APTRS

APTRS APTRS Automated Penetration Testing Reporting System is a Python and Django-based automated reporting tool designed for penetration testers and security organizations. This tool streamlines the report generation process by enabling users to create PDF and Excel reports directly, eliminating...

CVE-2022-43571

CVE-2022-43571 CVE-2022-43571 Splunk RCE – my personal journey to color your life Only because I got the statement from my IT, there are no reasons for a SPLUNK update, I analyzed this vulnerability CVE-2022-43571 to prove the opposite for a remote code execution. Here is my exploit. If I had fou...

CVE-2026-126464

The OpenEMR software (versions before 8.5.0 ) contains a Server-Side Request Forgery (SSRF) vulnerability within the PatientPortalPDFDocumentCreator::createPdfObject() function. Authenticated patients can trigger the server to issue HTTP GET requests by submitting malicious img src, inline style ...

CVE-2026-126464 OpenEMR before 8.5.0 SSRF via Patient Portal PDF Generation

OpenEMR before 8.5.0 contains a server-side request forgery vulnerability in PatientPortalPDFDocumentCreator::createPdfObject that allows authenticated patients to make the server issue HTTP GET requests. Attackers can submit img src, inline style url, or reinserted unpurified style blocks via th...

CVE-2026-12574 Server-Side HTML Injection

Zoho Corporation ManageEngine DDI Central versions 6200 and below are vulnerable to Server-side HTML/JavaScript injection in analytics PDF generation leading to local file disclosure...

EUVD-2026-120885

Zoho Corporation ManageEngine DDI Central versions 6200 and below are vulnerable to Server-side HTML/JavaScript injection in analytics PDF generation leading to local file disclosure...

CVE-2026-12574

Zoho Corporation ManageEngine DDI Central versions 6200 and below are vulnerable to a Server-side HTML/JavaScript injection flaw within the analytics PDF generation feature. This vulnerability is caused by the improper neutralization of input during web page generation (CWE-79), which can lead to...

CVE-2026-12574: Zohocorp DDI Central: Zoho Corporation ManageEngine DDI Central versions 6200 and below are vulnerable to Server-side HTML/JavaScript…

Zoho Corporation ManageEngine DDI Central versions 6200 and below are vulnerable to Server-side HTML/JavaScript injection in analytics PDF generation leading to local file disclosure...

py-pdf fpdf2 resource management error vulnerability

In versions 2.5.0 through 2.8.8 of py-pdf fpdf2, there is a resource management error vulnerability. This vulnerability arises because SVGObject.buildxref passes nested SVG references to GraphicsContext.additem during processing of FPDF.image. By default, clone=True enables deep copying of entire...

PT-2026-114212

Name of the Vulnerable Software and Affected Versions InvoiceShelf versions prior to 2.4.0 Description In PDFConfigurationRequest.php, the gotenberg host setting is only validated as a syntactically valid URL. Subsequently, the loadView function in GotenbergPDFDriver sends a multipart HTTP reques...

CVE-2026-109603

Frappe Framework 15.x before 15.107.3 and 16.x before 16.17.0 relies on a vulnerable pdfkit library CVE-2025-26240 for PDF generation, enabling server-side request forgery and local file inclusion. Authenticated attackers can supply crafted content to PDF rendering to make the server fetch intern...

CVE-2026-109603 Frappe Framework before 16.17.0 Authenticated SSRF and LFI via pdfkit

Frappe Framework 15.x before 15.107.3 and 16.x before 16.17.0 relies on a vulnerable pdfkit library CVE-2025-26240 for PDF generation, enabling server-side request forgery and local file inclusion. Authenticated attackers can supply crafted content to PDF rendering to make the server fetch intern...

CVE-2026-109603 Frappe Framework before 16.17.0 Authenticated SSRF and LFI via pdfkit

Frappe Framework 15.x before 15.107.3 and 16.x before 16.17.0 relies on a vulnerable pdfkit library CVE-2025-26240 for PDF generation, enabling server-side request forgery and local file inclusion. Authenticated attackers can supply crafted content to PDF rendering to make the server fetch intern...

CVE-2026-109603 Frappe Framework before 16.17.0 Authenticated SSRF and LFI via pdfkit

Frappe Framework 15.x before 15.107.3 and 16.x before 16.17.0 relies on a vulnerable pdfkit library CVE-2025-26240 for PDF generation, enabling server-side request forgery and local file inclusion. Authenticated attackers can supply crafted content to PDF rendering to make the server fetch intern...

CVE-2026-109603

Frappe Framework 15.x before 15.107.3 and 16.x before 16.17.0 relies on a vulnerable pdfkit library CVE-2025-26240 for PDF generation, enabling server-side request forgery and local file inclusion. Authenticated attackers can supply crafted content to PDF rendering to make the server fetch intern...

CVE-2026-109603: Server-Side Request Forgery (SSRF)

Frappe Framework 15.x before 15.107.3 and 16.x before 16.17.0 relies on a vulnerable pdfkit library CVE-2025-26240 for PDF generation, enabling server-side request forgery and local file inclusion. Authenticated attackers can supply crafted content to PDF rendering to make the server fetch intern...

CVE-2026-55073

WeasyPrint prior to 70.0 contains a url_fetcher bypass in two write_pdf() code paths. The xmp_metadata parameter in weasyprint/pdf/__init__.py calls select_source() without passing the document's fetcher, enabling arbitrary local file read with contents embedded verbatim in the output PDF. The st...

EUVD-2026-77638

WeasyPrint helps web developers to create PDF documents. Prior to 70.0, server-side applications that configure a restrictive urlfetcher and pass attacker-influenced values to HTML.writepdf can have the restriction bypassed through the xmpmetadata or stylesheets options. In weasyprint/pdf/init.py...

Server-side Request Forgery (SSRF)

Overview snipe/snipe-it is an asset management system built on Laravel. Affected versions of this package are vulnerable to Server-side Request Forgery SSRF via the employeenum field in the acceptance PDF generation process. An attacker can cause the server to make arbitrary HTTPS requests to...

Entity PDF - Moderately critical - Access bypass - SA-CONTRIB-2026-114

The Entity PDF module can create a PDF from any entity based on any View mode. This module does not check entity view access when fetching a PDF route. This could result in a user accessing a PDF of an entity that they should not be able to view...