Security researchers published a proof-of-concept for CVE-2026-86950, an Apple CoreGraphics vulnerability in PDF processing that crashes iPhones and Macs via malicious embedded fonts. Apple patched the flaw on September 28 after Meta Product Security discovered it, noting potential use in sophisticated attacks. Researchers from Calif found new PDF font-checking code in WhatsApp updates, suggesting it as a possible delivery vector, though no complete exploit chain has been demonstrated.
Mixedbread built a scalable file ingestion system that processes arbitrary files of any size by splitting them into bounded slices handled sequentially on fixed-size workers, passing continuation state through a task queue to avoid memory overload. The system addresses challenges of large files, file size variance, and unsanitized inputs to enable users to upload and search any document type without preprocessing.
Large Print Maker is a free browser-based tool that converts text into accessible large-print PDFs following American Printing House for the Blind guidelines, offering font sizes of 18-28 point with options for paper size and background color. The tool processes text entirely in the user's browser without uploading data, and includes templates for common documents like grocery lists, bingo cards, and calendars.
Apple patched a CoreGraphics vulnerability (CVE-2026-86950) in iOS 26.7.1 that was exploited in the wild against targeted individuals. Researchers identified a unit conversion error in font rendering that allows out-of-bounds writes via malicious PDFs, with evidence suggesting exploitation through WhatsApp's attachment handling.
Papero is a lightweight PDF parser that extracts text, tables, formulas, and layout information without machine learning, running on CPU in browsers, Python, or as an API. It converts PDFs to Markdown, JSON, Word, Excel and other formats while preserving document structure and block positions for use in RAG, search, and LLM applications.
tika-ape bundles Apache Tika 4 with a portable Java runtime, enabling document extraction from Python and Node.js without requiring a system Java installation. The project provides CLI tools and language-native bindings for text extraction, metadata emission, and MIME type detection across multiple document formats.
A free PDF generator for creating professional equipment handover forms that document the transfer of company assets between employees. Users can customize fields, add equipment details and logos, then generate ready-to-sign documents with structured item tables. The tool helps both employer and employee maintain matching records of what was issued, when, and in what condition.
Apple patched CVE-2026-86950, a unit conversion error in CoreGraphics triggered by malicious PDFs with crafted fonts, causing out-of-bounds memory writes. The vulnerability was exploited in the wild targeting specific individuals and may have a zero-click WhatsApp attack vector. Meta researchers discovered the bug through patch analysis and found WhatsApp added strict PDF validation to detect malformed fonts.
Parse is an AI-powered document parsing service that extracts structured JSON from PDFs like receipts, invoices, and tax forms. Users define fields once and receive consistent JSON output across documents, with an async API design that processes files in the background.
A client-side web application offering 30+ tools for math, finance, PDF manipulation, image processing, and everyday utilities. All processing runs entirely in the browser with no backend, ensuring privacy and security for tasks like PDF editing, video trimming, file conversion, and password generation.
YuliusBox is a collection of 26 free browser-based tools for image compression, PDF merging, video-to-GIF conversion, Excel formula generation, screenshot editing, and audio transcription. All processing happens locally on the user's device using WebAssembly and on-device AI, with no data sent to servers, no accounts required, and full offline functionality.
Scripta Secure is a browser-based tool that analyzes and removes PDF metadata locally without uploading documents to servers. Users can inspect document information, sanitize metadata, compare results, and generate SHA-256 fingerprints directly in their browser.
Weesize is an in-browser tool suite built on WebAssembly that allows users to compress, convert, and sign PDFs and images without uploading files to servers. Users select files, set size targets, and download results instantly within their browser.
ParkourNote is a research workspace built solo in one month using Claude. It allows users to import papers, books, videos, and files into an Inbox where an AI suggests project organization, with features for deduplication and cross-project linking.