jsPDF-Bulk-Detector-CVE-2025-68428-

🚨 jsPDF批量检测工具 – CVE-2025-68428 🚨 用于识别与CVE-2025-68428相关的jsPDF使用情况的资产范围检测工具。 仅检测 — 不进行利用。 🚨 背景 流行 JavaScript PDF 生成库 jsPDF 中被披露了一个严重漏洞，编号为 CVE-2025-68428。 根据 BleepingComputer 的报道，该漏洞允许攻击者在 Node.js 环境下使用 jsPDF 且用户控制的输入到达文件加载函数时，读取任意的本地文件。 漏洞详情： 类型：本地文件包含（LFI）+ 路径遍历 严重性：9.2（严重） 受影响版本：jsPDF 4.0.0 范围：仅...

CVE-2025-68428_PoC

CVE-2025-68428PoC $ git clone https://github.com/12nio/CVE-2025-68428PoC/ && cd CVE-2025-68428PoC $ sudo docker build -t poc . $ sudo docker run --rm -p 8080:8080 --name vuln poc $ curl "http://127.0.0.1:8080/api/v1/generate-invoice?client=Dinko&branding=../secret" --output poc.pdf...

Security Bulletin: Multiple Vulnerabilities in watsonx.data

Summary Multiple vulnerabilities were addressed in watsonx.data 2.3.1 patch 6 version, which was present in different version from watson.data 2.3.1 to watsonx.dat 2.3.1 Patch 5 Vulnerability Details CVEID:CVE-2025-15558 DESCRIPTION: Docker CLI for Windows searches for plugin binaries in...

Exploit for CVE-2025-68428

🚨 jsPDF Bulk Detector – CVE-2025-68428 🚨 Asset-wide detecti...

CVE-2025-68428 vulnerabilities

Vulnerabilities for packages: opensearch-dashboards-fips, opensearch-dashboards...

CVE-2025-68428

jsPDF is a library to generate PDFs in JavaScript. Prior to version 4.0.0, user control of the first argument of the loadFile method in the node.js build allows local file inclusion/path traversal. If given the possibility to pass unsanitized paths to the loadFile method, a user can retrieve file...