File-Injector

File Injector 이전 버전1.0.2 이하을 사용하려면, 원본 이미지가 필요했던 버전인 경우 여기에서 다운로드할 수 있습니다. 목차 1. 설명 2. 시작하기 요구 사항 설치 스크립트 실행 입력 선택 기본 이미지/오디오 선택 입력 파일 선택 암호화 키 선택/생성 3. 결과 4. 사용 예제 주입 추출 5. 설정 6. 기능 설명 7. 작동 방식 옵션 injectfilefunc extractfilefunc getfernet decryptcontent injectfile extractfile 1. 설명 File...

EmbedInHTML

HTML에 모든 파일을 임베드하고 숨기기 저자: Arno0x0x - @Arno0x0x 이 도구는 파일모든 유형의 파일을 가져와 암호화한 후, 리소스로 HTML 파일에 임베드하고, 임베드된 리소스를 사용자가 클릭하는 것을 시뮬레이션하는 자동 다운로드 루틴을 함께 제공합니다. 그런 다음 사용자가 HTML 파일을 탐색하면 임베드된 파일이 즉시 복호화되어 임시 폴더에 저장되며, 마치 원격 사이트에서 다운로드되는 것처럼 사용자에게 제공됩니다. 사용자의 브라우저와 표시된 파일 유형에 따라 파일이 브라우저에 의해 자동으로 열릴 수 있습니다...

Fudge

Fudge 저는 피싱 공격에서 파일 내용을 base64로 인코딩하고, 이를 HTML 파일에 넣어 사용자가 HTML 파일을 열 때 디코딩되어 드롭되도록 하는 방법으로 성공을 거둔 적이 있습니다. 사용법 Windows 64비트 및 Linux 64비트용으로 미리 컴파일된 바이너리가 릴리스 탭에서 제공됩니다. Go 바이너리이므로 실행 권한을 부여하고 실행하는 것 외에는 아무것도 필요하지 않습니다. 시스템에 Go가 설정되어 있다면 다음 명령어로 리포지토리에서 최신 버전을 다운로드할 수 있습니다: go get...

Security Bulletin: IBM Spectrum Control is vulnerable to a weaknesses related to pdfmake-0.2.10.tgz (CVE-2025-11362)

Summary Pdfmake is vulnerable to a Allocation of Resources Without Limits or Throttling attack. This vulnerability affects IBM Spectrum Control. Vulnerability Details CVEID:CVE-2025-11362 DESCRIPTION: Versions of the package pdfmake from 0.3.0-beta.1 and before 0.3.0-beta.17 are vulnerable to...

CVE-2026-42795

Gleam: Symlink following in Hex package export vulnerability (CVE-2026-42795) allows embedding files outside the project root into the generated Hex package. Root cause: file collection in compiler-cli/src/fs.rs uses follow_links(true) for publishable directories (e.g., src/, priv/) and add_path_...

Allocation Of Resources Without Limits Or Throttling

pdfmake is vulnerable to Allocation of Resources Without Limits or Throttling. The vulnerability is due to improper handling of repeatedly redirected URLs during file embedding, where the library follows redirect chains without enforcing limits, and an attacker can exploit this by supplying craft...

CVE-2025-11362

Versions of the package pdfmake before 0.3.0-beta.17 are vulnerable to Allocation of Resources Without Limits or Throttling via repeatedly redirect URL in file embedding. An attacker can cause the application to crash or become unresponsive by providing crafted input that triggers this condition...

GHSA-RJ3R-R7HH-JXFQ pdfmake is vulnerable to Throttling via repeatedly redirecting URL in file embedding

Versions of the package pdfmake from 0.3.0-beta.1 to before 0.3.0-beta.17 are vulnerable to Allocation of Resources Without Limits or Throttling via repeatedly redirect URL in file embedding. An attacker can cause the application to crash or become unresponsive by providing crafted input that...

pdfmake is vulnerable to Throttling via repeatedly redirecting URL in file embedding

Versions of the package pdfmake from 0.3.0-beta.1 to before 0.3.0-beta.17 are vulnerable to Allocation of Resources Without Limits or Throttling via repeatedly redirect URL in file embedding. An attacker can cause the application to crash or become unresponsive by providing crafted input that...

CVE-2025-11362

Versions of the package pdfmake from 0.3.0-beta.1 and before 0.3.0-beta.17 are vulnerable to Allocation of Resources Without Limits or Throttling via repeatedly redirect URL in file embedding. An attacker can cause the application to crash or become unresponsive by providing crafted input that...

CVE-2025-11362

CVE-2025-11362 affects the pdfmake package prior to 0.3.0-beta.17, where an attacker can trigger repeated URL redirects in file embedding, potentially causing the application to crash or become unresponsive. The issue is categorized as Allocation of Resources Without Limits or Throttling and has ...

CVE-2025-11362

Versions of the package pdfmake from 0.3.0-beta.1 and before 0.3.0-beta.17 are vulnerable to Allocation of Resources Without Limits or Throttling via repeatedly redirect URL in file embedding. An attacker can cause the application to crash or become unresponsive by providing crafted input that...

CVE-2025-11362

Versions of the package pdfmake from 0.3.0-beta.1 and before 0.3.0-beta.17 are vulnerable to Allocation of Resources Without Limits or Throttling via repeatedly redirect URL in file embedding. An attacker can cause the application to crash or become unresponsive by providing crafted input that...

CVE-2025-11362

Versions of the package pdfmake from 0.3.0-beta.1 and before 0.3.0-beta.17 are vulnerable to Allocation of Resources Without Limits or Throttling via repeatedly redirect URL in file embedding. An attacker can cause the application to crash or become unresponsive by providing crafted input that...

pdfmake 安全漏洞

pdfmake is a pure JavaScript server-side and client-side PDF document generation library from the individual developer Bartek Pampuch. A security vulnerability exists in pdfmake versions prior to 0.3.0-beta.17, which stems from duplicate redirect URLs in file embedding leading to an unlimited...

CVE-2025-11362: Allocation of Resources Without Limits or Throttling

Versions of the package pdfmake from 0.3.0-beta.1 and before 0.3.0-beta.17 are vulnerable to Allocation of Resources Without Limits or Throttling via repeatedly redirect URL in file embedding. An attacker can cause the application to crash or become unresponsive by providing crafted input that...

PT-2025-40963

Name of the Vulnerable Software and Affected Versions pdfmake versions prior to 0.3.0-beta.17 Description The software is susceptible to a denial-of-service condition due to unrestricted resource allocation. This occurs when processing crafted input that repeatedly redirects URLs during file...

CVE-2024-6181

A vulnerability was found in LabVantage LIMS 2017. It has been declared as problematic. This vulnerability affects unknown code of the file /labvantage/rc?command=file=WEB-CORE/elements/files/filesembedded.jsp=32. The manipulation of the argument height/width leads to cross site scripting. The...

Allocation of Resources Without Limits or Throttling

Overview pdfmake is a Client/server side PDF printing in pure JavaScript Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling via repeatedly redirect URL in file embedding. An attacker can cause the application to crash or become unresponsive by...

Allocation of Resources Without Limits or Throttling

Overview org.webjars.npm:pdfmake is a Client/server side PDF printing in pure JavaScript Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling via repeatedly redirect URL in file embedding. An attacker can cause the application to crash or become...