twiga

Twiga A tool that enumerates Android devices for information useful in understanding its internals and for exploit development. It supports android 4.2 to android 7.1.1 Requirements The most current ADB must be in your path and fully functional The report name must not have any whitespace...

CVE-2021-3456

CVE-2021-3456 A practical chain that starts with an innocuous PDF file and ends up in a reverse shell on an AWS EC2 instance The Beginning: Crafting a PDF Payload It all begins on the front end of the attack. Using PowerShell’s built‑in WScript object we embed a script inside a PDF that will be...

CVE-2025-50420

Poppler before version 25.07.0 contains a vulnerability in its pdfseparate utility's PDFDoc processing logic: crafted "/Annots" dictionaries that reference themselves or each other lead to infinite recursion in "PDFDoc::markAnnotations -- PDFDoc::markPageObjects -- PDFDoc::markObject --...

maigret

Maigret English · 简体中文 · Français 📖 Documentation Maigret collects a dossier on a person by username only , checking for accounts on a huge number of sites and gathering all the available information from web pages. No API keys required. AI profiling demo. Sponsors Noimosiny is a comprehensive...

metasploitavevasion

Metasploit AV Evasion Metasploit payload generator that avoids most Anti-Virus products. Released as open source by NCC Group Plc - http://www.nccgroup.com/ Developed by Daniel Compton, daniel dot compton at nccgroup dot com https://github.com/nccgroup/metasploitavevasion Released under AGPL see...

APTRS

APTRS APTRS Automated Penetration Testing Reporting System is a Python and Django-based automated reporting tool designed for penetration testers and security organizations. This tool streamlines the report generation process by enabling users to create PDF and Excel reports directly, eliminating...

Sublist3r

About Sublist3r Sublist3r is a python tool designed to enumerate subdomains of websites using OSINT. It helps penetration testers and bug hunters collect and gather subdomains for the domain they are targeting. Sublist3r enumerates subdomains using many search engines such as Google, Yahoo, Bing,...

CVE-2014-4377

CoreGraphics Memory Corruption - CVE-2014-4377 Apple CoreGraphics library fails to validate the input when parsing the colorspace specification of a PDF XObject resulting in a heap overflow condition. A small heap memory allocation can be overflowed with controlled data from the input in any...

pylibemu

Pylibemu |version badge| |downloads badge| .. |version badge| image:: https://img.shields.io/pypi/v/pylibemu.svg :target: https://pypi.python.org/pypi/pylibemu/ .. |downloads badge| image:: https://img.shields.io/pypi/dm/pylibemu.svg :target: https://pypi.python.org/pypi/pylibemu/ Pylibemu is a...

CVE-2025-64512

CVE-2025-64512 – pdfminer.six Deserialization PoC Overview This proof-of-concept demonstrates a vulnerability in pdfminer.six CVE-2025-64512 that can lead to arbitrary command execution when a malicious PDF is processed. The exploit uses a crafted PDF that references a malicious, gzip-compressed...

EUVD-2026-104648

Pillow: Infinite loop in PdfParser.rewritepages on page tree Parent cycle...

CVE-2026-96640

Pillow is a Python imaging library. From 5.1.0 until 13.0.0, PdfParser.linearizepagetree in src/PIL/PdfParser.py treats a PDF /Pages graph as a tree without tracking duplicate indirect references. When Image.save..., format="PDF", append=True processes an attacker-controlled existing PDF whose...

CVE-2023-33733

CODE INJECTION VULNERABILITY IN REPORTLAB PYTHON LIBRARY tl;dr This write-up details how an RCE in Reportlab - was found and exploited. Due to the prevalence of Reportlab in HTML to PDF processing, this vulnerability may be reachable in many applications that process PDF files, making this an...

GHSA-JG86-V3JV-HRPM Pillow: Quadratic-time DoS in PDF save_all (PdfParser.next_object_id)

============================================================================ Quadratic-time DoS in PDF saveall PdfParser.nextobjectid Location: src/PIL/PdfParser.py:629 in nextobjectid Commit: a707c6b21c313880d0771e54965d142dd42358b6...

Pillow: Quadratic-time DoS in PDF save_all (PdfParser.next_object_id)

============================================================================ Quadratic-time DoS in PDF saveall PdfParser.nextobjectid Location: src/PIL/PdfParser.py:629 in nextobjectid Commit: a707c6b21c313880d0771e54965d142dd42358b6...

EUVD-2026-104656

Pillow: Quadratic-time DoS in PDF saveall PdfParser.nextobjectid...

Pillow: PdfParser can recurse without limit in get_value() and linearize_page_tree()

Summary PdfParser's getvalue can recurse without any limit and crash with an uncaught RecursionError. It is reachable through Image.saveim, fp=, format="PDF", append=True when the existing PDF file is attacker-controlled. This is the same class of bug as...

EUVD-2026-104601

Pillow: PdfParser can recurse without limit in getvalue and linearizepagetree...

EUVD-2026-107570

Pillow is a Python imaging library. From 5.1.0 until 13.0.0, PdfParser.linearizepagetree in src/PIL/PdfParser.py treats a PDF /Pages graph as a tree without tracking duplicate indirect references. When Image.save..., format="PDF", append=True processes an attacker-controlled existing PDF whose...

CVE-2026-96640

The Pillow Python imaging library versions 5.1.0 through 13.0.0 are vulnerable to a resource exhaustion issue in the PdfParser.linearize_page_tree() function located in src/PIL/PdfParser.py . The root cause is that the parser treats a PDF /Pages graph as a tree without tracking duplicate indirect...