malicious-pdf

Malicious PDF Generator ☠️ Generate 67 malicious PDF test files for testing phone-home callbacks, SSRF, XSS, XXE, NTLM credential theft, and data exfiltration in PDF viewers, converters, and web applications. Can be used with Burp Collaborator or Interact.sh Used for penetration testing, bug bount...

CVE-2026-57239

Foxit PDF Reader LPE Prova di concetto di exploit per CVE-2026-3775/CVE-2026-3780 e CVE-2026-57239 che consente di ottenere i diritti NT AUTHORITY\SYSTEM tramite il servizio di aggiornamento di Foxit PDF Reader. Compilazione È sufficiente compilare il binario, copiarlo sul sistema target ed...

CVE-2017-10952

CVE-2017-10952 Questo è un esempio di alto livello di un attacco di esecuzione di codice locale su Foxit PDF Reader. I dettagli di questo attacco possono essere trovati qui 1. Ho copiato e incollato la descrizione testuale di questa vulnerabilità collegata in 1 qui per preservare la descrizione n...

-Foxit-PDF-CVE-2023-27363-

Questo repository non contiene un README...

CVE-2023-27363

fuxinFoxit Analisi e riproduzione della vulnerabilità CVE-2023-27363 di esecuzione di codice remoto in Foxit PDF Dichiarazione di non responsabilità: Questo articolo è destinato esclusivamente a scopi di scambio tecnico, apprendimento e ricerca. È severamente vietato utilizzare le tecniche qui...

CVE-2022-28672

CVE-2022-28672 CVE-2022-28672 Schwachstelle Foxit PDF Reader - UaF - RCE - JIT Spraying IOC zur Authentifizierungsumgehung von FortiOS, FortiProxy und FortiSwitchManager CVE-2022-40684 Einführung Die jüngste CVE FortiOS / FortiProxy / FortiSwitchManager wurde in freier Wildbahn ausgenutzt. Wir...

CVE-2022-28672

CVE-2022-28672 Discord Server Questo bug è un Use after Free causato da una gestione impropria dei riferimenti alla memoria degli oggetti JavaScript. Blog Foxit PDF Reader - UaF - RCE - JIT Spraying Advisory CVE-2022-28672 Demo...

CVE-2026-18622

Foxit PDF Editor/Reader inconsistently alerts users when signature fields are abnormally modified, including alterations to appearance, coordinates, or field duplication. This may mislead users into trusting tampered documents, since the UI cannot accurately reflect the actual integrity status of...

EUVD-2026-57737

Foxit PDF Editor/Reader inconsistently alerts users when signature fields are abnormally modified, including alterations to appearance, coordinates, or field duplication. This may mislead users into trusting tampered documents, since the UI cannot accurately reflect the actual integrity status of...

CVE-2026-18622 Foxit PDF Editor/Reader's signature-validation pop-up reports modified certified documents as valid

Foxit PDF Editor/Reader inconsistently alerts users when signature fields are abnormally modified, including alterations to appearance, coordinates, or field duplication. This may mislead users into trusting tampered documents, since the UI cannot accurately reflect the actual integrity status of...

CVE-2026-18622

Foxit PDF Editor/Reader inconsistently alerts users when signature fields are abnormally modified, including alterations to appearance, coordinates, or field duplication. This may mislead users into trusting tampered documents, since the UI cannot accurately reflect the actual integrity status of...

CVE-2026-18622

Technical details are not publicly available in the provided documents. Monitor for updates.

CVE-2026-18597

The PDF creation feature of Foxit PDF Services API supports referencing external files. Although local file access is restricted, an attacker could trigger an SSRF vulnerability by using URL redirection to bypass validation, leading to information disclosure...

CVE-2026-18597

CVE-2026-18597 concerns the PDF creation feature of Foxit PDF Services API, where the ability to reference external files can be abused. The vulnerability arises because an attacker could trigger a server-side request forgery (SSRF) via URL redirection to bypass input validation, potentially lead...

CVE-2026-18597

The PDF creation feature of Foxit PDF Services API supports referencing external files. Although local file access is restricted, an attacker could trigger an SSRF vulnerability by using URL redirection to bypass validation, leading to information disclosure...

CVE-2026-18597 Blind SSRF on Foxit PDF Services API

The PDF creation feature of Foxit PDF Services API supports referencing external files. Although local file access is restricted, an attacker could trigger an SSRF vulnerability by using URL redirection to bypass validation, leading to information disclosure...

CVE-2026-13126 Foxit PDF Editor/Reader Annotation Use-After-Free Remote Code Execution Vulnerability

The embedded JavaScript in the PDF deleted the pages, making the object invalid. The application attempted to perform a write operation on the invalid pop-up annotations, resulting in the program crashing...

CVE-2026-13126

CVE-2026-13126 affects Foxit PDF Editor/Reader due to a use-after-free in the handling of PDF annotations (embedded JavaScript). The issue can lead to a crash when the application attempts to write to an invalid popup annotation object, as described in the CVE description. CVSS 3.1 metrics indica...

CVE-2026-13127

CVE-2026-13127 concerns Foxit PDF Editor/Reader annotation handling. The description states that when opening a PDF, JavaScript rewrites the document to modify page structure, causing page objects to become invalid; thumbnails still reference the invalid objects, leading to a crash. The CVSS 3.1 ...

CVE-2026-13127 Foxit PDF Editor/Reader Annotation Use-After-Free Remote Code Execution Vulnerability

The application opens the PDF file. JavaScript then rewrites the document to modify the page structure, resulting in the invalidation of the page objects. However, the thumbnails still use the invalid page objects, ultimately causing the application to crash...