CVE-2025-64512

This repository contains a functional exploit for CVE-2025-64512, leveraging a polyglot file that is both a valid PDF and a malicious pickle.gz to achieve remote code execution via deserialization in pdfminer.six. The PoC generates a payload that bypasses the need for an attacker to know the exact filepath of the malicious pickle file.

This PoC generates a polyglot file that is both a valid PDF and a malicious pickle.gz file to exploit CVE-2025-64512 in pdfminer.six, achieving remote code execution via deserialization.

This PoC exploits an insecure pickle deserialization vulnerability (CVE-2025-64512) in pdfminer.six < 20251107, where a crafted PDF's /Encoding field can trigger arbitrary code execution via a malicious pickle file loaded from an attacker-controlled path.

This repository provides a functional PoC for CVE-2025-64512, a deserialization vulnerability in pdfminer.six <= 20250506. The exploit leverages malicious PDFs with crafted /Encoding or /CMap references to trigger pickle deserialization, enabling arbitrary code execution via a reverse shell payload.

This PoC exploits a deserialization vulnerability (CVE-2025-64512) in pdfminer.six by crafting a malicious PDF that references a gzip-compressed Python pickle file. When processed, the pickle's __reduce__ method triggers arbitrary command execution, demonstrated via a reverse shell.

Technical writeup detailing the exploitation of CVE-2025-64512, a deserialization vulnerability in pdfminer.six allowing arbitrary pickle payload execution via path traversal in CMap files. The writeup also covers subsequent LPE via Vite path traversal and torch.load() deserialization.

This exploit targets CVE-2025-64512, a remote code execution vulnerability in pdfminer.six versions prior to 20251107. The exploit leverages insecure pickle deserialization via a malicious PDF that specifies an attacker-controlled .pickle.gz file path, enabling arbitrary command execution.

This repository provides a functional exploit for CVE-2025-64512, an insecure deserialization vulnerability in pdfminer.six via crafted PDFs. The exploit generates a malicious PDF and pickle.gz payload to achieve arbitrary code execution when the PDF is processed by vulnerable versions of pdfminer.six.

This PoC exploits a deserialization vulnerability in pdfminer.six by crafting a malicious PDF with a specially crafted /Encoding path pointing to a gzipped pickle file. When processed, the pickle file deserializes and executes arbitrary commands via os.system.

This repository provides a functional PoC for CVE-2025-64512, a deserialization vulnerability in pdfminer.six where a crafted PDF with a malicious `Encoding` path triggers arbitrary pickle deserialization, leading to remote code execution. The exploit generates a gzipped pickle file with a user-supplied command and a PDF that references its absolute path.