CVE-2022-28672

CVE-2022-28672 CVE-2022-28672 Уязвимость Foxit PDF Reader - UaF - RCE - JIT Spraying IOC обхода аутентификации FortiOS, FortiProxy и FortiSwitchManager CVE-2022-40684 Введение Недавний CVE FortiOS / FortiProxy / FortiSwitchManager был использован в реальных атаках. Мы хотели бы предоставить...

CVE-2022-28672

CVE-2022-28672 Discord Server Эта ошибка была Use after Free, вызванная неправильной обработкой ссылок на объекты памяти JavaScript. Блог Foxit PDF Reader - UaF - RCE - JIT Spraying Консультация CVE-2022-28672 Демонстрация...

malicious-pdf

Malicious PDF Generator ☠️ Generate 67 malicious PDF test files for testing phone-home callbacks, SSRF, XSS, XXE, NTLM credential theft, and data exfiltration in PDF viewers, converters, and web applications. Can be used with Burp Collaborator or Interact.sh Used for penetration testing, bug bount...

hardentools

Hardentools Hardentools предназначен для отключения ряда «функций», предоставляемых Microsoft Windows 10 и 11, а также некоторых широко используемых приложений на данный момент Microsoft Office, LibreOffice и Adobe PDF Reader. Эти функции, обычно предназначенные для корпоративных клиентов, в цело...

CVE-2017-10952

CVE-2017-10952 이것은 Foxit PDF 리더에 대한 로컬 코드 실행 공격의 고급 예제입니다. 이 공격에 대한 자세한 내용은 여기 1에서 확인할 수 있습니다. 1에 링크된 이 취약점에 대한 텍스트 설명을 여기에 복사하여 시간이 지나도 설명이 보존되도록 했습니다. 해당 설명은 vulners.com의 저자 Root가 작성했습니다. Foxit 설치 FoxitReaderv8.3.0.14878.exe를 설치합니다. 설치 과정을 진행합니다. 이는 Foxit PDF 리더의 이 버전을 악용하는 방법에 대한 고급 데모일 뿐이므로,...

CVE-2026-84852

A security vulnerability has been detected in Reader Tools PDF Reader App 98.8 on Android. The affected element is the function ActSplashNew.handleDeeplink of the component File Handler. The manipulation of the argument displayname leads to path traversal. An attack has to be approached locally...

CVE-2026-57239

Foxit PDF Reader LPE Foxit PDF Readerのアップデーターサービスを介してNT AUTHORITY\SYSTEM権限を取得できる、CVE-2026-3775/CVE-2026-3780およびCVE-2026-57239の概念実証エクスプロイトです。 ビルド バイナリをビルドし、ターゲットに配置して実行するだけです。 root@kitploit: cargo build --release 使い方 このプログラムには3つの主要エントリーポイントがあります:...

CVE-2026-13126 Foxit PDF Editor/Reader Annotation Use-After-Free Remote Code Execution Vulnerability

The embedded JavaScript in the PDF deleted the pages, making the object invalid. The application attempted to perform a write operation on the invalid pop-up annotations, resulting in the program crashing...

CVE-2026-13128 Foxit PDF Editor/Reader Doc Object Use-After-Free Remote Code Execution Vulnerability

Embedding JavaScript within a PDF file will cause the page to be deleted. Subsequent scripts will continue to access the relevant properties of the document view, eventually leading to the crash of the application...

CVE-2026-13129 Foxit PDF Editor/Reader Annotation Use-After-Free Remote Code Execution Vulnerability

When the application opens a PDF file, JavaScript uses the damaged field tree to trigger field traversal, resulting in the program holding an invalid form object when accessing the field property path. Eventually, the application crashes due to reading an invalid pointer...

CVE-2026-57248

The CVE-2026-57248 entry concerns Foxit PDF Editor/Reader where opening a PDF and performing JavaScript to write annotation attributes can bypass object type/argument checks, corrupting the internal annotation structure and causing a crash on release. This is described as a local, user-interactio...

CVE-2026-57255

CVE-2026-57255 affects Foxit PDF Editor/Reader. A PDF with an abnormal color space contains attributes referencing a semantically malformed function; the function’s output isn’t validated, leading to an illegal pointer read that accesses an out-of-bounds region and crashes the application. The de...

CVE-2026-57237 Foxit PDF Editor/Reader Annotation Use-After-Free Remote Code Execution Vulnerability

When the application opens a PDF and JavaScript modifies the properties of form fields, it causes the state of the underlying objects referenced by the program to become invalid. Eventually, it reads an illegal memory address, which leads to the crash of the application...

CVE-2026-57257 Security vulnerability in Foxit PDF Editor/Reader — PRC 3D BRep Renderer Heap OOB Read

During the PRC parsing stage, there is a lack of boundary verification for the PRC entity index, which leads to an out-of-bounds read of the entity array. As a result, the application crashes...

Foxit PDF Reader for Mac < 2026.1.2 Multiple Vulnerabilities

According to its version, the Foxit PDF Reader for Mac application previously named Foxit Reader for Mac installed on the remote macOS host is prior to 2026.1.2. It is, therefore affected by multiple vulnerabilities: Note that Nessus has not tested for this issue but has instead relied only on th...

Foxit PDF Reader < 2026.1.2 Multiple Vulnerabilities

According to its version, the Foxit PDF Reader application previously named Foxit Reader installed on the remote Windows host is prior to 2026.1.2. It is, therefore affected by multiple vulnerabilities: Note that Nessus has not tested for this issue but has instead relied only on the application'...

CVE-2026-5937 Foxit PDF Editor/Reader's insufficient parameter validation leads to denial-of-service vulnerability

Insufficient parameter verification leads to the occurrence of format errors in files, which will trigger an unhandled "std::invalidargument" exception, ultimately causing the program to terminate...

Foxit PDF Reader和Foxit PDF Editor 资源管理错误漏洞

Foxit PDF Reader and Foxit PDF Editor are products of Foxit Corporation, a Chinese company. Foxit PDF Reader is a PDF reader. Foxit PDF Editor is a PDF editor. Both Foxit PDF Reader and Foxit PDF Editor have a resource management vulnerability. This vulnerability arises from the special XFA PDF...

Foxit PDF Reader AcroForm Signature Use-After-Free Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

Foxit PDF Reader < 2026.1.1 Multiple Vulnerabilities

According to its version, the Foxit PDF Reader application previously named Foxit Reader installed on the remote Windows host is prior to 2026.1.1. It is, therefore affected by multiple vulnerabilities: - Document structural anomalies caused inconsistencies between page element relationships and...