85 matches found
CVE-2026-36576
An OS command injection vulnerability in the app.py component of openlabs docker-wkhtmltopdf-aas up to commit 9f50579 allows attackers to execute arbitrary commands via a crafted POST request...
CVE-2026-36576
An OS command injection vulnerability in the app.py component of openlabs docker-wkhtmltopdf-aas up to commit 9f50579 allows attackers to execute arbitrary commands via a crafted POST request...
CVE-2026-36576
An OS command injection vulnerability in the app.py component of openlabs docker-wkhtmltopdf-aas up to commit 9f50579 allows attackers to execute arbitrary commands via a crafted POST request...
CVE-2026-36576
The openlabs docker-wkhtmltopdf-aas tool, an open-source service for converting HTML to PDF, contains an OS command injection vulnerability in its app.py component. This flaw exists in versions up to commit 9f50579 and allows an attacker to execute arbitrary commands by sending a crafted POST req...
CVE-2026-36576
An OS command injection vulnerability in the app.py component of openlabs docker-wkhtmltopdf-aas up to commit 9f50579 allows attackers to execute arbitrary commands via a crafted POST request...
Openlabs docker-wkhtmltopdf-aas 命令注入漏洞
Docker-WKHTMLTOPDF-AAS is an open-source tool developed by Openlabs that converts HTML into PDF via a web-based service. Previous versions of Docker-WKHTMLTOPDF-AAS, including version 9f50579, had security vulnerabilities. These vulnerabilities stemmed from the app.py component, which allowed for...
EUVD-2026-34099
An OS command injection vulnerability in the app.py component of openlabs docker-wkhtmltopdf-aas up to commit 9f50579 allows attackers to execute arbitrary commands via a crafted POST request...
CVE-2026-36576
An OS command injection vulnerability in the app.py component of openlabs docker-wkhtmltopdf-aas up to commit 9f50579 allows attackers to execute arbitrary commands via a crafted POST request...
PT-2026-45953
An OS command injection vulnerability in the app.py component of openlabs docker-wkhtmltopdf-aas up to commit 9f50579 allows attackers to execute arbitrary commands via a crafted POST request...
PT-2026-42646
Impact On POSIX, escapeshellarg‘/usr/bin/wkhtmltopdf’ returns the literal string ‘/usr/bin/wkhtmltopdf’ with the single-quote characters included. is executable then looks for a file whose actual name contains those quote characters, which essentially never exists. The safe branch is dead code an...
Exploit for CVE-2022-25765
Command Injection quando processa URLs não sanitizadas. Isso aco...
EUVD-2020-14137
Malware in sbrugna...
EUVD-2018-6747
Malware in sbrugna...
EUVD-2024-51498
Malicious code in bioql PyPI...
CVE-2024-13285
Vulnerability in Drupal wkhtmltopdf.This issue affects wkhtmltopdf:...
CVE-2024-13285
Vulnerability in Drupal wkhtmltopdf.This issue affects wkhtmltopdf:...
CVE-2024-13285
A security vulnerability exists in the Drupal wkhtmltopdf module, affecting all versions (** ox* ox**). The project has been marked as unsupported by the Drupal security team due to known security issues that have not been addressed by the maintainer. Technical details regarding the specific root...
CVE-2024-13285 wkhtmltopdf - Highly critical - Unsupported - SA-CONTRIB-2024-049
Vulnerability in Drupal wkhtmltopdf.This issue affects wkhtmltopdf:...
