Vulnerability-Research

🛡️ 漏洞研究 在此，我收录了自己发现的各类漏洞、包含漏洞细节的相应分析文章，以及对其影响和修复方案的见解。 🏆 已分配的 CVE CVE ID| 漏洞标题| 严重性/CVSS| 发布时间| 漏洞文章 ---|---|---|---|--- N.A.| 微软安全响应中心 MSRC 2026 年第一季度安全研究员排行榜 192| N/A| 2026 年 4 月| 官方致谢页面 N.A.| 3 次 MSRC 安全研究员致谢（Microsoft Online Services）| N/A| 2026 年 3 月| 官方致谢页面 CVE-2025-63918| wmjordan PDFPatche...

CVE-2025-63918

PDFPatcher executable does not validate user-supplied file paths, allowing directory traversal attacks allowing attackers to upload arbitrary files to arbitrary locations...

EUVD-2025-197809

PDFPatcher executable does not validate user-supplied file paths, allowing directory traversal attacks allowing attackers to upload arbitrary files to arbitrary locations...

CVE-2025-63917

PDFPatcher thru 1.1.3.4663 executable's XML bookmark import functionality does not restrict XML external entity XXE references. The application uses .NET's XmlDocument class without disabling external entity resolution, enabling attackers to: Read arbitrary files from the victim's filesystem,...

CVE-2025-63918

PDFPatcher executable does not validate user-supplied file paths, allowing directory traversal attacks allowing attackers to upload arbitrary files to arbitrary locations...

PDFPatcher 安全漏洞

PDFPatcher is a PDF toolkit for WMJ individual developers. A security vulnerability exists in PDFPatcher 1.1.3.4663 and earlier versions, which stems from an under-restricted XML external entity reference, and could lead to arbitrary file reading or SSRF attacks...

PT-2025-47168

Name of the Vulnerable Software and Affected Versions PDFPatcher affected versions not specified Description The PDFPatcher executable does not properly validate user-supplied file paths, which can lead to directory traversal attacks. This allows attackers to upload arbitrary files to arbitrary...

PDFPatcher 安全漏洞

PDFPatcher is a PDF toolkit for WMJ individual developers. A security vulnerability exists in PDFPatcher that stems from insufficient file path validation and could lead to a directory traversal attack...

CVE-2025-63917

PDFPatcher

PT-2025-47167

Name of the Vulnerable Software and Affected Versions PDFPatcher versions through 1.1.3.4663 Description The software does not properly restrict XML external entity XXE references in its XML bookmark import functionality. The application utilizes .NET’s XmlDocument class without disabling externa...