cve-2024-4367-PoC-fixed

cve-2024-4367-PoC-fixed PDF.js is a JavaScript-based PDF viewer maintained by Mozilla. This vulnerability allows an attacker to execute arbitrary JavaScript code immediately after opening a malicious PDF file. This affects all Firefox users 126, as Firefox uses PDF.js to display PDF files, but al...

CVE-2024-27665

CVE-2024-27665 Unifiedtransform v2.X is vulnerable to Stored Cross-Site Scripting XSS via file upload feature in Syllabus module. Vendor: https://github.com/changeweb/Unifiedtransform PoC Step 1: Log in to the Application and Navigate to Academic module. Step 2: Create Session,Semester,Class,Cour...

CVE-2025-64512-Polyglot-PoC

CVE-2025-64512 폴리글롯 페이로드 지난 몇 주2025년 11월 동안 PDF 파일을 처리하는 인기 있는 Python 프로젝트인 pdfminer.six에서 흥미로운 취약점CVE-2025-64512이 공개되었습니다. 특히 AI 파이프라인에서 사용됩니다. 이 취약점은 PDF 파일을 공격 벡터로 활용하여 pickle.loads를 통해 신뢰할 수 없는 데이터를 역직렬화함으로써 원격 코드 실행을 가능하게 합니다. 여기까지는 좋습니다. 인기 있는 Python 패키지의 중요한 취약점입니다. 제 관심을 끈 것은 악용 가능성이었습니다 ...

Wagtail-CMS-XSS

Wagtail-6.4.1-CMS-XSS CVE-2025-45388 Wagtail CMS 6.4.1 저장형 XSS CMS 저장형 XSS 취약점 PoC 개요 이 저장소는 Wagtail 6.4.1 CMS 플랫폼에서 발견된 저장형 XSS 취약점을 시연합니다. 악성 JavaScript가 PDF 파일에 포함되어 있으며, 사용자가 PDF를 클릭할 때마다 XSS 팝업이 나타납니다. 재현 단계 1. 이 저장소에 제공된 것과 같이 악성 스크립트가 포함된 PDF 문서를 업로드합니다. 2. CMS에 접속하여 악성 PDF를 찾습니다. 3. PDF 링...

CVE-2024-4367

CVE-2024-4367 POC Usage python poc.py mal.pdf "alert'0xr2r'" References CVE-2024-4367: Arbitrary JS Execution in PDF.js PDF.js POC scaner templates...

CVE-2025-66837

CVE-2025-66837 악성 파일 업로드 설명 ARIS의 파일 업로드 취약점으로 인해 공격자는 조작된 PDF 파일/악성코드를 업로드하여 임의 코드를 실행할 수 있습니다. CVSS 점수: 6.8 중간 공격 유형 원격 인증됨 영향받는 버전 10.0.23.0.3587512 이후 버전 발견자: Yazan Abu-Nadi...

CVE-2024-38077-check

취약점 분석 비동기 pdf 파일. 제 능력이 부족하여 아직 RCE를 할 수 없습니다. 고수님들의 가르침을 부탁드립니다. 취약점 검증은 IP만 변경하면 됩니다. if name == 'main': printlogo connecttolicenseserver"192.168.6.132"...

CVE-2024-4367-hands-on-01

!IMPORTANT 본 리포지토리는 취약점을 학습하기 위한 것입니다. 본 핸즈온은 반드시 자신이 관리하는 적절한 컴퓨터에서 진행해 주십시오. 불법 행위는 절대 하지 마십시오. 또한 본 리포지토리로 인해 발생한 일체의 손해·책임을 작성자는 지지 않습니다. CVE-2024-4367-hands-on CVE-2024-4367을 체험하는 핸즈온 poc.pdf 작성 python CVE-2024-4367-PoC/CVE-2024-4367.py "alert'document.domain'" 출처:...

CVE-2026-54633

A flaw was found in PoDoFo, a C++ PDF manipulation library. Processing a specially crafted PDF file containing an Indexed color-space image can lead to a heap out-of-bounds read. This vulnerability occurs in the PdfColorSpaceFilterIndexed::FetchScanLine function due to insufficient validation of...

CVE-2026-93378

A missing authorization flaw was found in the Storage component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=540051167...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: python-reportlab (UTSA-2023-002178)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2023-002178 advisory. Reportlab up to v3.6.12 allows attackers to execute arbitrary code via supplying a crafted PDF file. Tenable has extracted the preceding description block directly...

PT-2026-96008

Name of the Vulnerable Software and Affected Versions 0717376 cowork bench versions up to d943e75bc0fc8e3b27141979300cd8cbcd1e890d Description In the pdf-tools-mcp component, the ControlFlowNode function within the file local servers/pdf-tools-mcp/pdf tools mcp/server.py is susceptible to...

CVE-2026-93381

Buffer overflow in PDFium in Google Chrome on on Windows prior to 153.0.8010.52 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code inside the sandbox via a crafted PDF file. Chromium security severity: High...

CVE-2026-93378

Missing authorization in Storage in Google Chrome prior to 153.0.8010.52 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted PDF file. Chromium security severity: Medium...

CVE-2026-93381: Heap-based Buffer Overflow

Buffer overflow in PDFium in Google Chrome on on Windows prior to 153.0.8010.52 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code inside the sandbox via a crafted PDF file. Chromium security severity: High...

CVE-2026-92177 pdfforge PDF Architect PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

pdfforge PDF Architect PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of pdfforge PDF Architect. User interaction is required to exploit this vulnerability in that the target...

CVE-2026-92179 pdfforge PDF Architect PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

pdfforge PDF Architect PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of pdfforge PDF Architect. User interaction is required to exploit this vulnerability in that the target...

PT-2026-92194

pdfforge PDF Architect PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of pdfforge PDF Architect. User interaction is required to exploit this vulnerability in that the target...

CVE-2026-92179: Out-of-bounds Write

pdfforge PDF Architect PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of pdfforge PDF Architect. User interaction is required to exploit this vulnerability in that the target...

ROS-20260915-73-0116

The vulnerability of the PDFium component in Google Chrome and Microsoft Edge browsers is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to cause a service failure through a specially created PDF file...