EUVD-2025-7446

Malicious code in bioql PyPI...

CVE-2024-31601

An issue in Beijing Panabit Network Software Co., Ltd Panalog big data analysis platform v. 20240323 and before allows attackers to execute arbitrary code via the exportpdf.php component...

CVE-2025-1946 hzmanyun Education and Training System exportPDF command injection

A vulnerability was found in hzmanyun Education and Training System 2.1. It has been rated as critical. Affected by this issue is the function exportPDF of the file /user/exportPDF. The manipulation of the argument id leads to command injection. The attack may be launched remotely. The exploit ha...

CVE-2025-1946

CVE-2025-1946 affects hzmanyun Education and Training System 2.1. The affected component is the exportPDF function in /user/exportPDF, where manipulating the id argument leads to command injection. The vulnerability may be exploited remotely and, per multiple sources, the exploit has been disclos...

CVE-2025-1946: Improper Neutralization of Special Elements used in a Command

A vulnerability was found in hzmanyun Education and Training System 2.1. It has been rated as critical. Affected by this issue is the function exportPDF of the file /user/exportPDF. The manipulation of the argument id leads to command injection. The attack may be launched remotely. The exploit ha...

PT-2024-24148 · Beijing Panabit Network Software Co. · Analog

Name of the Vulnerable Software and Affected Versions: Beijing Panabit Network Software Co., Ltd Panalog big data analysis platform versions 20240323 and before Description: An issue in the Panalog big data analysis platform allows attackers to execute arbitrary code via the exportpdf.php...

VMware Aria Operations for Networks exportPDF Code Injection Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of VMware Aria Operations for Networks. Authentication is required to exploit this vulnerability. The specific flaw exists within the exportPDF method. The issue results from the lack of proper...

CVE-2019-9757

An issue was discovered in LabKey Server 19.1.0. Sending an SVG containing an XXE payload to the endpoint visualization-exportImage.view or visualization-exportPDF.view allows local files to be read...

CVE-2019-11019: Missing Authentication for Critical Function

Lack of authentication in case-exporting components in DDRT Dashcom Live through 2019-05-08 allows anyone to remotely access all claim details by visiting easily guessable exportpdf/allclaimdetail.php?claimid= URLs...