CVE-2025-66516-Writeup-POC

CVE-2025-66516: Vulnerabilidad crítica de XXE en Apache Tika Resumen Ejecutivo CVE-2025-66516 es una vulnerabilidad crítica de inyección de XML External Entity XXE en Apache Tika con una puntuación CVSS de 10.0 severidad máxima. La vulnerabilidad permite a atacantes remotos leer archivos...

cve-2018-15968

Vulnerabilidad de divulgación de información por lectura fuera de los límites en Adobe Reader Vulnerabilidad Vulnerabilidad de restricción inadecuada de operaciones dentro de los límites de un búfer de memoria Descripción de la vulnerabilidad Esta vulnerabilidad permite a atacantes remotos divulg...

CVE-2017-9096-iText-XXE

CVE-2017-9096 1. Creación del PDF malicioso que contiene XXE Obtén un PDF que contenga un formulario: wget https://www.pdfscripting.com/public/FreeStuff/PDFSamples/ModifySubmitExample.pdf -O input.pdf Descomprimir el PDF Para ello, debes descomprimir el PDF con qpdf --qdf --object-streams=disable...

CVE-2025-64512-pdfminer-PoC

CVE-2025-64512 — pdfminer.six CMapDB Deserialization PoC Proof-of-Concept for a deserialization vulnerability in pdfminer.six that leads to arbitrary code execution when parsing a crafted PDF. PURPOSE / LEGAL DISCLAIMER This repository is provided for educational and authorized security research...

PS-2017-13---CVE-2018-9950

Foxit Reader PDF Parsing Out-Of-Bounds Read Information Disclosure Vulnerability Vulnerability Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability Vulnerability Description This vulnerability allows remote attackers to disclose sensitive information on vulnerable...

xpdf-docker

Imágenes Docker de Xpdf Este repositorio contiene imágenes Docker para Xpdf versión 4.04, que es vulnerable a CVE-2022-30524. Construyendo las Imágenes 📦 Este repositorio contiene la imagen en 3 sabores: bullseye/gcc : Debian "bullseye", compilado con gcc bullseye/afl : Debian "bullseye", compila...

CVE-2026-102996 pypdf: Possible large memory usage when parsing font data

pypdf is a free and open-source pure-python PDF library. Prior to 6.18.1, a crafted PDF can provide a TrueType or Type1 simple font with an unusually large /Widths array, causing pypdf/font.py Font.collectttt1characterwidths to process entries beyond the 256 character codes meaningful for a simpl...

cve-2025-54988-VulnTikaProject

Proyecto de Prueba de Vulnerabilidad de Apache Tika Esta es una aplicación Spring Boot que utiliza Apache Tika 3.2.1 para el procesamiento de documentos y extracción de texto. Requisitos previos Tener Docker Uso ./start-app.sh o docker compose up -d Ejecución de CVE Sube tu PDF malicioso...

CentOS Linux 7 [TuxCare] Security Update: clamav / clamav-data / clamav-devel / clamav-doc / etc Multiple Vulnerabilities (CENTOS7:CLSA-2024:1732562044)

The CentOS Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS7:CLSA-2024:1732562044 advisory. - A vulnerability in the PDF parsing module of Clam AntiVirus ClamAV versions 1.4.0, 1.3.2 and prior versions, all 1.2.x versions, 1.0.6...

cisco-CVE-2023-31488

About Security researcher: ly1g3, ly1g3attuta.io GPG fingerprint: https://keys.openpgp.org/vks/v1/by-fingerprint/5FE85CE4E8F675F5ABD2C0A33CE8BE447ED6D586 Overview: Email to zero click RCE as root - Remote Code Execution/Memory Corruption/ROP-chain CVE: CVE-2023-31488 Timeline: Discovered - ly1g3...

USN-8837-1: pdfminer vulnerabilities

It was discovered that pdfminer did not safely parse specially crafted PDF files. An attacker could possibly use these issues to execute arbitrary code. CVE-2025-64512, CVE-2025-70559...

Foxit PDF Reader PDF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsi...

CVE-2026-92178

pdfforge PDF Architect PDF File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of pdfforge PDF Architect. User interaction is required to exploit this vulnerability in that the target mu...

CVE-2026-92177

pdfforge PDF Architect PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of pdfforge PDF Architect. User interaction is required to exploit this vulnerability in that the target...

CVE-2026-92179

pdfforge PDF Architect PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of pdfforge PDF Architect. User interaction is required to exploit this vulnerability in that the target...

EUVD-2026-79138

pdfforge PDF Architect PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of pdfforge PDF Architect. User interaction is required to exploit this vulnerability in that the target...

CVE-2026-92177 pdfforge PDF Architect PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

pdfforge PDF Architect PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of pdfforge PDF Architect. User interaction is required to exploit this vulnerability in that the target...

CVE-2026-92177

pdfforge PDF Architect is affected by an out-of-bounds write vulnerability in its PDF file parsing functionality. The root cause is a lack of proper validation of user-supplied data, which allows a write past the end of an allocated object. A remote attacker can leverage this flaw to execute arbi...

EUVD-2026-79137

pdfforge PDF Architect PDF File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of pdfforge PDF Architect. User interaction is required to exploit this vulnerability in that the target mu...

CVE-2026-92178 pdfforge PDF Architect PDF File Parsing Memory Corruption Remote Code Execution Vulnerability

pdfforge PDF Architect PDF File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of pdfforge PDF Architect. User interaction is required to exploit this vulnerability in that the target mu...