CVE-2025-46206

There is a denial of service vulnerability in MuPDF 1.25.6 and earlier versions. When an attacker runs the "mutool clean poc /dev/null" command, the program will fall into an infinite recursion between the stripoutlines and stripoutline functions in pdf-clean-file.c until the stack is exhausted...

CVE-2019-14811-in-pdf-exploit

CVE-2019-14811 GhostScript PDF preview Exploit PoC This exploit targets CVE-2019-14811 in GS environments where PostScript output is not reflected, but is executed such as PDF previews via png images. Exploit renders commands directly in pngXXm preview, it is based on...

CVE-2024-4367-POC

CVE-2024-4367 POC Usage python poc.py malicious.pdf "alert'S4vvy'" References CVE-2024-4367: Arbitrary JS Execution in PDF.js PDF.js...

CVE-2024-9935

CVE-2024-9935 PDF Generator Addon for Elementor Page Builder = 1.7.5 - Unauthenticated Arbitrary File Download Usage python CVE-2024-9935.py http://example.com...

CVE-2023-38831_ReverseShell_Winrar

CVE-2023-38831 In this case, I share the necessary files to exploit this vulnerability in WinRAR, with which we can create a malicious PDF to establish a reverse shell to our attacker machine. ⚠️ NOTE: This content is shared for ethical purposes and is created to practice in controlled environment...

cve-2018-15968

Adobe Reader Out-Of-Bounds Read Information Disclosure Vulnerability Vulnerability Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability Vulnerability Description This vulnerability allows remote attackers to disclose sensitive information on vulnerable installatio...

CVE-2025-50422

Poppler before version 25.04.0 When pdftocairo renders a malicious PDF and calls cairodebugresetstaticdata on exit, heap memory containing PDF object streams is not properly cleared. An attacker with local access can dump process memory and recover clear-text PDF content e.g., /stream /endstream...

CVE-2025-25620

CVE-2025-25620 Unifiedtransform v2.0 is vulnerable to Stored Cross-Site Scripting XSS in the "Create Assignment" function, allowing attackers to execute malicious scripts in the context of other users' sessions. Vendor: Unifiedtransform PoC Step 1: Log in to the application as a Teacher. Step 2:...

CVE-2025-50420

Poppler before version 25.07.0 contains a vulnerability in its pdfseparate utility's PDFDoc processing logic: crafted "/Annots" dictionaries that reference themselves or each other lead to infinite recursion in "PDFDoc::markAnnotations -- PDFDoc::markPageObjects -- PDFDoc::markObject --...

CVE-2017-9096-iText-XXE

CVE-2017-9096 1. Creating the malicious PDF containing XXE Get a PDF containing a form: wget https://www.pdfscripting.com/public/FreeStuff/PDFSamples/ModifySubmitExample.pdf -O input.pdf Decompress PDF To do that you need to decompress the PDF with qpdf --qdf --object-streams=disable input.pdf...

cve-pdf-host

This repository does not have a README...

CVE-2010-1240

CVE-2010-1240 PDF Launch Action Research Tool Educational research tool demonstrating CVE-2010-1240 vulnerability in Adobe Reader through malicious PDF Launch Actions. ⚠️ Disclaimer This tool is created strictly for educational purposes and security research to demonstrate CVE-2010-1240...

CVE-2021-30860

CVE-2021-30860 CVE-2021-30860 FORCEDENTRY is a known vulnerability in MacOS, iOS, and WatchOS. It allows arbitrary code execution by sending a victim device a "maliciously crafted PDF". This vulnerability was patched by Apple on September 13, 2021 with the following versions: iOS 14.8 OSX Big Sur...

CVE-2021-3456

CVE-2021-3456 A practical chain that starts with an innocuous PDF file and ends up in a reverse shell on an AWS EC2 instance The Beginning: Crafting a PDF Payload It all begins on the front end of the attack. Using PowerShell’s built‑in WScript object we embed a script inside a PDF that will be...

mailorder

Mail Order The Nalpeiron Licensing Service NLSSRV32.exe is installed as part of certain software installations to handle privileged software licensing operations. It is paired with a client component filechck.dll which communicates with the service via mailslots hence the name. Calls are performe...

CVE-2026-91074

The BSK PDF Manager WordPress plugin through 3.8.1 does not properly sanitise and escape a parameter before using it in a SQL statement, which could allow authenticated users with contributor-level access and above to perform SQL injection attacks and read sensitive data such as administrator...

EUVD-2026-103249

The BSK PDF Manager WordPress plugin through 3.8.1 does not properly sanitise and escape a parameter before using it in a SQL statement, which could allow authenticated users with contributor-level access and above to perform SQL injection attacks and read sensitive data such as administrator...

CVE-2026-91074

The BSK PDF Manager WordPress plugin affects versions through 3.8.1 due to improper sanitization and escaping of a parameter within a SQL statement. This vulnerability specifically impacts the tags_specific shortcode attribute. Authenticated users with contributor-level access and above can explo...

CVE-2026-91074 BSK PDF Manager <= 3.8.1 - Contributor+ SQLi via tags_specific Shortcode Attribute

The BSK PDF Manager WordPress plugin through 3.8.1 does not properly sanitise and escape a parameter before using it in a SQL statement, which could allow authenticated users with contributor-level access and above to perform SQL injection attacks and read sensitive data such as administrator...

CVE-2026-91074 BSK PDF Manager <= 3.8.1 - Contributor+ SQLi via tags_specific Shortcode Attribute

The BSK PDF Manager WordPress plugin through 3.8.1 does not properly sanitise and escape a parameter before using it in a SQL statement, which could allow authenticated users with contributor-level access and above to perform SQL injection attacks and read sensitive data such as administrator...