications. Can be used with Burp Collaborator or Interact.sh Used for penetration testing, bug bount...

hardentools

Hardentools Hardentools is designed to disable a number of "features" exposed by Microsoft Windows 10 and 11 and some widely used applications Microsoft Office, LibreOffice and Adobe PDF Reader, for now. These features, commonly thought for enterprise customers, are generally useless to regular...

CVE-2017-10952

CVE-2017-10952 So this is a high level example of a local code execution attack on Foxit PDF reader. Details of this attack can be found here 1. I've copy pasted the text description of this vulnerability linked in 1 here to preserve the description over time - the description was written by the...

cve-2024-30350-research-notes

CVE-2024-30350 Research Notes Overview CVE-2024-30350 is an out-of-bounds read information disclosure vulnerability in Foxit PDF Reader. The issue was published by Trend Micro Zero Day Initiative as ZDI-24-333 and tracked before disclosure as ZDI-CAN-22708. The public advisory describes the...

CVE-2022-28672

CVE-2022-28672 Discord Server This bug was Use after Free caused by improper handling of javascript object memory references. Blog Foxit PDF Reader - UaF - RCE - JIT Spraying Advisory CVE-2022-28672 Demo...

CVE-2026-57239

Foxit PDF Reader LPE Proof of concept exploit for CVE-2026-3775/CVE-2026-3780 and CVE-2026-57239 which lets you obtain NT AUTHORITY\SYSTEM rights via the Foxit PDF Reader updater service. Build Just build the binary, drop it on your target and run it. cargo build --release Usage The program has...

CVE-2022-28672

CVE-2022-28672 CVE-2022-28672 Foxit PDF Reader Vulnerability - UaF - RCE - JIT Spraying FortiOS, FortiProxy and FortiSwitchManager Authentication Bypass IOC CVE-2022-40684 Introduction The recent FortiOS / FortiProxy / FortiSwitchManager CVE has been exploited in the wild. We would like to provid...

CVE-2026-62264

PDF Reader MCP is a Model Context Protocol server for reading PDF documents. In versions 2.2.0 and later prior to 3.0.1, when MCPTRANSPORT=http enables the opt-in HTTP server, @sylphx/pdf-reader-mcp reads MCPAPIKEY and logs that X-API-Key authentication is enabled but never validates the X-API-Ke...

CVE-2026-62264

The @sylphx/pdf-reader-mcp Model Context Protocol server (versions 2.2.0 through 3.0.1 ) contains a vulnerability where the opt-in HTTP transport (MCP_TRANSPORT=http ) fails to validate the X-API-Key header on incoming requests. Although the server logs that authentication is enabled, it only rea...

CVE-2026-62264 PDF Reader MCP: HTTP transport accepts unauthenticated requests despite a configured MCP_API_KEY

PDF Reader MCP is a Model Context Protocol server for reading PDF documents. In versions 2.2.0 and later prior to 3.0.1, when MCPTRANSPORT=http enables the opt-in HTTP server, @sylphx/pdf-reader-mcp reads MCPAPIKEY and logs that X-API-Key authentication is enabled but never validates the X-API-Ke...

CVE-2026-62264 PDF Reader MCP: HTTP transport accepts unauthenticated requests despite a configured MCP_API_KEY

PDF Reader MCP is a Model Context Protocol server for reading PDF documents. In versions 2.2.0 and later prior to 3.0.1, when MCPTRANSPORT=http enables the opt-in HTTP server, @sylphx/pdf-reader-mcp reads MCPAPIKEY and logs that X-API-Key authentication is enabled but never validates the X-API-Ke...

CVE-2026-62264: SylphxAI pdf-reader-mcp: PDF Reader MCP is a Model Context Protocol server for reading PDF documents

PDF Reader MCP is a Model Context Protocol server for reading PDF documents. In versions 2.2.0 and later prior to 3.0.1, when MCPTRANSPORT=http enables the opt-in HTTP server, @sylphx/pdf-reader-mcp reads MCPAPIKEY and logs that X-API-Key authentication is enabled but never validates the X-API-Ke...

CVE-2026-62264

When "@sylphx/pdf-reader-mcp" is run as an HTTP server "MCPTRANSPORT=http", it reads the "MCPAPIKEY" environment variable and logs "API key authentication enabled X-API-Key header" at startup, but it never validated the "X-API-Key" header on incoming requests. The key was read into a variable and...

CVE-2026-107053

Insecure permissions in foobnix Librera PDF Reader versionCode 7222 allows unauthorized attackers to arbitrarily write and truncate files in a shared storage space outside of the sandbox...

GHSA-Q344-5V34-GM84 @sylphx/pdf-reader-mcp: HTTP transport accepts unauthenticated requests despite a configured MCP_API_KEY

Impact When @sylphx/pdf-reader-mcp is run as an HTTP server MCPTRANSPORT=http, it reads the MCPAPIKEY environment variable and logs API key authentication enabled X-API-Key header at startup, but it never validated the X-API-Key header on incoming requests. The key was read into a variable and...

@sylphx/pdf-reader-mcp: HTTP transport accepts unauthenticated requests despite a configured MCP_API_KEY

Impact When @sylphx/pdf-reader-mcp is run as an HTTP server MCPTRANSPORT=http, it reads the MCPAPIKEY environment variable and logs API key authentication enabled X-API-Key header at startup, but it never validated the X-API-Key header on incoming requests. The key was read into a variable and...

CVE-2026-107053

The foobnix Librera PDF Reader (versionCode 7222 ) is affected by a vulnerability involving insecure permissions . This flaw allows unauthorized attackers to arbitrarily write and truncate files within a shared storage space located outside of the application's sandbox. No specific remediation, e...

EUVD-2026-113260

Insecure permissions in foobnix Librera PDF Reader versionCode 7222 allows unauthorized attackers to arbitrarily write and truncate files in a shared storage space outside of the sandbox...

PT-2026-133262

Name of the Vulnerable Software and Affected Versions PDF Reader MCP versions 2.2.0 through 3.0.0 Description When the opt-in HTTP server is enabled via MCP TRANSPORT=http, the server logs that X-API-Key authentication is active after reading the MCP API KEY variable, but it fails to validate the...

Foxit PDF Reader < 2026.2.1 Multiple Vulnerabilities

According to its version, the Foxit PDF Reader application previously named Foxit Reader installed on the remote Windows host is prior to 2026.2.1. It is, therefore affected by multiple vulnerabilities: Note that Nessus has not tested for this issue but has instead relied only on the application'...