CVE-2024-4367-hands-on

!IMPORTANT Данный репозиторий предназначен для изучения уязвимостей. Данное практическое занятие обязательно проводите на подходящем компьютере, находящемся под вашим контролем. Ни в коем случае не совершайте незаконных действий. Также автор не несёт ответственности за любой ущерб или убытки,...

CVE-2025-32583

🚨 CVE-2025-32583 — Эксплойт RCE для WordPress PDF 2 Post КРИТИЧЕСКАЯ уязвимость CVE-ID: CVE-2025-32583 Критичность: 9.9 КРИТИЧЕСКАЯ CVSS-вектор: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H 📖 Описание Уязвимость в плагине PDF 2 Post для WordPress разработанном termel позволяет выполнить удалённое...

CVE-2024-9935

CVE-2024-9935 Elementor Page Builder용 PDF Generator 애드온 = 1.7.5 - 인증되지 않은 임의 파일 다운로드 사용법 python CVE-2024-9935.py http://example.com...

CVE-2010-1240

CVE-2010-1240 - Embedding backdoor into a PDF ⚠️ For educational and authorized security research purposes only Description Adobe Reader and Acrobat 9.x before 9.3.3, and 8.x before 8.2.3 on Windows and Mac OS X, do not restrict the contents of one text field in the Launch File warning dialog,...

BurpMetaFinder

BurpMetaFinder - Metadata extractor Burp Suite extension for extracting metadata from files Currently supported documents: PDF DOCX PPTX XLSX The project created at Jetbrains has been completely added. Don't forget to change the settings you need. Usage You need to dowload 2 external libraries:...

PHP-Injection-in-M4-PDF-Extensions

PHP-Injection-in-M4-PDF-Extensions CVE-2023-50029 is a PHP injection vulnerability in the M4 PDF Extensions module. This vulnerability allows attackers to inject and execute arbitrary PHP code on the server, enabling them to gain full control over the targeted system. The issue lies in the improp...

CVE-2021-23639

Aperçu md-to-pdf est un outil CLI pour convertir des fichiers Markdown en PDF. Les versions affectées de ce package sont vulnérables à une exécution de code à distance RCE en raison de l'utilisation de la bibliothèque gray-matter pour analyser le contenu du front matter, sans désactiver le moteur...

CVE-2025-64512

CVE-2025-64512 — Небезопасная десериализация Pickle в pdfminer.six через специально созданный PDF ⚠️ Дисклеймер: Этот инструмент предназначен только для образовательных целей и авторизованного тестирования на проникновение. Используйте его только против систем, которыми вы владеете или на...

CVE-2021-30860

CVE-2021-30860 CVE-2021-30860 FORCEDENTRY est une vulnérabilité connue dans MacOS, iOS et WatchOS. Elle permet l'exécution de code arbitraire en envoyant à un appareil victime un "PDF malveillamment conçu". Cette vulnérabilité a été corrigée par Apple le 13 septembre 2021 avec les versions...

CVE-2017-10952

CVE-2017-10952 So this is a high level example of a local code execution attack on Foxit PDF reader. Details of this attack can be found here 1. I've copy pasted the text description of this vulnerability linked in 1 here to preserve the description over time - the description was written by the...

cve-testing

Ядро Linux Существует несколько руководств для разработчиков и пользователей ядра. Эти руководства могут быть преобразованы в различные форматы, такие как HTML и PDF. Пожалуйста, сначала прочитайте Documentation/admin-guide/README.rst. Для сборки документации используйте make htmldocs или make...

cve-2019-17497

CVE-2019-17497 CVE 상세 정보 PDF-XChange Editor 8.0.330.0 이전 버전에는 조작된 FDF 또는 XFDF 파일을 사용하는 NTLM SSO 해시 도용 취약점이 있습니다CVE-2018-4993과 관련된 문제. 예를 들어, 사용자 상호작용 없이 \attacker.loca\C$\eee.pdf 링크에 대해 NTLM 해시가 전송됩니다. 원본 Writeup 원본 writeup에는 POC가 파일로 포함되어 있지 않아서, 제가 직접 다시 만들었습니다. 파일의 attacker.local을 공격 서버의 IP 주소...

BugHub

BugHub c'est mon CVEhub Vous pouvez obtenir des informations sur ces Cves en consultant le pdf et les images du projet...

vulnerable-PDF

vulnerable-PDF = Salaries.pdf - 개발 모드: 08.10.2022 참고: 이것은 테스트 전용이며 Microsoft의 통합 프로그램인 계산기만 열 수 있습니다. = 또는 PDF 파일을 사용하여 금지된 디렉터리에 calc.exe를 다운로드할 수 있습니다 :D 경고! 테스트 및 교육 전용입니다 = vulnerable-PDF = Book.pdf 참고: System23 디렉터리를 둘러보고 그 안에 무엇이 있는지 확인할 수 있습니다 = 경고! 테스트 및 교육 전용입니다 = vulnerable-PDF =...

jsunpack-n

jsunpack-n jsunpack-n emulates browser functionality when visiting a URL. It's purpose is to detect exploits that target browser and browser plug-in vulnerabilities. It accepts many different types of input: PDF files - samples/sample-pdf.file Packet Captures - samples/sample-http-exploit.pcap HT...

Apache Tika - XXE Injection

Apache Tika versions 1.13 through 3.2.1 are vulnerable to XXE via malicious XFA in PDFs, allowing file read and SSRF attacks. id: CVE-2025-54988 info: name: Apache Tika - XXE Injection author: tx1ee severity: critical description: | Apache Tika versions 1.13 through 3.2.1 are vulnerable to XXE vi...

Stirling-PDF SSRF via Markdown

Stirling-PDF is a locally hosted web application that performs various operations on PDF files. Prior to version 1.1.0, when using the /api/v1/convert/markdown/pdf endpoint to convert Markdown to PDF, the backend calls a third-party tool to process it and includes a sanitizer for security...

PDF Generator for WordPress < 1.1.2 - Cross Site Scripting

The plugin includes a vendored dompdf example file which is susceptible to Reflected Cross-Site Scripting and could be used against high privilege users such as admin id: CVE-2022-4321 info: name: PDF Generator for WordPress 1.1.2 - Cross Site Scripting author: r3Y3r53,HuTa0 severity: medium...

Gotenberg - Command Injection

Gotenberg 8.31.0 contains a command injection caused by lack of validation on JSON metadata keys in /forms/pdfengines/metadata/write endpoint, letting unauthenticated attackers execute OS commands, exploit requires crafted HTTP request. id: CVE-2026-42589 info: name: Gotenberg - Command Injection...

PDF Generator Addon for Elementor Page Builder <= 1.7.5 - Arbitrary File Download

The PDF Generator Addon for Elementor Page Builder plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 1.7.5 via the rtwpgaepbdwnldpdf function. This makes it possible for unauthenticated attackers to read the contents of arbitrary files on the server, which...