28999 matches found
CVE-2026-87585
Double free in PDFium in Google Chrome on on Windows prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted PDF file. Chromium security severity: High...
PT-2026-88605
Incorrect authorization in FileSystem in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted PDF file. Chromium security severity: Medium...
The vulnerability of the _get_outline() function in the pypdf/_doc_common.py library of the Python library for working with PDF files, PyPDF, allows a attacker to cause a service failure.
The vulnerability of the getoutline function in the pypdf/doccommon.py library of the Python PDF handling library PyPDF is related to asymmetric resource consumption. Exploiting this vulnerability could allow an attacker to cause a service failure...
PT-2026-88685
Double free in PDFium in Google Chrome on on Windows prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted PDF file. Chromium security severity: High...
CVE-2026-85458
A flaw was found in Xpdf. This vulnerability, a divide-by-zero error, occurs when the application processes a Type 3 font glyph that has a zero height. A local attacker could exploit this condition to trigger a crash, leading to a denial of service and making the application unavailable. Mitigati...
domain_analyzer
Domain Analyzer v0.8.3 What Domain analyzer is a security analysis tool that automatically discovers and reports information about a given domain. Its main purpose is to analyze domains in an unattended way. It has many crazy features, such as getting more domains from DNS zones, automatic nmap,...
PDFernetRemotelo
A Hacker In Capital Welcome to my GitHub repository! I am A Hacker In Capital , and here you will find all the scripts and tools I use in my streams and videos. Join me as we explore the fascinating world of cybersecurity and technology. About Me I am a cybersecurity enthusiast, sharing my...
PS-2017-13---CVE-2018-9950
Foxit Reader PDF Parsing Out-Of-Bounds Read Information Disclosure Vulnerability Vulnerability Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability Vulnerability Description This vulnerability allows remote attackers to disclose sensitive information on vulnerable...
cve-2018-15968
Adobe Reader Out-Of-Bounds Read Information Disclosure Vulnerability Vulnerability Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability Vulnerability Description This vulnerability allows remote attackers to disclose sensitive information on vulnerable installatio...
CVE-2024-4367-POC
CVE-2024-4367 POC Usage root@kitploit: python poc.py malicious.pdf "alert'S4vvy'" References CVE-2024-4367: Arbitrary JS Execution in PDF.js PDF.js...
twiga
Twiga A tool that enumerates Android devices for information useful in understanding its internals and for exploit development. It supports android 4.2 to android 7.1.1 Requirements The most current ADB must be in your path and fully functional The report name must not have any whitespace...
xpdf-docker
Imágenes Docker de Xpdf Este repositorio contiene imágenes Docker para Xpdf versión 4.04, que es vulnerable a CVE-2022-30524. Construyendo las Imágenes 📦 Este repositorio contiene la imagen en 3 sabores: bullseye/gcc : Debian "bullseye", compilado con gcc bullseye/afl : Debian "bullseye", compila...
CVE-2019-14811-in-pdf-exploit
CVE-2019-14811 GhostScript PDF preview Exploit PoC This exploit targets CVE-2019-14811 in GS environments where PostScript output is not reflected, but is executed such as PDF previews via png images. Exploit renders commands directly in pngXXm preview, it is based on...
CVE-2015-3073
CVE-2015-3073 This vulnerability allows remote attackers to bypass API restrictions on vulnerable installations of Adobe Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...
CVE-2024-38077-check
Análisis de vulnerabilidad de archivos PDF asíncronos. Mi capacidad es limitada, todavía no puedo lograr RCE. Por favor, que los expertos me guíen. Para la verificación de la vulnerabilidad, solo es necesario cambiar la IP. root@kitploit: if name == 'main': printlogo...
CVE-2024-4367-pdf-sample
This repository does not have a README...
Kotaemon-CVE-2025-56526-56527-disclosure
Kotaemon CVE-2025-56526 & CVE-2025-56527 Public Disclosure Stored Cross-Site Scripting in the Kotaemon Information Panel combines with plaintext credential storage in localStorage, enabling full session compromise from a single malicious PDF upload. Executive Summary Affected Product / Versions :...
cve-2018-9948-9958-exp
2018-9948-9958-exp "getshellcodefrommsf.py" es un script de Python para obtener shellcode de msfvenom, luego copiar la salida al exp.pdf reemplazando el bloque de shellcode 'calc', y finalmente funciona. Ooooops, es un shellcode de reverse tcp. un código de ejemplo es así: python...
CVE-2022-43571
CVE-2022-43571 CVE-2022-43571 Splunk RCE – my personal journey to color your life Only because I got the statement from my IT, there are no reasons for a SPLUNK update, I analyzed this vulnerability CVE-2022-43571 to prove the opposite for a remote code execution. Here is my exploit. If I had fou...
