Bedside-Hack-The-Box-Writeup

Bedside - Hack The Box Writeup !Hack The Boxhttps://img.sh...

Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS : pdfminer vulnerabilities (USN-8837-1)

The remote Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-8837-1 advisory. It was discovered that pdfminer did not safely parse specially crafted PDF files. An attacker could possibly use thes...

USN-8837-1: pdfminer vulnerabilities

It was discovered that pdfminer did not safely parse specially crafted PDF files. An attacker could possibly use these issues to execute arbitrary code. CVE-2025-64512, CVE-2025-70559...

USN-8837-1 pdfminer vulnerabilities

It was discovered that pdfminer did not safely parse specially crafted PDF files. An attacker could possibly use these issues to execute arbitrary code. CVE-2025-64512, CVE-2025-70559...

CVE-2026-54071

BabelDOC is a document translation tool. Prior to 0.6.3, BabelDOC's vendored PDF parser in babeldoc/pdfminer/cmapdb.py deserializes untrusted pickle data when CMapDB.loaddata loads CMap files. PDF-controlled Encoding or CMapName values and embedded PostScript usecmap operators can reach this sink...

CVE-2026-54071: Deserialization of Untrusted Data

BabelDOC is a document translation tool. Prior to 0.6.3, BabelDOC's vendored PDF parser in babeldoc/pdfminer/cmapdb.py deserializes untrusted pickle data when CMapDB.loaddata loads CMap files. PDF-controlled Encoding or CMapName values and embedded PostScript usecmap operators can reach this sink...

Exploit for Deserialization of Untrusted Data in Pdfminer Pdfminer.Six

CVE-2025-64512 - pdfminer.six Remote Code Execution RCE !...

Exploit for Deserialization of Untrusted Data in Pdfminer Pdfminer.Six

No d...

Exploit for Deserialization of Untrusted Data in Pdfminer Pdfminer.Six

CVE-2025-64...

Exploit for Deserialization of Untrusted Data in Pdfminer Pdfminer.Six

CVE-2025-64512 - pdfminer.six Remote Code Execution RCE !...

Exploit for Deserialization of Untrusted Data in Pdfminer Pdfminer.Six

CVE-2025-64512 — pdfminer.six Insecure Deserialization Pickle...

Exploit for Deserialization of Untrusted Data in Pdfminer Pdfminer.Six

No d...

BabelDOC: Arbitrary Code Execution via CMap Pickle Deserialization in babeldoc/pdfminer/cmapdb.py

Arbitrary Code Execution via CMap Pickle Deserialization in babeldoc/pdfminer/cmapdb.py SummaryBabelDOC's vendored PDF parser babeldoc/pdfminer/cmapdb.py deserializes untrusted pickle data when loading CMap files. The loaddata method strips only NUL bytes from a PDF-controlled CMap name, then...

beancount-importer (>=0.2.0, <=0.3.0), bib-dedupe (>=0.1.0, <=0.3.0) +28 more potentially affected by CVE-2025-64512 via pdfminer-six (20220524.0.0)

pdfminer-six PYPI version 20220524.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on pdfminer-six and may be impacted: - beancount-importer =0.2.0, =0.1.0, =0.5.5, =0.9.3, =0.0.5, =0.1.0, =0.0.1, =0.1.5, =3.5.0, =0.3.0, =0.4.8 and more Source cves:...

agentix-agent-sdk (0.1.0), agixt (>=1.7.0, <=1.7.11) +60 more potentially affected by CVE-2025-64512 via pdfminer-six (20231228.0.0)

pdfminer-six PYPI version 20231228.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on pdfminer-six and may be impacted: - agentix-agent-sdk 0.1.0 - agixt =1.7.0, =1.0.0, =0.1.1, =5.2.161, =1.0.0, =0.1.0, =2.2.5rc1, =1.1.6, =0.1.0, =0.1.0, =2024.5.10,...

ocrmypdf (10.3.1), seleniumbase (>=1.43.0, <=1.43.1) potentially affected by CVE-2025-64512 via pdfminer-six (20200720.0.0)

pdfminer-six PYPI version 20200720.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on pdfminer-six and may be impacted: - ocrmypdf 10.3.1 - seleniumbase =1.43.0, =1.43.1 Source cves: CVE-2025-64512 Source advisory: OSV:PYSEC-2026-1762...

deckz (2.6.0), ocrmypdf (>=9.7.2, <=9.8.0) +4 more potentially affected by CVE-2025-64512 via pdfminer-six (20200402.0.0)

pdfminer-six PYPI version 20200402.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on pdfminer-six and may be impacted: - deckz 2.6.0 - ocrmypdf =9.7.2, =0.1.0, =1.0.0, =1.36.10, =1.38.1 Source cves: CVE-2025-64512 Source advisory: OSV:PYSEC-2026-1762...

ocrmypdf (>=9.6.0, <=9.7.1), screenplay-pdf-to-json (>=0.1.0, <=0.3.4) +2 more potentially affected by CVE-2025-64512 via pdfminer-six (20200124.0.0)

pdfminer-six PYPI version 20200124.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on pdfminer-six and may be impacted: - ocrmypdf =9.6.0, =0.1.0, =1.34.27, =1.36.9 Source cves: CVE-2025-64512 Source advisory: OSV:PYSEC-2026-1762...

achoz (>=0.3.0, <=0.3.42), agentic-framework (>=0.3.0, <=0.3.11) +21 more potentially affected by CVE-2025-64512 via pdfminer-six (20191110.0.0)

pdfminer-six PYPI version 20191110.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on pdfminer-six and may be impacted: - achoz =0.3.0, =0.3.0, =0.2.0, =0.0.1, =0.0.2, =0.4.0, =1.0.0, =0.1.0, =9.1.1, =6.0.0, =1.8.0, =0.1.0, =0.1.6 and more Source cves...

bormeparser (>=0.1.1, <=0.1.3) potentially affected by CVE-2025-64512 via pdfminer-six (20140915.0.0)

pdfminer-six PYPI version 20140915.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on pdfminer-six and may be impacted: - bormeparser =0.1.1, =0.1.3 Source cves: CVE-2025-64512 Source advisory: OSV:PYSEC-2026-1762...