cve-2024-4367-PoC-fixed

cve-2024-4367-PoC-fixed PDF.js is a JavaScript-based PDF viewer maintained by Mozilla. This vulnerability allows an attacker to execute arbitrary JavaScript code immediately after opening a malicious PDF file. This affects all Firefox users 126, as Firefox uses PDF.js to display PDF files, but al...

CVE-2026-34621

CVE-2026-34621 : Adobe Acrobat 2026 Prototype Pollution & JS Injection Chain — Research PoC Overview This repository contains research material and proof-of-concept code developed during the analysis of the 2026 Adobe Acrobat Reader in-the-wild exploit chain involving: Prototype Pollution Interna...

malicious-pdf

Malicious PDF Generator ☠️ Generate 67 malicious PDF test files for testing phone-home callbacks, SSRF, XSS, XXE, NTLM credential theft, and data exfiltration in PDF viewers, converters, and web applications. Can be used with Burp Collaborator or Interact.sh Used for penetration testing, bug bount...

malicious-pdf

悪意のあるPDFジェネレーター ☠️ PDFビューア、変換ツール、Webアプリケーションにおけるphone-homeコールバック、SSRF、XSS、XXE、NTLM資格情報の窃取、データ外部送信をテストするための、67個の悪意のあるPDFテストファイルを生成します。Burp Collaborator または Interact.sh と一緒に使用できます。 ペネトレーションテスト、バグバウンティハンティング、レッドチーミングなどに使用されます。さまざまなリンクを含む多数のPDFファイルを生成するツールが必要だったため、このツールを作成しました。教育目的および専門的な目的にのみ使用してください...

pdf.js-CVE-2024-4367

🚨 CVE-2024-4367 - Universal PDF.js Vulnerability Scanner ⚠️ CRITICAL SECURITY TOOL | Detects CVE-2024-4367 CVSS 9.8 - PDF.js Remote Code Execution Vulnerability Works on ANY website - Zero configuration required 📋 Table of Contents 📖 Overview ⚡ Quick Start 🔍 What It Detects 🛠️ How It Works 📊 Output...

CVE-2023-38831_ReverseShell_Winrar

CVE-2023-38831 En este caso, os comparto los archivos necesarios para poder explotar esta vulnerabilidad en winrar, con la cual podemos crear un PDF malicioso para entablarnos una reverse shell a nuestra máquina de atacantes. ⚠️ NOTA: Este contenido esta compartido con fines Éticos y esta creado...

CVE-2021-30860

CVE-2021-30860 CVE-2021-30860（FORCEDENTRY）は、MacOS、iOS、WatchOSにおける既知の脆弱性です。この脆弱性により、「悪意を持って細工されたPDF」を被害者のデバイスに送信することで、任意のコード実行が可能になります。 この脆弱性は、2021年9月13日にAppleによって次のバージョンで修正されました。 iOS 14.8 OSX Big Sur 11.6、Security Update 2021-005 Catalina WatchOS 7.6.2 しかし、2021年2月以降、実際に悪用されていました。 目的...

CVE-2025-64512-exploit

CVE-2025-64512 - pdfminer.six Remote Code Execution RCE 📋 Description This repository contains a proof-of-concept exploit for CVE-2025-64512 , a critical vulnerability in pdfminer.six versions prior to 20251107. The vulnerability allows an attacker to achieve Remote Code Execution RCE by uploadin...

CVE-2026-3462

CVE-2026-3462 Acrobat Reader | Improperly Controlled Modification of Object Prototype Attributes 'Prototype Pollution' CWE-1321 CVE-2026-34621 - Advanced Cross-Platform Exploit Generator =========================================================== Generates a malicious PDF that exploits Adobe...

CVE-2025-20260

CVE-2025-20260 EXPLOIT This repository contains both the python script to generate the malicious pdf file and a core dump analysis...

cve-2025-54988-VulnTikaProject

Apache Tika 취약점 테스트 프로젝트 문서 처리 및 텍스트 추출을 위해 Apache Tika 3.2.1을 사용하는 Spring Boot 애플리케이션입니다. 사전 요구 사항 Docker 필요 사용법 ./start-app.sh or docker compose up -d CVE 실행 추출을 위해 악성 PDFhttps://github.com/mgthuramoemyint/POC-CVE-2025-54988를 엔드포인트에 업로드합니다. curl -X POST -F "[email protected]"...

CVE-2026-84311

A flaw was found in pypdf, a pure-python PDF library. A remote attacker can exploit this vulnerability by crafting a malicious PDF document containing specially structured XForm objects. Processing this document can lead to excessive iteration, causing the application to consume significant memor...

CVE-2026-84310

A flaw was found in pypdf. A remote attacker could craft a malicious PDF document with specially designed outlines. Processing this document would cause the pypdf library to consume excessive processing time and memory, leading to a Denial of Service DoS condition. This vulnerability is due to a...

Astra Linux – Vulnerability in Poppler

A flaw was discovered in Poppler regarding the way certain PDF files are converted into HTML format. A remote attacker could exploit this flaw by providing a malicious PDF file. When such a file is processed by the ‘pdftohtml’ program, it could cause the application to crash, resulting in a denia...

EulerOS 2.0 SP11 : python-pillow (EulerOS-SA-2026-3147)

According to the versions of the python-pillow packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Pillow is a Python imaging library. From version 4.2.0 to before version 12.2.0, an attacker can supply a malicious PDF that causes the...

EulerOS 2.0 SP11 : python-pillow (EulerOS-SA-2026-3093)

According to the versions of the python-pillow packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Pillow is a Python imaging library. From version 4.2.0 to before version 12.2.0, an attacker can supply a malicious PDF that causes the...

CVE-2026-8325

A maliciously crafted PDF file, when parsed through Autodesk Revit, can force an Out-of-Bounds Write vulnerability. A malicious actor may leverage this vulnerability to cause a crash, cause data corruption, or execute arbitrary code in the context of the current process...

NPM: PDF.js: Arbitrary JavaScript execution upon opening a malicious PDF

NPM: PDF.js: Arbitrary JavaScript execution upon opening a malicious PDF vulnerability discovered by ? in WordPress Npm pdfjs-dist versions = 5.6.83, 6.2.108...

GHSA-HQ66-CQWQ-W95J PDF.js: Arbitrary JavaScript execution upon opening a malicious PDF

Impact If PDF.js is used to load a malicious PDF, and PDF.js is configured with enableScripting set to true which is the default value and no CSP for disallowing script-src, unrestricted attacker-controlled JavaScript will be executed in the context of the hosting domain. Patches Workarounds Set...

EulerOS 2.0 SP13 : python-pillow (EulerOS-SA-2026-3042)

According to the versions of the python-pillow packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Pillow is a Python imaging library. From version 4.2.0 to before version 12.2.0, an attacker can supply a malicious PDF that causes the...