Tika-CVE-2025-66516-Lab

CVE-2025-66516 最小化验证环境 本项目用于验证 CVE-2025-66516 （Apache Tika 中的 XML 外部实体注入漏洞）。 漏洞简介 Apache Tika 3.2.1 及其之前版本在解析包含 XFA 表单的 PDF 文件时，未正确禁用外部实体加载，导致存在 XXE 漏洞。攻击者可通过构造恶意的 PDF 文件读取服务器上的敏感文件。 环境要求 JDK 11+ Maven 使用方法 1. 生成恶意 Payload 运行 org.example.ExploitGenerator 类。 该程序会在当前目录下生成 poc-xxe.pdf。 Windows : 尝试读...

CVE-2021-31453

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 10.1.1.37576. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

CVE-2021-31450

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 10.1.1.37576. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

CVE-2020-10907

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 9.7.1.29511. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

CVE-2025-66516

A XML External Entity XXE injection vulnerability was found in the Apache Tika framework's PDF parsing functionality. It could allow a remote, unauthenticated attacker to exploit the system by providing a specially crafted PDF containing an XFA XML Forms Architecture file. This flaw could lead to...

EUVD-2021-18359

Malware in sbrugna...

EUVD-2019-4837

Malware in sbrugna...

EUVD-2021-18352

Malware in sbrugna...

EUVD-2020-3313

Malware in sbrugna...

EUVD-2021-18353

Malware in sbrugna...

EUVD-2016-5065

Malware in sbrugna...

EUVD-2019-4824

Malware in sbrugna...

EUVD-2017-7769

Malware in sbrugna...

EUVD-2017-7771

Malware in sbrugna...

EUVD-2021-25011

Malware in sbrugna...

EUVD-2021-18350

Malware in sbrugna...

EUVD-2021-18355

Malware in sbrugna...

EUVD-2017-7774

Malware in sbrugna...

EUVD-2022-29266

Malicious code in bioql PyPI...

CVE-2022-24370

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Reader Foxit reader 11.0.1.0719 macOS. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specif...