cve-2024-4367-PoC-fixed

cve-2024-4367-PoC-fixed PDF.js es un visor de PDF basado en JavaScript mantenido por Mozilla. Esta vulnerabilidad permite a un atacante ejecutar código JavaScript arbitrario inmediatamente después de abrir un archivo PDF malicioso. Esto afecta a todos los usuarios de Firefox 126, ya que Firefox...

CVE-2025-66837

CVE-2025-66837 Malicious File Upload Description A file upload vulnerability in ARIS allows attackers to execute arbitrary code via uploading a crafted PDF file/Malware CVSS Score: 6.8 Medium Attack Type Remote Authenticated Affected Versions Versions before 10.0.23.0.3587512 Discovered By: Yazan...

CVE-2024-38077-check

Análisis de vulnerabilidad de archivos PDF asíncronos. Mi capacidad es limitada, todavía no puedo lograr RCE. Por favor, que los expertos me guíen. Para la verificación de la vulnerabilidad, solo es necesario cambiar la IP. if name == 'main': printlogo connecttolicenseserver"192.168.6.132"...

CVE-2024-27665

CVE-2024-27665 Unifiedtransform v2.X es vulnerable a Cross-Site Scripting XSS Almacenado mediante la función de carga de archivos en el módulo Syllabus. Vendor: https://github.com/changeweb/Unifiedtransform PoC Paso 1: Inicie sesión en la aplicación y navegue al módulo Academic. Paso 2: Cree...

CVE-2025-64512-Polyglot-PoC

CVE-2025-64512 Polyglot Payload In the last weeks in November 2025, an interesting vulnerability CVE-2025-64512 was disclosed in pdfminer.six, a popular Python project to process PDF files, used in particular in AI pipelines. The vulnerability enables remote code execution by deserializing...

Linux Distros Unpatched Vulnerability : CVE-2026-106271

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Missing authorization in Workers in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to bypass site...

DEBIAN-CVE-2026-106271

Missing authorization in Workers in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted PDF file. Chromium security severity: Medium...

CVE-2026-106271

Missing authorization in Workers in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted PDF file. Chromium security severity: Medium...

CVE-2026-106271

Missing authorization in Workers in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted PDF file. Chromium security severity: Medium...

EUVD-2026-93760

Missing authorization in Workers in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted PDF file. Chromium security severity: Medium...

CVE-2026-106271

Missing authorization in Workers in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted PDF file. Chromium security severity: Medium...

CVE-2026-106271

Google Chrome versions prior to 155.0.8059.39 are vulnerable to a missing authorization flaw in Workers . A remote attacker who has already compromised the renderer process can use a crafted PDF file to bypass site isolation . The vulnerability is rated with Medium severity by Chromium and has a ...

PT-2026-106944

Missing authorization in Workers in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted PDF file. Chromium security severity: Medium...

CVE-2026-106271: Missing Authorization

Missing authorization in Workers in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted PDF file. Chromium security severity: Medium...

CVE-2024-4367-hands-on-01

!IMPORTANT Este repositorio es para aprender sobre vulnerabilidades. Realice este taller únicamente en un ordenador adecuado que usted gestione. No realice nunca actividades ilegales. Además, el autor no se hace responsable de ningún daño o responsabilidad derivados de este repositorio...

Astra Linux – Vulnerability in Chromium

The use of “after free” in PDFium in Google Chrome before version 151.0.7922.72 allowed a remote attacker to execute arbitrary code within a sandbox through a crafted PDF file. Chromium security severity: Low...

Wagtail-CMS-XSS

Wagtail-6.4.1-CMS-XSS CVE-2025-45388 Wagtail CMS 6.4.1 XSS almacenado Vulnerabilidad PoC de XSS almacenado en CMS Resumen Este repositorio demuestra una vulnerabilidad de XSS almacenado encontrada en la plataforma Wagtail 6.4.1 CMS. Se incrusta un JavaScript malicioso en un archivo PDF, y cada ve...

CVE-2024-4367

CVE-2024-4367 PoC Uso python poc.py mal.pdf "alert'0xr2r'" Referencias CVE-2024-4367: Ejecución arbitraria de JS en PDF.js PDF.js PoC Escáner plantillas...

Astra Linux – Vulnerability in Chromium

Insufficient validation of untrusted input in the “Save to Drive” feature in Google Chrome before version 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape through a crafted PDF file. Chromium security severity: Medium...

Astra Linux – Vulnerability in Chromium

Missing authorization in SiteIsolation in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted PDF file. Chromium security severity: Medium...