CVE-2025-68428_PoC

CVE-2025-68428PoC $ git clone https://github.com/12nio/CVE-2025-68428PoC/ && cd CVE-2025-68428PoC $ sudo docker build -t poc . $ sudo docker run --rm -p 8080:8080 --name vuln poc $ curl "http://127.0.0.1:8080/api/v1/generate-invoice?client=Dinko&branding=../secret" --output poc.pdf...

jsPDF-Bulk-Detector-CVE-2025-68428-

🚨 jsPDF Bulk Detector – CVE-2025-68428 🚨 여러 자산에서 CVE-2025-68428과 관련된 jsPDF 사용 여부를 식별하는 탐지 도구입니다. 탐지만 수행하며, 악용은 포함하지 않습니다. 🚨 배경 인기 있는 JavaScript PDF 생성 라이브러리 jsPDF에서 CVE-2025-68428로 추적되는 심각한 취약점이 공개되었습니다. BleepingComputer의 보고에 따르면, 이 결함은 Node.js 환경에서 jsPDF가 사용되고 사용자 제어 입력이 파일 로딩 함수에 도달할 때 공격자가 임의의...

Security Bulletin: Multiple Vulnerabilities in watsonx.data

Summary Multiple vulnerabilities were addressed in watsonx.data 2.3.1 patch 6 version, which was present in different version from watson.data 2.3.1 to watsonx.dat 2.3.1 Patch 5 Vulnerability Details CVEID:CVE-2025-15558 DESCRIPTION: Docker CLI for Windows searches for plugin binaries in...

Exploit for CVE-2025-68428

🚨 jsPDF Bulk Detector – CVE-2025-68428 🚨 Asset-wide detecti...

CVE-2025-68428 vulnerabilities

Vulnerabilities for packages: opensearch-dashboards, opensearch-dashboards-fips...

CVE-2025-68428

jsPDF is a library to generate PDFs in JavaScript. Prior to version 4.0.0, user control of the first argument of the loadFile method in the node.js build allows local file inclusion/path traversal. If given the possibility to pass unsanitized paths to the loadFile method, a user can retrieve file...