Foxit-Reader-RCE-with-virualalloc-and-shellcode-for-CVE-2018-9948-and-CVE-2018-9958

Custom Exploit : Foxit Reader version 9.0.1.1049 Use After Free with ASLR and DEP bypass on heap My Custom Exploit : Foxit-Reader-RCE-with-virualalloc-and-shellcode-for-CVE-2018-9948-and-CVE-2018-9958 Custom exploit for Win 7 Has space for shellcode My custom ROP chain makes space for shellcode i...

pics

Welcome! Binary posters 25 posters 2017-10-30 59 tracings 2022-28-11 !https://assets.kitploit.com/production/public/readmes/48012/84626b...

CVE-2018-14442

Foxit Reader CPDFParser::mpCryptoHandler Use After Free 1. PDF Format Background 2. Encryption Dictionaries 3. Vulnerability Details 4. ASLR and DEP Bypass 5. Environment Details 6. Trigger 7. Author PDF Format Background PDF is a file format used to represent documents. A pdf is made of multiple...

CVE-2022-28672

CVE-2022-28672 Discord Server This bug was Use after Free caused by improper handling of javascript object memory references. Blog Foxit PDF Reader - UaF - RCE - JIT Spraying Advisory CVE-2022-28672 Demo...

CVE-2023-27363

fuxinFoxit Foxit PDF Remote Code Execution Vulnerability CVE-2023-27363 Analysis and Reproduction Disclaimer: This article is solely for the purpose of technical exchange, learning, and research. The use of the techniques mentioned in the article for any illegal purposes or destructive actions is...

CVE-2022-37332-RCE-

Foxit nday : CURRENTLY UNDER WORK... ALL I NEED TO IMPLEMENT IS JIT SPRAYING ..... also tested on Version: 9.0.1.1049 so yeahh idk : enjoy...

malicious-pdf

Malicious PDF Generator ☠️ Generate 67 malicious PDF test files for testing phone-home callbacks, SSRF, XSS, XXE, NTLM credential theft, and data exfiltration in PDF viewers, converters, and web applications. Can be used with Burp Collaborator or Interact.sh Used for penetration testing, bug bount...

CVE-2026-57239

Foxit PDF Reader LPE Proof of concept exploit for CVE-2026-3775/CVE-2026-3780 and CVE-2026-57239 which lets you obtain NT AUTHORITY\SYSTEM rights via the Foxit PDF Reader updater service. Build Just build the binary, drop it on your target and run it. cargo build --release Usage The program has...

CVE-2022-28672

CVE-2022-28672 CVE-2022-28672 Foxit PDF Reader Vulnerability - UaF - RCE - JIT Spraying FortiOS, FortiProxy and FortiSwitchManager Authentication Bypass IOC CVE-2022-40684 Introduction The recent FortiOS / FortiProxy / FortiSwitchManager CVE has been exploited in the wild. We would like to provid...

cve-2024-30350-research-notes

CVE-2024-30350 Research Notes Overview CVE-2024-30350 is an out-of-bounds read information disclosure vulnerability in Foxit PDF Reader. The issue was published by Trend Micro Zero Day Initiative as ZDI-24-333 and tracked before disclosure as ZDI-CAN-22708. The public advisory describes the...

cve-2018-9951

Foxit Reader CPDFObject Use-After-Free Remote Code Execution Vulnerability Vulnerability Referencing memory after it has been freed can cause a program to crash, use unexpected values, or execute code Vulnerability Description This vulnerability allows remote attackers to execute arbitrary code o...

Foxit-Precise-Heap-Spray

This repository does not have a README...

exploit-foxit-4.1.1-title-bof

This repository does not have a README...

CVE-2026-25940

CVE-2026-25940 jsPDF PoC A proof-of-concept for CVE-2026-25940 demonstrating how specially crafted AcroForm radio button appearances can trigger embedded JavaScript in vulnerable PDF viewers e.g., Foxit. The repo includes a Node-based generator and a browser viewer harness to exercise different...

PS-2017-13---CVE-2018-9950

Foxit Reader PDF Parsing Out-Of-Bounds Read Information Disclosure Vulnerability Vulnerability Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability Vulnerability Description This vulnerability allows remote attackers to disclose sensitive information on vulnerable...

-Foxit-PDF-CVE-2023-27363-

This repository does not have a README...

PS-2018-002---CVE-2018-14442

Foxit Reader - CPDFParser::mpCryptoHandler - Use After Free - RCE Vulnerability Referencing memory after it has been freed can cause a program to crash, use unexpected values, or execute code Vulnerability Description This vulnerability allows remote attackers to execute arbitrary code on...

Microsoft, Adobe, Apple, and Foxit vulnerabilities

Cisco Talos' Vulnerability Discovery & Research team recently disclosed vulnerabilities in Adobe, Apple, Foxit Reader, and Microsoft. The vulnerabilities mentioned in this blog post have been patched by their respective vendors, in adherence to Cisco 's third-party vulnerability disclosure policy...

CVE-2026-91817

A heap-based out-of-bounds read vulnerability exists in Foxit PDF Editor/Reader’s handling of wide strings in embedded PDF JavaScript. Insufficient validation of string-deletion ranges can cause an integer underflow, resulting in an out-of-bounds read and application crash...

CVE-2026-91818

A use-after-free vulnerability exists in Foxit PDF Editor/Reader’s JavaScript handling of PDF annotations. Reentrant page-event processing during annotation enumeration may release the associated page object, which is subsequently accessed, resulting in an application crash...