hardentools

Hardentools Hardentools 旨在禁用 Microsoft Windows 10 和 11 以及一些常用应用程序（目前包括 Microsoft Office、LibreOffice 和 Adobe PDF Reader）所提供的多项“功能”。这些功能通常是为企业客户设计的，对普通用户来说基本无用，反而会带来风险，因为攻击者经常滥用它们来在受害者的计算机上执行恶意代码。本工具的目的很简单：通过禁用这些低垂果实来减少攻击面。Hardentools 面向有风险的个人，他们可能希望以牺牲 部分 可用性为代价来换取额外的安全防护。它不适用于企业环境。 警告 ：此工具会禁用...

CVE-2017-10952

CVE-2017-10952 以下是对 Foxit PDF 阅读器实施本地代码执行攻击的一个高级示例。此攻击的详细描述可在此处找到1。我已将1中链接到的漏洞文本描述复制粘贴到此处中，以便长期保存该描述——该描述由作者 Root 在 vulners.com 上撰写。 安装 Foxit 安装 FoxitReaderv8.3.0.14878.exe。按步骤完成安装过程。由于这只是一个演示如何利用此版本 Foxit PDF 阅读器的高级示例，因此无需修改浏览器或 Windows 默认应用程序设置来打开 PDF 文件；以下是一些安装截图，可帮助识别安装设置： 攻击演示 1. 安装 Foxit...

cve-2024-30350-research-notes

CVE-2024-30350 研究笔记 概述 CVE-2024-30350 是 Foxit PDF Reader 中的一个越界读取信息泄露漏洞。该问题由 Trend Micro Zero Day Initiative 以 ZDI-24-333 发布，并在披露前以 ZDI-CAN-22708 进行跟踪。 公开公告将漏洞区域描述为 Foxit PDF Reader 对 Annotation 对象的处理。精心构造的 PDF 可使应用程序读取超出已分配缓冲区末尾的内容。利用该漏洞需要用户交互，例如打开恶意 PDF...

CVE-2022-28672

CVE-2022-28672 Discord 服务器 此漏洞是由于对javascript对象内存引用的不当处理导致的Use after Free。 博客 Foxit PDF Reader - UaF - RCE - JIT Spraying 安全公告 CVE-2022-28672 演示...

malicious-pdf

Malicious PDF Generator ☠️ Generate 67 malicious PDF test files for testing phone-home callbacks, SSRF, XSS, XXE, NTLM credential theft, and data exfiltration in PDF viewers, converters, and web applications. Can be used with Burp Collaborator or Interact.sh Used for penetration testing, bug bount...

CVE-2026-57239

Foxit PDF Reader LPE 针对 CVE-2026-3775/CVE-2026-3780 和 CVE-2026-57239 的概念验证漏洞利用程序，可通过 Foxit PDF Reader 更新服务获取 NT AUTHORITY\SYSTEM 权限。 构建 直接编译二进制文件，将其放到目标系统上并运行即可。 cargo build --release 用法 该程序有三个主要入口点：check、exploit 和 cleanup。参数的作用应该很清楚。默认情况下，exploit 之后会自动调用 cleanup，但如果某些进程仍持有打开句柄，你可能需要之后将此命令单独运行。...

CVE-2022-28672

CVE-2022-28672 CVE-2022-28672 Foxit PDF Reader 漏洞 - UaF - RCE - JIT Spraying FortiOS、FortiProxy 和 FortiSwitchManager 认证绕过 IOC（CVE-2022-40684） 介绍 最近的 CVE FortiOS / FortiProxy / FortiSwitchManager 已在野外被利用。我们想提供有关该漏洞的额外信息，以便用户能够开始判断自己是否已被入侵。本文中，我们讨论了 FortiOS 7.2.1 的日志启用和...

Foxit PDF Reader JPEG File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsi...

Foxit PDF Reader FoxitUpdater Improper Certificate Validation Local Privilege Escalation Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

Foxit PDF Reader PDF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsi...

Foxit PDF Reader Annotation Use-After-Free Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

Foxit PDF Reader Doc Object Use-After-Free Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

Foxit PDF Reader importIcon NTLM Response Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose NTLM responses on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the implementati...

Foxit PDF Reader Annotation Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of...

Foxit PDF Reader Doc Object Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

Foxit PDF Reader AcroForm Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of...

Foxit PDF Reader AcroForm Out-of-Bounds Read Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of...

Foxit PDF Reader FileOpen Uninitialized Variable Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the FileOpen...

Foxit PDF Reader RichMedia Annotation Directory Traversal Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of...

Foxit PDF Reader activeDocs Missing Authorization Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...