The vulnerability of the command-line utility for converting HTML files into PDF format, wkhtmltopdf, arises from an incorrect limitation on the path to the restricted directory. This allows a malicious individual to disclose confidential information.

The vulnerability of the command-line utility for converting HTML files into PDF format, wkhtmltopdf, is related to an incorrect limitation on the path to the restricted directory. Exploiting this vulnerability could allow a malicious actor to disclose confidential information remotely...

Ubuntu: Security Advisory (USN-6232-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-6232-1 wkhtmltopdf vulnerability

It was discovered that wkhtmltopdf was not properly enforcing the same-origin policy when processing certain HTML files. If a user or automated system using wkhtmltopdf were tricked into processing a specially crafted HTML file, an attacker could possibly use this issue to expose sensitive...

USN-6232-1: wkhtmltopdf vulnerability

It was discovered that wkhtmltopdf was not properly enforcing the same-origin policy when processing certain HTML files. If a user or automated system using wkhtmltopdf were tricked into processing a specially crafted HTML file, an attacker could possibly use this issue to expose sensitive...

Ubuntu 16.04 ESM / 18.04 ESM / 20.04 LTS : wkhtmltopdf vulnerability (USN-6232-1)

The remote Ubuntu 16.04 ESM / 18.04 ESM / 20.04 LTS host has a package installed that is affected by a vulnerability as referenced in the USN-6232-1 advisory. It was discovered that wkhtmltopdf was not properly enforcing the same-origin policy when processing certain HTML files. If a user or...

QuadraInspect - Android Framework That Integrates AndroPass, APKUtil, And MobFS, Providing A Powerful Tool For Analyzing The Security Of Android Applications

The security of mobile devices has become a critical concern due to the increasing amount of sensitive data being stored on them. With the rise of Android OS as the most popular mobile platform, the need for effective tools to assess its security has also increased. In response to this need, a ne...

wkhtmltopdf 0.12.6 - Server Side Request Forgery Vulnerability

Exploit Title: wkhtmltopdf 0.12.6 - Server Side Request Forgery Date: 20/8/2022 Exploit Author: Momen Eldawakhly Cyber Guy Vendor Homepage: https://wkhtmltopdf.org Software Link: https://wkhtmltopdf.org/downloads.html Version: 0.12.6 Tested on: Windows ASP.NET POST /PDF/FromHTML HTTP/1.1 Host:...

SUSE CVE-2020-21365

Directory traversal vulnerability in wkhtmltopdf through 0.12.5 allows remote attackers to read local files and disclose sensitive information via a crafted html file running with the default configurations...

[SECURITY] Fedora 37 Update: rubygem-pdfkit-0.8.7.2-1.fc37

Create PDFs using plain old HTML+CSS. Uses wkhtmltopdf on the back-end which renders HTML using Webkit...

Mageia: Security Advisory (MGASA-2022-0407)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

MGASA-2022-0407 Updated wkhtmltopdf packages fix security vulnerability

Directory traversal vulnerability in wkhtmltopdf through 0.12.5 allows remote attackers to read local files and disclose sensitive information via a crafted html file running with the default configurations. CVE-2020-21365...

Updated wkhtmltopdf packages fix security vulnerability

Directory traversal vulnerability in wkhtmltopdf through 0.12.5 allows remote attackers to read local files and disclose sensitive information via a crafted html file running with the default configurations. CVE-2020-21365...

Debian dla-3158 : wkhtmltopdf - security update

The remote Debian 10 host has a package installed that is affected by a vulnerability as referenced in the dla-3158 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-3158-1 [email protected] https://www.debian.org/lts/security/...

Debian: Security Advisory (DLA-3158-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DLA 3158-1] wkhtmltopdf security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3158-1 [email protected] https://www.debian.org/lts/security/ Emilio Pozuelo Monfort October 24, 2022 https://wiki.debian.org/LTS -...

[SECURITY] Fedora 36 Update: rubygem-pdfkit-0.8.7-1.fc36

Create PDFs using plain old HTML+CSS. Uses wkhtmltopdf on the back-end which renders HTML using Webkit...

[SECURITY] Fedora 35 Update: rubygem-pdfkit-0.8.7-1.fc35

Create PDFs using plain old HTML+CSS. Uses wkhtmltopdf on the back-end which renders HTML using Webkit...

CVE-2022-35583

wkhtmlTOpdf 0.12.6 is vulnerable to SSRF which allows an attacker to get initial access into the target's system by injecting iframe tag with initial asset IP address on it's source. This allows the attacker to takeover the whole infrastructure by accessing their internal assets...

CVE-2022-35583

wkhtmlTOpdf 0.12.6 is vulnerable to SSRF which allows an attacker to get initial access into the target's system by injecting iframe tag with initial asset IP address on it's source. This allows the attacker to takeover the whole infrastructure by accessing their internal assets...

DEBIAN-CVE-2022-35583

wkhtmlTOpdf 0.12.6 is vulnerable to SSRF which allows an attacker to get initial access into the target's system by injecting iframe tag with initial asset IP address on it's source. This allows the attacker to takeover the whole infrastructure by accessing their internal assets...