The vulnerability of the software for working with PDF files, UPDF for Windows operating systems, allows a perpetrator to execute arbitrary code.

The vulnerability of UPDF software for working with PDF files on Windows operating systems is related to an uncontrolled element in the search process. Exploiting this vulnerability can allow a perpetrator to execute arbitrary code...

The vulnerability of the software for working with PDF files, UPDF for Windows operating systems, allows a perpetrator to execute arbitrary code.

The vulnerability of UPDF software for working with PDF files on Windows operating systems is related to an uncontrolled element in the search process. Exploiting this vulnerability can allow a perpetrator to execute arbitrary code...

PT-2026-1342

Name of the Vulnerable Software and Affected Versions jsPDF versions prior to 4.0.0 Description jsPDF, a JavaScript library for generating PDFs, has a critical flaw in its Node.js builds. Prior to version 4.0.0, the loadFile, addImage, html, and addFont methods are susceptible to local file...

Transparent Tribe Launches New RAT Attacks Against Indian Government and Academia

The threat actor known as Transparent Tribe has been attributed to a fresh set of attacks targeting Indian governmental, academic, and strategic entities with a remote access trojan RAT that grants them persistent control over compromised hosts. "The campaign employs deceptive delivery techniques...

CVE-2025-62138

Missing Authorization vulnerability in cedcommerce WP Advanced PDF wp-advanced-pdf allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Advanced PDF: from n/a through = 1.1.7...

PT-2026-20519

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 145.0.7632.109 Description A heap buffer overflow exists in PDFium, a component of Google Chrome. This issue allows a remote attacker to cause an out-of-bounds memory write by using a specially crafted PDF file...

PT-2026-4845

Name of the Vulnerable Software and Affected Versions pypdf versions prior to 6.6.2 Description A flaw exists in the pypdf library that allows attackers to trigger an infinite loop by creating a PDF file with cyclic outline references. This requires accessing the outlines or bookmarks within the...

PT-2026-2245

Name of the Vulnerable Software and Affected Versions pypdf versions prior to 6.6.0 Description pypdf is a pure-python PDF library. Versions prior to 6.6.0 are susceptible to long runtimes when processing malformed startxref entries within PDF files. An attacker can create a specially crafted PDF...

PT-2026-26191

Name of the Vulnerable Software and Affected Versions pypdf versions prior to 6.9.1 Description pypdf is a free and open-source pure-python PDF library. Versions prior to 6.9.1 allow an attacker to create a malicious PDF that can cause prolonged runtimes and/or significant memory usage...

CVE-2025-62138

Missing Authorization vulnerability in cedcommerce WP Advanced PDF wp-advanced-pdf allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Advanced PDF: from n/a through = 1.1.7...

CVE-2025-62138 WordPress WP Advanced PDF plugin <= 1.1.7 - Other vulnerability Type vulnerability

Missing Authorization vulnerability in cedcommerce WP Advanced PDF wp-advanced-pdf allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Advanced PDF: from n/a through = 1.1.7...

CVE-2025-62138 WordPress WP Advanced PDF plugin <= 1.1.7 - Other vulnerability Type vulnerability

Missing Authorization vulnerability in CedCommerce WP Advanced PDF allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Advanced PDF: from n/a through 1.1.7...

CVE-2025-62138

CVE-2025-62138 refers to a Missing Authorization vulnerability in the WordPress plugin WP Advanced PDF (CedCommerce). Affected versions are listed as

WordPress WP Advanced PDF plugin <= 1.1.7 - Other vulnerability Type vulnerability

Other vulnerability Type vulnerability discovered by NumeX in WordPress Plugin WP Advanced PDF versions = 1.1.7...

CVE-2025-68993

Missing Authorization vulnerability in XforWooCommerce Share, Print and PDF Products for WooCommerce share-print-pdf-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Share, Print and PDF Products for WooCommerce: from n/a through = 3.1.2...

WordPress plugin WP Advanced PDF 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to set up a personal blog site on a PHP and MySQL based server.WordPress plugin is an application plugin. A security...

Unity Linux 20.1070e Security Update: ghostscript (UTSA-2025-993330)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-993330 advisory. Artifex Ghostscript through 10.05.1 has a stack-based buffer overflow in pdfwritecmap in devices/vector/gdevpdtw.c. Tenable has extracted the preceding description...

CVE-2025-62138: Missing Authorization

Missing Authorization vulnerability in cedcommerce WP Advanced PDF wp-advanced-pdf allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Advanced PDF: from n/a through = 1.1.7...

PT-2025-54338

Name of the Vulnerable Software and Affected Versions CedCommerce WP Advanced PDF versions through 1.1.7 Description An authorization issue exists in CedCommerce WP Advanced PDF, allowing exploitation due to incorrectly configured access control security levels. Recommendations Update CedCommerce...

Unity Linux 20.1070e Security Update: poppler (UTSA-2025-993335)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-993335 advisory. An issue was discovered in freedesktop poppler version 20.12.1, allows remote attackers to cause a denial of service DoS via crafted .pdf file to...