CVE-2026-3462

CVE-2026-3462 Adobe Acrobat Reader | تحكم غير صحيح في تعديل سمات كائن النموذج الأولي 'تلوث النموذج الأولي' CWE-1321 CVE-2026-34621 - مولد استغلال متقدم عبر المنصات =========================================================== يقوم بإنشاء ملف PDF خبيث يستغل ثغرة تلوث النموذج الأولي والهروب من بيئة...

cve-2025-54988-VulnTikaProject

Apache Tika 漏洞测试项目 这是一个使用 Apache Tika 3.2.1 进行文档处理和文本提取的 Spring Boot 应用程序。 前提条件 需要 Docker 用法 ./start-app.sh 或 docker compose up -d CVE 执行 将你的恶意 PDF（https://github.com/mgthuramoemyint/POC-CVE-2025-54988）上传到端点以进行提取。 curl -X POST -F "[email protected]" http://127.0.0.1:8080/api/extract-text cur...

cve-2024-4367-PoC-fixed

cve-2024-4367-PoC-fixed PDF.js ist ein von Mozilla gepflegter, auf JavaScript basierender PDF-Viewer. Diese Schwachstelle erlaubt es Angreifern, unmittelbar nach dem Öffnen einer schädlichen PDF-Datei beliebigen JavaScript-Code auszuführen. Dies betrifft alle Firefox-Benutzer 126, da Firefox PDF....

CVE-2026-34621

CVE-2026-34621 : Catena di Prototype Pollution e Iniezione JS in Adobe Acrobat 2026 — PoC di Ricerca Panoramica Questo repository contiene materiale di ricerca e codice proof-of-concept sviluppato durante l'analisi della catena di exploit in-the-wild di Adobe Acrobat Reader 2026 che coinvolge:...

pdf.js-CVE-2024-4367

🚨 CVE-2024-4367 - Scanner universel de vulnérabilité PDF.js ⚠️ OUTIL DE SÉCURITÉ CRITIQUE | Détecte CVE-2024-4367 CVSS 9.8 - Vulnérabilité d'exécution de code à distance PDF.js Fonctionne sur TOUT site web - Aucune configuration requise 📋 Table des matières 📖 Aperçu ⚡ Démarrage rapide 🔍 Ce qu'il...

CVE-2021-30860

CVE-2021-30860 CVE-2021-30860 FORCEDENTRY ist eine bekannte Sicherheitslücke in MacOS, iOS und WatchOS. Sie ermöglicht die Ausführung von beliebigem Code durch Senden einer „bösartig präparierten PDF“ an ein Zielgerät. Diese Sicherheitslücke wurde von Apple am 13. September 2021 mit den folgenden...

CVE-2023-38831_ReverseShell_Winrar

CVE-2023-38831 In questo caso, condivido i file necessari per sfruttare questa vulnerabilità in WinRAR, con la quale possiamo creare un PDF malintenzionato per ottenere una reverse shell verso la nostra macchina attaccante. ⚠️ NOTA: Questo contenuto è condiviso per scopi etici ed è stato creato pe...

malicious-pdf

Generatore di PDF Maligni ☠️ Genera 67 file PDF di test maligni per testare callback di phone-home, SSRF, XSS, XXE, furto di credenziali NTLM e esfiltrazione di dati in visualizzatori PDF, convertitori e applicazioni web. Può essere utilizzato con Burp Collaborator o Interact.sh Utilizzato per...

malicious-pdf

Malicious PDF Generator ☠️ Generate 67 malicious PDF test files for testing phone-home callbacks, SSRF, XSS, XXE, NTLM credential theft, and data exfiltration in PDF viewers, converters, and web applications. Can be used with Burp Collaborator or Interact.sh Used for penetration testing, bug bount...

CVE-2025-64512-exploit

CVE-2025-64512 - pdfminer.six Execução Remota de Código RCE 📋 Descrição Este repositório contém um exploit de prova de conceito para CVE-2025-64512 , uma vulnerabilidade crítica em pdfminer.six versões anteriores a 20251107. A vulnerabilidade permite que um invasor obtenha Execução Remota de Códi...

CVE-2025-20260

CVE-2025-20260 EXPLOIT Questo repository contiene sia lo script Python per generare il file PDF dannoso sia un'analisi del core dump...

EulerOS 2.0 SP11 : python-pillow (EulerOS-SA-2026-3147)

According to the versions of the python-pillow packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Pillow is a Python imaging library. From version 4.2.0 to before version 12.2.0, an attacker can supply a malicious PDF that causes the...

EulerOS 2.0 SP11 : python-pillow (EulerOS-SA-2026-3093)

According to the versions of the python-pillow packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Pillow is a Python imaging library. From version 4.2.0 to before version 12.2.0, an attacker can supply a malicious PDF that causes the...

CVE-2026-8325

A maliciously crafted PDF file, when parsed through Autodesk Revit, can force an Out-of-Bounds Write vulnerability. A malicious actor may leverage this vulnerability to cause a crash, cause data corruption, or execute arbitrary code in the context of the current process...

NPM: PDF.js: Arbitrary JavaScript execution upon opening a malicious PDF

NPM: PDF.js: Arbitrary JavaScript execution upon opening a malicious PDF vulnerability discovered by ? in WordPress Npm pdfjs-dist versions = 5.6.83, 6.2.108...

GHSA-HQ66-CQWQ-W95J PDF.js: Arbitrary JavaScript execution upon opening a malicious PDF

Impact If PDF.js is used to load a malicious PDF, and PDF.js is configured with enableScripting set to true which is the default value and no CSP for disallowing script-src, unrestricted attacker-controlled JavaScript will be executed in the context of the hosting domain. Patches Workarounds Set...

EulerOS 2.0 SP13 : python-pillow (EulerOS-SA-2026-3042)

According to the versions of the python-pillow packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Pillow is a Python imaging library. From version 4.2.0 to before version 12.2.0, an attacker can supply a malicious PDF that causes the...

CVE-2026-59938

A flaw was found in pypdf, a free and open-source pure-python PDF library. An attacker can exploit this vulnerability by crafting a malicious PDF file with image size values that are significantly larger than the actual embedded image data, causing pypdf to allocate large amounts of memory when...

TencentOS Server 4: evince (TSSA-2026:0539)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2026:0539 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...

CVE-2026-57259

The input file does not need to be strictly in a structurally valid PDF format. Instead, after reviewing the content, the original document disguised as a PDF will be sent to the parser. Malicious documents will construct malicious external entities that, through the protocol, point to local path...