CVE-2024-4367 – Arbitrary JavaScript execution in PDF.js

IF you Enjoyed the video, don't forget to Like 👍, Subscribe, and turn on the Notification Bell 🔔 to stay updated!

🎭 WHO AM I ?

I'm Coffinxp, a hacker & Security Researcher and aspiring Cybersecurity Specialist and Bug Hunter. With a strong passion for technology and expertise in malware analysis, vulnerability assessment, and bug hunting, my goal is to safeguard digital assets and contribute to a more secure online community..

🍿 WATCH NEXT METHODOLOGY

🧑‍💻MY OTHER SOCIALS:

🌟Twitter - @coffinxp7

Thank you from the bottom of my heart for your incredible love and support! ❤️ You’re the reason this journey is so special! 🌟🙏

Disclaimer ⚠️
Hacking without permission is illegal.This channel is strictly educational for learning about cyber-security in the areas of ethical hacking and penetration testing & bug hunting.Our goal is to empower the community with knowledge to protect themselves against malicious activities.All content, including videos and tutorials, is created with prior permission from the relevant programs and owners.By engaging with our content, you acknowledge that you will use the information solely for educational and defensive purposes..

#cybersecurity #bugbounty #ethicalhacking #webapp #infosec

[sharebt]

i did not found how to generate poc pdf

[Coollinux-cb]

love ur work bro, btw to do this poc does target should have miscellaneous "PDF js"?, and is this xss via file upload?

[MikeMasanga]

Any commands to use to look for cves?
i only use nmap --script=vulners
What is the best workflow for this, any help?

[tchfalcon]

The king is back!! 😃

Keep it up boss 🙌

[gwevalentinechia]

please how do you know whether a particular website is having that pdf.js vulnerability

[jaredelfaz]

unfortunately this is self xss right ?

[نزاکتعلیچودھری]

Sir meri Linux men nuclei install to horai but work nai kr rai.chat GPT. Bing sb sy puch Lia Mgr nai bat bni..

[eggp]

how can i message you? My pdf xss work but not like this, your pdf payload is way more better. and i have a target and im trying to exploit it and i try your payload but there is no pop up

[Dhvl]

Nice bro I am waiting your paylod keep it up bro❤

[PEGASUSVIDA]

MY BROTHER, HOW DO I ARRANGE THE PDFS OF THIS SCRIPT, CAN YOU ADD IT FOR US?

[نزاکتعلیچودھری]

Error yhi araha nuclei template out dated hyn update kr Lia re install b Kia but bat ni bni

[gowtham]

Bro can you please upload the pdf exploits payloads on your new github account?

[animospro]

I have xss with pdf file but i cant see the cookies i see just alertt

[warrirs]

Can you make more detailed and longer videos like this.

[mohamadtaha]

How much does it take for you to find it?

[akashpokemonhunter]

Bro how to use tor in windows terminal

[xDays]

ANY BOUNTY MOSTLY BBP DOESN'T ACCEPT IT. I REPORTED HUNDREDS.

[walterwhite-durn]

hey brother can you provide payload pdf??

[MorrisDonovan]

Self-XSS. You won't get any bounty for this.