CVE-2025-64512-Polyglot-PoC

CVE-2025-64512 Carga útil políglota En las últimas semanas en noviembre de 2025, se reveló una vulnerabilidad interesante CVE-2025-64512 en pdfminer.six, un popular proyecto de Python para procesar archivos PDF, utilizado en particular en pipelines de IA. La vulnerabilidad permite la ejecución...

Wagtail-CMS-XSS

Wagtail-6.4.1-CMS-XSS CVE-2025-45388 Wagtail CMS 6.4.1 存储型 XSS CMS 存储型 XSS 漏洞 PoC 概述 本仓库演示了在 Wagtail 6.4.1 CMS 平台中发现的一个存储型 XSS 漏洞。一段恶意 JavaScript 被嵌入到 PDF 文件中，每当用户点击该 PDF 时，都会弹出一个 XSS 弹窗。 复现步骤 1. 上传一个包含恶意脚本的 PDF 文档，例如本仓库中提供的那个。 2. 访问 CMS 并找到恶意 PDF。 3. 点击 PDF 链接。 4. 恶意 JavaScript 将被触发，并在每次打开 PDF 时...

CVE-2024-4367-hands-on-01

!IMPORTANT 本仓库用于学习漏洞。 本次动手实践请务必在自己管理下的合适计算机上进行。绝对不要进行违法行为。 此外，因本仓库产生的任何损害・责任，作者概不承担。 CVE-2024-4367-hands-on 体验 CVE-2024-4367 的动手实践 创建 poc.pdf root@kitploit: python CVE-2024-4367-PoC/CVE-2024-4367.py "alert'document.domain'" 引用来源：https://github.com/LOURC0D3/CVE-2024-4367-PoC 将创建攻击用的 poc.pdf。...

CVE-2024-27665

CVE-2024-27665 Unifiedtransform v2.X 存在存储型跨站脚本攻击（XSS）漏洞，通过课程大纲模块的文件上传功能利用。 供应商：https://github.com/changeweb/Unifiedtransform PoC 步骤 1：登录应用程序并导航到学术模块。 步骤 2：从学术模块使用随机数据创建学期、学年、班级、课程。 步骤 3：导航到课程大纲模块，填写所需详细信息，并在课程大纲文件上传输入中上传包含 XSS 载荷的 PDF 文件。 步骤 4：导航到班级 - 课程大纲并点击下载。 步骤 5：观察 XSS 被触发！...

cve-2024-4367-PoC-fixed

cve-2024-4367-PoC-fixed PDF.js是由Mozilla维护的基于JavaScript的PDF查看器。此漏洞允许攻击者在打开恶意 PDF 文件后立即执行任意 JavaScript 代码。这会影响所有 Firefox 用户 （126），因为 Firefox 使用 PDF.js 来显示 PDF 文件，但也严重影响了许多基于 Web 和 Electron 的应用程序，这些应用程序（间接）使用 PDF.js 进行预览功能。...

Astra Linux – Vulnerability in Chromium

The use of “after free” in PDFium in Google Chrome before version 149.0.7827.53 allowed a remote attacker to execute arbitrary code within a sandbox through a crafted PDF file. Chromium security severity: Low...

Astra Linux – Vulnerability in Poppler

A vulnerability was discovered in the freedesktop Poppler version 20.12.1. This vulnerability allows remote attackers to trigger a Denial-of-Service DoS attack through a crafted .pdf file, targeting the FoFiType1C::cvtGlyph function...

CVE-2024-4367

CVE-2024-4367 POC 使い方 root@kitploit: python poc.py mal.pdf "alert'0xr2r'" 参照 CVE-2024-4367: Arbitrary JS Execution in PDF.js PDF.js POC スキャナー templates...

CVE-2025-66837

CVE-2025-66837 恶意文件上传 描述 ARIS 中的文件上传漏洞允许攻击者通过上传特制的 PDF 文件/恶意软件来执行任意代码 CVSS 评分：6.8（中危） 攻击类型 远程（需认证） 受影响版本 10.0.23.0.3587512 及更早版本 产品供应商 software ag 受影响产品 ARIS 受影响组件 文件上传 API 缓解措施 验证上传文件的内容。 漏洞详情 用户将下载攻击者上传的 PDF 文件/恶意软件，并在打开文件后执行恶意代码。 已修复版本 大于 10.0.23.0.3587512 的版本 发现者： Yazan Abu-Nadi...

CVE-2024-38077-check

漏洞分析异步pdf文件。本人能力有限，还无法rce。请大佬指教。 漏洞验证只需要更改ip即可 root@kitploit: if name == 'main': printlogo connecttolicenseserver"192.168.6.132"...

CVE-2026-82472

Documenso before 2.13.0 accepts PDF file uploads on the /api/files/upload-pdf endpoint without requiring authentication, session tokens, or API credentials. Unauthenticated attackers can upload arbitrary PDF files indefinitely to exhaust storage resources or fill the database with unlinked docume...

CVE-2026-79021

Missing authorization in InterestGroups in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass system access restrictions via a crafted PDF file. Chromium security severity: Low...

CVE-2026-79021

CVE-2026-79021 is a missing authorization flaw in the InterestGroups component of Google Chrome prior to 152.0.7977.65 . An attacker who has already compromised the renderer process can use a crafted PDF file to bypass system access restrictions . The flaw carries a Low Chromium severity and a CV...

CVE-2026-79119

Use after free in PDF in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted PDF file. Chromium security severity: Low...

PT-2026-81564

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description Missing authorization in SiteIsolation allows a remote attacker who has compromised the renderer process to bypass site isolation by using a crafted PDF file. Site isolation is a securi...

PT-2026-81619

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description Missing authorization in InterestGroups allows a remote attacker who has compromised the renderer process to bypass system access restrictions by using a crafted PDF file. Recommendatio...

Astra Linux – Vulnerability in Chromium

Uninitialized data in PDFium in Google Chrome prior to 90.0.4430.72 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted PDF file...

CVE-2026-73248

calibre is an e-book manager. Prior to 9.12.0, calibre processes attacker-controlled compositetemplate metadata from a malicious EPUB, OPF, PDF, or similar file through program: and a nested template call whose formatter does not inherit allowpythontemplates=False, allowing a nested python:...

PT-2026-70939

calibre is an e-book manager. Prior to 9.12.0, calibre processes attacker-controlled composite template metadata from a malicious EPUB, OPF, PDF, or similar file through program: and a nested template call whose formatter does not inherit allow python templates=False, allowing a nested python:...

AZL-95450 CVE-2026-20346 affecting package clamav for versions less than 1.5.4-1

A vulnerability in the PDF file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition or possibly other expanded impacts as a result of memory corruption on an affected device. This vulnerability is due to improper boundary checks for content in PDF file...