CVE-2017-9096-iText-XXE

CVE-2017-9096 1. Создание вредоносного PDF с XXE Получите PDF с формой: root@kitploit: wget https://www.pdfscripting.com/public/FreeStuff/PDFSamples/ModifySubmitExample.pdf -O input.pdf Распаковка PDF Для этого необходимо распаковать PDF с помощью qpdf --qdf --object-streams=disable input.pdf...

CVE-2025-66516-Writeup-POC

CVE-2025-66516: Apache Tika의 치명적인 XXE 취약점 요약 CVE-2025-66516 은 Apache Tika에서 발견된 치명적인 XML External EntityXXE 주입 취약점으로, CVSS 점수 10.0최대 심각도입니다. 이 취약점은 원격 공격자가 악성 XFAXML Forms Architecture 콘텐츠가 포함된 특수 제작된 PDF 문서를 업로드하여 임의의 파일을 읽거나, 서버 측 요청 위조SSRF를 수행하고, 민감한 데이터를 유출할 수 있게 합니다. 속성| 값 ---|--- CVE ID|...

cisco-CVE-2023-31488

소개 보안 연구자: ly1g3, ly1g3attuta.io GPG 지문: https://keys.openpgp.org/vks/v1/by-fingerprint/5FE85CE4E8F675F5ABD2C0A33CE8BE447ED6D586 개요: 이메일로 루트 권한의 제로 클릭 RCE - 원격 코드 실행/메모리 손상/ROP 체인 CVE: CVE-2023-31488 타임라인: 발견 - ly1g3 보고 - ly1g3 수정 - Cisco 및 Lexmark 분석 Cisco Email Security ApplianceESA를 퍼징하던 중, ES...

cve-2018-15968

Adobe Reader 범위를 벗어난 읽기 정보 공개 취약점 취약점 메모리 버퍼 경계 내에서의 작업에 대한 부적절한 제한 취약점 취약점 설명 이 취약점은 원격 공격자가 취약한 Adobe Reader 설치에서 민감한 정보를 노출할 수 있게 합니다. 이 취약점을 악용하려면 사용자 상호작용이 필요하며, 대상은 악성 페이지를 방문하거나 악성 PDF 파일을 열어야 합니다. 구체적인 결함은 손상된 PDF 파일 구문 분석 시 발생합니다. 문제는 사용자 제공 데이터에 대한 적절한 검증 부족으로 인해 할당된 객체의 끝을 넘어 읽기가 발생할 수...

CVE-2025-64512-pdfminer-PoC

CVE-2025-64512 — pdfminer.six CMapDB 역직렬화 PoC pdfminer.six의 역직렬화 취약점에 대한 개념 증명PoC으로, 악성 PDF를 파싱할 때 임의 코드 실행으로 이어집니다. 목적 / 법적 고지 이 저장소는 교육 및 승인된 보안 연구용으로만 제공됩니다. 공개적으로 공개되었고 패치된 CVE 를 재현합니다. 소유하지 않았거나 서면 승인 없이 테스트할 권한이 없는 시스템에는 사용하지 마십시오. 작성자는 어떠한 오용에 대해서도 책임지지 않습니다. 의도된 환경: Hack The Box / VulnHub...

cve-2025-54988-VulnTikaProject

Проект тестирования уязвимости Apache Tika Это приложение Spring Boot, использующее Apache Tika 3.2.1 для обработки документов и извлечения текста. Предварительные требования Наличие Docker Использование ./start-app.sh или docker compose up -d Выполнение CVE Загрузите ваш вредоносный PDF...

PS-2017-13---CVE-2018-9950

Уязвимость информационного раскрытия при чтении за пределами границ при разборе PDF в Foxit Reader Уязвимость Неправильное ограничение операций в рамках границ буфера памяти Описание уязвимости Эта уязвимость позволяет удаленным злоумышленникам раскрывать конфиденциальную информацию в уязвимых...

xpdf-docker

Xpdf Docker-образы Этот репозиторий содержит Docker-образы для Xpdf версии 4.04, уязвимой к CVE-2022-30524. Сборка образов 📦 Образ представлен в 3 вариантах: bullseye/gcc : Debian "bullseye", собран с помощью gcc bullseye/afl : Debian "bullseye", собран с помощью afl-clang-fast++ отладочный профи...

CVE-2026-92177

pdfforge PDF Architect PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of pdfforge PDF Architect. User interaction is required to exploit this vulnerability in that the target...

CVE-2026-92178

pdfforge PDF Architect PDF File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of pdfforge PDF Architect. User interaction is required to exploit this vulnerability in that the target mu...

CVE-2026-92179

pdfforge PDF Architect PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of pdfforge PDF Architect. User interaction is required to exploit this vulnerability in that the target...

CVE-2026-92177 pdfforge PDF Architect PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

pdfforge PDF Architect PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of pdfforge PDF Architect. User interaction is required to exploit this vulnerability in that the target...

EUVD-2026-79138

pdfforge PDF Architect PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of pdfforge PDF Architect. User interaction is required to exploit this vulnerability in that the target...

CVE-2026-92177

pdfforge PDF Architect is affected by an out-of-bounds write vulnerability in its PDF file parsing functionality. The root cause is a lack of proper validation of user-supplied data, which allows a write past the end of an allocated object. A remote attacker can leverage this flaw to execute arbi...

CVE-2026-92178 pdfforge PDF Architect PDF File Parsing Memory Corruption Remote Code Execution Vulnerability

pdfforge PDF Architect PDF File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of pdfforge PDF Architect. User interaction is required to exploit this vulnerability in that the target mu...

EUVD-2026-79137

pdfforge PDF Architect PDF File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of pdfforge PDF Architect. User interaction is required to exploit this vulnerability in that the target mu...

CVE-2026-92178

pdfforge PDF Architect is affected by a memory corruption vulnerability in its PDF file parsing routine, caused by insufficient validation of user-supplied data. An attacker who convinces a user to open a maliciously crafted PDF file can trigger the flaw and achieve remote code execution in the c...

CVE-2026-92179

CVE-2026-92179 is an out-of-bounds write vulnerability in pdfforge PDF Architect during PDF file parsing . The root cause is a lack of proper validation of user-supplied data, allowing a write past the end of an allocated buffer, which leads to arbitrary code execution in the context of the curre...

CVE-2026-92179 pdfforge PDF Architect PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

pdfforge PDF Architect PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of pdfforge PDF Architect. User interaction is required to exploit this vulnerability in that the target...

EUVD-2026-79136

pdfforge PDF Architect PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of pdfforge PDF Architect. User interaction is required to exploit this vulnerability in that the target...