126 matches found
CVE-2023-25203
CVE-2023-25203: Application vulnerable to SSRF Server Side Request Forgery attacks Description CVE-2023-25203 identifies a vulnerability within the Therefore solution, which is susceptible to Server-Side Request Forgery SSRF attacks due to its use of Aspose software for converting uploaded files...
CVE-2019-9766
CVE-2019-9766 Do my best About CVE Free MP3 CD Ripper It is a switcher between .mp3 files and other filetype converting a file. Bug According to the NVD we can find that, in the vision 2.6 there is a Stack-based Overflow in the Buffer Area. So we can create a Poc for it. Filetype changed to .mp3...
CVE-2026-54054 Transmute has full-read SSRF in URL file import (POST /api/files/url) — no host/IP validation, follows redirects
Transmute is a free, open-source, self-hosted file conversion and compression tool. Prior to version 1.3.0, Transmute's URL import endpoint, POST /api/files/url, is vulnerable to Server-Side Request Forgery SSRF. The HTTP downloader used by this endpoint fetches user-supplied URLs with redirects...
CVE-2026-44666
HRConvert2 is a self-hosted, drag-and-drop & nosql file conversion server & share tool. Prior to 3.3.8, the sanitizeString function in convertCore.php is missing backtick and tab \t from its strip list. User input then reaches shellexec, where the shell interprets these characters and commands...
EUVD-2026-30480
HRConvert2 is a self-hosted, drag-and-drop & nosql file conversion server & share tool. Prior to 3.3.8, the sanitizeString function in convertCore.php is missing backtick and tab \t from its strip list. User input then reaches shellexec, where the shell interprets these characters and commands...
CVE-2026-41355 OpenClaw < 2026.3.28 - Arbitrary Code Execution via Mirror Mode Sandbox File Conversion
OpenClaw before 2026.3.28 contains an arbitrary code execution vulnerability in mirror mode that converts untrusted sandbox files into workspace hooks. Attackers with mirror mode access can execute arbitrary code on the host during gateway startup by exploiting enabled workspace hooks...
Allocation of Resources Without Limits or Throttling
Overview Magick.NET-Q16-x64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...
Allocation of Resources Without Limits or Throttling
Overview Magick.NET-Q8-x64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...
The vulnerability of the file conversion tools between different formats, such as PS/IGES Parasolid Translator, arises from reading beyond the memory limit. This allows attackers to cause service failures or execute arbitrary code.
The vulnerability of the file conversion tools between different formats PS/IGES, Parasolid Translator is related to reading beyond the memory limit. Exploiting this vulnerability can allow an attacker to cause a service failure or execute arbitrary code...
PT-2025-46064
ImageMagick is free and open-source software used for editing and manipulating digital images. In versions prior to 7.1.2-0, infinite lines occur when writing during a specific XMP file conversion command. Version 7.1.2-0 fixes the issue...
EUVD-2018-9186
Malware in sbrugna...
EUVD-2018-9192
Malware in sbrugna...
EUVD-2012-2111
Malware in sbrugna...
EUVD-2020-14450
Malware in sbrugna...
EUVD-2018-9188
Malware in sbrugna...
EUVD-2017-6825
Malware in sbrugna...
EUVD-2024-1328
Malicious code in bioql PyPI...
EUVD-2025-21388
Malicious code in bioql PyPI...
CVE-2025-55151 Stirling-PDF SSRF vulnerability on /api/v1/convert/file/pdf
Stirling-PDF is a locally hosted web application that performs various operations on PDF files. Prior to version 1.1.0, the "convert file to pdf" functionality /api/v1/convert/file/pdf uses LibreOffice's unoconvert tool for conversion, and SSRF vulnerabilities exist during the conversion process...
