CVE-2025-67506 PipesHub Vulnerable to Path Traversal through Unauthenticated Arbitrary File Upload

PipesHub is a fully extensible workplace AI platform for enterprise search and workflow automation. Versions prior to 0.1.0-beta expose POST /api/v1/record/buffer/convert through missing authentication. The endpoint accepts a file upload and converts it to PDF via LibreOffice by uploading payload...

Command Injection

Overview Affected versions of this package are vulnerable to Command Injection due to insufficient sanitization of the inputpath for convertdoctopdf. An attacker can execute arbitrary commands by injecting shell metacharacters such as ;, &, |, etc. when specifying the doc file path. Remediation...

EUVD-2016-9234

Malware in sbrugna...

EUVD-2018-9439

Malware in sbrugna...

EUVD-2016-9236

Malware in sbrugna...

EUVD-2019-7601

Malware in sbrugna...

EUVD-2016-9237

Malware in sbrugna...

EUVD-2021-25010

Malware in sbrugna...

EUVD-2020-6318

Malware in sbrugna...

EUVD-2019-16320

Malware in sbrugna...

EUVD-2020-20282

Malware in sbrugna...

EUVD-2020-29696

Malware in sbrugna...

EUVD-2019-16289

Malware in sbrugna...

EUVD-2016-4753

Malware in sbrugna...

EUVD-2018-9438

Malware in sbrugna...

EUVD-2019-16323

Malware in sbrugna...

Exploit for Server-Side Request Forgery in Wkhtmltopdf

CVE-2022-35583 Pandoc SSRF POC A Server-Side Request Forgery...

CVE-2024-42358

PDFio is a simple C library for reading and writing PDF files. There is a denial of service DOS vulnerability in the TTF parser. Maliciously crafted TTF files can cause the program to utilize 100% of the Memory and enter an infinite loop. This can also lead to a heap-buffer-overflow vulnerability...

CVE-2020-14161

It is possible to inject HTML and/or JavaScript in the HTML to PDF conversion in Gotenberg through 6.2.1 via the /convert/html endpoint...

CVE-2019-6731

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit PhantomPDF. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the conversion ...