Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

CVE-2026-25961 PoC — sumatrapdf 安全漏洞

Source
https://github.com/mbanyamer/CVE-2026-25961-SumatraPDF-3.5.0---3.5.2-RCE
Associated Vulnerability
Title:sumatrapdf 安全漏洞 (CVE-2026-25961)
Description:sumatrapdf是sumatrapdfreader开源的一个PDF阅读器。 SumatraPDF 3.5.0版本至3.5.2版本存在安全漏洞，该漏洞源于更新机制禁用TLS主机名验证且不检查安装程序签名，可能导致任意代码执行。
Description
SumatraPDF versions 3.5.0 to 3.5.2 disable TLS hostname verification during update checks #   (using INTERNET_FLAG_IGNORE_CERT_CN_INVALID) and do not perform any signature or integrity #   validation on the downloaded installer.
File Snapshot

 None
Shenlong Bot has cached this for you
Remarks
    1. It is advised to access via the original source first.
    2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).
    3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.