Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
cve-2014-0521 — JavaScript-based exploit for Adobe Reader CVE-2014-0521 with proof-of-concept PDFs demonstrating file reading and data exfiltration via WebDAV. | Kitploit
Tools/GitHubGitHub/molnarg/cve-2014-0521
Vulnerability AnalysisExploitationWeb Application ExploitationPapers & ResearchLearning & EducationPayload Development
GitHubmolnarg/cve-2014-0521

cve-2014-0521

JavaScript-based exploit for Adobe Reader CVE-2014-0521 with proof-of-concept PDFs demonstrating file reading and data exfiltration via WebDAV.

View Repository
1211212 years agoNot yet reviewed

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share

CVE-2014-0521 Adobe Reader vulnerability

This JavaScript based Adobe Reader vulnerability affects all versions of Adobe Reader on all platforms prior to version 11.0.07 (released on May 13, 2014). The bug was found by Gábor Molnár and was reported on March 10, 2014.

Advisories:

  • CVE-2014-0521
  • Adobe Security Bulletin APSB14-15

Presentations:

  • Camp++ 2014 (English): video (soon), slides: html, pdf
  • Ethical Hacking Conference 2014 Hungary (Hungarian): video, slides

Proof of Concept PDFs:

  • cve-2014-0521-poc-1.pdf: Reading the C:\notes\passwords file and echoing the contents in an alert window.
  • cve-2014-0521-poc-2.pdf: Reading the C:\notes\passwords file and sending the contents to a WebDAV server running on 192.168.56.1:9999 . This uses an undocumented API and is less reliable. For testing I recommend using PyWebDAV, a lightweight WebDAV server.
Download Tool