Vulnerability-Research

🛡️ Vulnerability Research Here, I catalog the vulnerabilities I've discovered, the corresponding write-ups containing details of the weaknesses, and insights into their impact and remediation. 🏆 Assigned CVEs...

CVE-2025-63918

PDFPatcher executable does not validate user-supplied file paths, allowing directory traversal attacks allowing attackers to upload arbitrary files to arbitrary locations...

EUVD-2025-197809

PDFPatcher executable does not validate user-supplied file paths, allowing directory traversal attacks allowing attackers to upload arbitrary files to arbitrary locations...

CVE-2025-63917

PDFPatcher thru 1.1.3.4663 executable's XML bookmark import functionality does not restrict XML external entity XXE references. The application uses .NET's XmlDocument class without disabling external entity resolution, enabling attackers to: Read arbitrary files from the victim's filesystem,...

CVE-2025-63918

PDFPatcher executable does not validate user-supplied file paths, allowing directory traversal attacks allowing attackers to upload arbitrary files to arbitrary locations...

PT-2025-47168

Name of the Vulnerable Software and Affected Versions PDFPatcher affected versions not specified Description The PDFPatcher executable does not properly validate user-supplied file paths, which can lead to directory traversal attacks. This allows attackers to upload arbitrary files to arbitrary...

PDFPatcher 安全漏洞

PDFPatcher is a PDF toolkit for WMJ individual developers. A security vulnerability exists in PDFPatcher 1.1.3.4663 and earlier versions, which stems from an under-restricted XML external entity reference, and could lead to arbitrary file reading or SSRF attacks...

PDFPatcher 安全漏洞

PDFPatcher is a PDF toolkit for WMJ individual developers. A security vulnerability exists in PDFPatcher that stems from insufficient file path validation and could lead to a directory traversal attack...

CVE-2025-63918: Improper Limitation of a Pathname to a Restricted Directory

PDFPatcher executable does not validate user-supplied file paths, allowing directory traversal attacks allowing attackers to upload arbitrary files to arbitrary locations...

PT-2025-47167

Name of the Vulnerable Software and Affected Versions PDFPatcher versions through 1.1.3.4663 Description The software does not properly restrict XML external entity XXE references in its XML bookmark import functionality. The application utilizes .NET’s XmlDocument class without disabling externa...

CVE-2025-63917: Improper Restriction of XML External Entity Reference

PDFPatcher thru 1.1.3.4663 executable's XML bookmark import functionality does not restrict XML external entity XXE references. The application uses .NET's XmlDocument class without disabling external entity resolution, enabling attackers to: Read arbitrary files from the victim's filesystem,...

CVE-2025-63917

The PDFPatcher executable (versions through 1.1.3.4663 ) is vulnerable to an XML External Entity (XXE) injection flaw within its XML bookmark import functionality. The root cause is the application's use of the .NET XmlDocument class without disabling external entity resolution. This flaw allows ...