Tika-CVE-2025-66516-Lab

CVE-2025-66516 最小限の検証環境 このプロジェクトは、CVE-2025-66516 （Apache Tika の XML 外部エンティティインジェクションの脆弱性）を検証するためのものです。 脆弱性の概要 Apache Tika 3.2.1 およびそれ以前のバージョンでは、XFA フォームを含む PDF ファイルを解析する際に外部エンティティの読み込みが正しく無効化されないため、XXE の脆弱性が存在します。攻撃者は悪意のある PDF ファイルを構築することで、サーバー上の機密ファイルを読み取ることができます。 環境要件 JDK 11+ Maven 使用方法 1...

CVE-2021-31453

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 10.1.1.37576. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

CVE-2021-31450

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 10.1.1.37576. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

CVE-2020-10907

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 9.7.1.29511. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

CVE-2025-66516

A XML External Entity XXE injection vulnerability was found in the Apache Tika framework's PDF parsing functionality. It could allow a remote, unauthenticated attacker to exploit the system by providing a specially crafted PDF containing an XFA XML Forms Architecture file. This flaw could lead to...

EUVD-2020-3313

Malware in sbrugna...

EUVD-2021-18352

Malware in sbrugna...

EUVD-2021-18359

Malware in sbrugna...

EUVD-2021-18353

Malware in sbrugna...

EUVD-2019-4837

Malware in sbrugna...

EUVD-2016-5065

Malware in sbrugna...

EUVD-2017-7771

Malware in sbrugna...

EUVD-2017-7769

Malware in sbrugna...

EUVD-2019-4824

Malware in sbrugna...

EUVD-2021-25011

Malware in sbrugna...

EUVD-2021-18350

Malware in sbrugna...

EUVD-2017-7774

Malware in sbrugna...

EUVD-2021-18355

Malware in sbrugna...

EUVD-2022-29266

Malicious code in bioql PyPI...

CVE-2022-24370

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Reader Foxit reader 11.0.1.0719 macOS. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specif...