CVE-2022-28672

CVE-2022-28672 Discord Server このバグは、javascriptオブジェクトのメモリ参照の不適切な処理によって引き起こされた Use after Free です。 ブログ Foxit PDF Reader - UaF - RCE - JIT Spraying アドバイザリ CVE-2022-28672 デモ...

malicious-pdf

Malicious PDF Generator ☠️ Generate 67 malicious PDF test files for testing phone-home callbacks, SSRF, XSS, XXE, NTLM credential theft, and data exfiltration in PDF viewers, converters, and web applications. Can be used with Burp Collaborator or Interact.sh Used for penetration testing, bug bount...

hardentools

Hardentools Hardentools는 Microsoft Windows 10 및 11과 널리 사용되는 일부 응용 프로그램현재 Microsoft Office, LibreOffice 및 Adobe PDF Reader에서 제공하는 여러 "기능"을 비활성화하도록 설계되었습니다. 일반적으로 기업 고객을 위해 고안된 이러한 기능은 일반 사용자에게는 대개 불필요하며, 오히려 공격자가 피해자의 컴퓨터에서 악성 코드를 실행하는 데 매우 흔히 악용되기 때문에 위험 요소가 됩니다. 이 도구의 목적은 쉽게 공격당할 수 있는 부분을 비활성화하여...

CVE-2017-10952

CVE-2017-10952 이것은 Foxit PDF 리더에 대한 로컬 코드 실행 공격의 고급 예제입니다. 이 공격에 대한 자세한 내용은 여기 1에서 확인할 수 있습니다. 1에 링크된 이 취약점에 대한 텍스트 설명을 여기에 복사하여 시간이 지나도 설명이 보존되도록 했습니다. 해당 설명은 vulners.com의 저자 Root가 작성했습니다. Foxit 설치 FoxitReaderv8.3.0.14878.exe를 설치합니다. 설치 과정을 진행합니다. 이는 Foxit PDF 리더의 이 버전을 악용하는 방법에 대한 고급 데모일 뿐이므로,...

cve-2024-30350-research-notes

CVE-2024-30350 リサーチノート 概要 CVE-2024-30350 は、Foxit PDF Reader における境界外読み取り（out-of-bounds read）の情報漏えい脆弱性です。この問題は Trend Micro Zero Day Initiative により ZDI-24-333 として公開され、開示前は ZDI-CAN-22708 として追跡されていました。 公開アドバイザリでは、脆弱な領域を Foxit PDF Reader の Annotation オブジェクトの処理として説明しています。細工された PDF...

CVE-2026-57239

Foxit PDF Reader LPE 다음 취약점에 대한 개념 증명 익스플로잇입니다: CVE-2026-3775/CVE-2026-3780 및 CVE-2026-57239. Foxit PDF Reader 업데이터 서비스를 통해 NT AUTHORITY\SYSTEM 권한을 얻을 수 있습니다. 빌드 바이너리를 빌드한 후 타겟에 복사하고 실행하기만 하면 됩니다. cargo build --release 사용법 프로그램에는 세 가지 주요 진입점이 있습니다: check, exploit, cleanup. 인수가 수행하는 작업은 상당히 명확합니다...

CVE-2022-28672

CVE-2022-28672 CVE-2022-28672 Foxit PDF Reader 취약점 - UaF - RCE - JIT Spraying FortiOS, FortiProxy 및 FortiSwitchManager 인증 우회 IOC CVE-2022-40684 소개 최근 FortiOS / FortiProxy / FortiSwitchManager CVE가 실제 환경에서 악용되었습니다. 사용자가 자신이 침해되었는지 여부를 판단하기 시작할 수 있도록 취약점에 대한 추가 정보를 제공하고자 합니다. 이 게시물에서는 FortiOS 7.2.1...

Foxit PDF Reader Annotation Use-After-Free Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

Foxit PDF Reader PDF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsi...

Foxit PDF Reader JPEG File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsi...

Foxit PDF Reader FoxitUpdater Improper Certificate Validation Local Privilege Escalation Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

Foxit PDF Reader Annotation Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of...

Foxit PDF Reader Doc Object Use-After-Free Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

Foxit PDF Reader importIcon NTLM Response Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose NTLM responses on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the implementati...

Foxit PDF Reader AcroForm Out-of-Bounds Read Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of...

Foxit PDF Reader Doc Object Use-After-Free Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

Foxit PDF Reader Doc Object Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

Foxit PDF Reader RichMedia Annotation Directory Traversal Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of...

Foxit PDF Reader FileOpen Uninitialized Variable Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the FileOpen...

Foxit PDF Reader JPEG2000 Parsing Memory Corruption Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...