CVE-2025-20260

CVE-2025-20260 - ClamAV PDF Scanning Buffer Overflow First Public PoC First public proof-of-concept for CVE-2025-20260 CVSS 3.1 base score 9.8, Critical, a buffer-overflow vulnerability in the PDF scanning path of ClamAV. This repository contains a generator for the malicious PDF that triggers th...

CVE-2026-34621

CVE-2026-34621 : Adobe Acrobat 2026 Prototype Pollution & JS Injection Chain — Research PoC Overview This repository contains research material and proof-of-concept code developed during the analysis of the 2026 Adobe Acrobat Reader in-the-wild exploit chain involving: Prototype Pollution Interna...

malicious-pdf

Malicious PDF Generator ☠️ Generate 67 malicious PDF test files for testing phone-home callbacks, SSRF, XSS, XXE, NTLM credential theft, and data exfiltration in PDF viewers, converters, and web applications. Can be used with Burp Collaborator or Interact.sh Used for penetration testing, bug bount...

cve-2025-54988-VulnTikaProject

Apache Tika Vulnerability Testing Project This is a Spring Boot application that uses Apache Tika 3.2.1 for document processing and text extraction. Prerequisites Have Docker Usage ./start-app.sh or docker compose up -d CVE execution Upload your malicious PDF...

malicious-pdf

恶意 PDF 生成器 ☠️ 生成 67 个恶意 PDF 测试文件，用于测试 PDF 查看器、转换器和 Web 应用程序中的回呼、SSRF、XSS、XXE、NTLM 凭据窃取和数据泄露。可与 Burp Collaborator 或 Interact.sh 配合使用 用于渗透测试、漏洞赏金狩猎和/或红队活动等。创建此工具是因为我需要一个能生成大量包含各种链接的 PDF 文件的工具。仅用于教育和专业目的。 用法 pip install -r requirements.txt python3 malicious-pdf.py burp-collaborator-url 输出将写入 output/...

cve-2024-4367-PoC-fixed

cve-2024-4367-PoC-fixed PDF.js is a JavaScript-based PDF viewer maintained by Mozilla. This vulnerability allows an attacker to execute arbitrary JavaScript code immediately after opening a malicious PDF file. This affects all Firefox users 126, as Firefox uses PDF.js to display PDF files, but al...

pdf.js-CVE-2024-4367

🚨 CVE-2024-4367 - Universal PDF.js Vulnerability Scanner ⚠️ CRITICAL SECURITY TOOL | Detects CVE-2024-4367 CVSS 9.8 - PDF.js Remote Code Execution Vulnerability Works on ANY website - Zero configuration required 📋 Table of Contents 📖 Overview ⚡ Quick Start 🔍 What It Detects 🛠️ How It Works 📊 Output...

CVE-2023-38831_ReverseShell_Winrar

CVE-2023-38831 In this case, I share the necessary files to exploit this vulnerability in WinRAR, with which we can create a malicious PDF to establish a reverse shell to our attacker machine. ⚠️ NOTE: This content is shared for ethical purposes and is created to practice in controlled environment...

CVE-2021-30860

CVE-2021-30860 CVE-2021-30860 FORCEDENTRY is a known vulnerability in MacOS, iOS, and WatchOS. It allows arbitrary code execution by sending a victim device a "maliciously crafted PDF". This vulnerability was patched by Apple on September 13, 2021 with the following versions: iOS 14.8 OSX Big Sur...

CVE-2025-64512-exploit

CVE-2025-64512 - pdfminer.six Remote Code Execution RCE 📋 Description This repository contains a proof-of-concept exploit for CVE-2025-64512 , a critical vulnerability in pdfminer.six versions prior to 20251107. The vulnerability allows an attacker to achieve Remote Code Execution RCE by uploadin...

CVE-2026-3462

CVE-2026-3462 Acrobat Reader | Improperly Controlled Modification of Object Prototype Attributes 'Prototype Pollution' CWE-1321 CVE-2026-34621 - Advanced Cross-Platform Exploit Generator =========================================================== Generates a malicious PDF that exploits Adobe...

USN-8837-1 pdfminer vulnerabilities

It was discovered that pdfminer did not safely parse specially crafted PDF files. An attacker could possibly use these issues to execute arbitrary code. CVE-2025-64512, CVE-2025-70559...

CVE-2026-91788 Foxit PDF Editor/Reader Missing Authorization Information Disclosure Vulnerability

When implementing the JavaScript interface, Foxit PDF Editor/Reader did not perform the attribute authorization checks required by the specification. As a result, a trusted malicious PDF could potentially access sensitive content from other documents within the same process and transmit it...

CVE-2026-91788

Foxit PDF Editor/Reader is vulnerable to an information disclosure flaw because the JavaScript interface fails to perform the required attribute authorization checks . This oversight allows a trusted malicious PDF to potentially access sensitive content from other documents residing within the sa...

CVE-2026-91788 Foxit PDF Editor/Reader Missing Authorization Information Disclosure Vulnerability

When implementing the JavaScript interface, Foxit PDF Editor/Reader did not perform the attribute authorization checks required by the specification. As a result, a trusted malicious PDF could potentially access sensitive content from other documents within the same process and transmit it...

CVE-2026-91788: Exposure of Resource to Wrong Sphere

When implementing the JavaScript interface, Foxit PDF Editor/Reader did not perform the attribute authorization checks required by the specification. As a result, a trusted malicious PDF could potentially access sensitive content from other documents within the same process and transmit it...

EulerOS Virtualization 2.11.0 : python-pillow (EulerOS-SA-2026-3550)

According to the versions of the python-pillow packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : Pillow is a Python imaging library. From version 4.2.0 to before version 12.2.0, an attacker can supply a malicious PDF that...

Astra Linux – Vulnerability in Poppler

A flaw was discovered in Poppler regarding the way certain PDF files are converted into HTML format. A remote attacker could exploit this flaw by providing a malicious PDF file. When such a file is processed by the ‘pdftohtml’ program, it could cause the application to crash, resulting in a denia...

Astra Linux – Vulnerability in Poppler

A flaw was discovered in Poppler’s Splash backend. A remote attacker could exploit this vulnerability by creating a malicious PDF file. When the PDF is rendered, it triggers an integer overflow in the tilingPatternFill function. This overflow leads to an under-sized heap memory allocation, allowi...

CVE-2026-84311

A flaw was found in pypdf, a pure-python PDF library. A remote attacker can exploit this vulnerability by crafting a malicious PDF document containing specially structured XForm objects. Processing this document can lead to excessive iteration, causing the application to consume significant memor...