126 matches found
CVE-2023-25203
CVE-2023-25203: Приложение, уязвимое к SSRF-атакам Server Side Request Forgery Описание CVE-2023-25203 описывает уязвимость в решении Therefore, которое подвержено атакам типа Server-Side Request Forgery SSRF из-за использования программного обеспечения Aspose для преобразования загружаемых файло...
CVE-2019-9766
CVE-2019-9766 Сделаю всё возможное О CVE Free MP3 CD Ripper Это конвертер между файлами .mp3 и другими типами файлов преобразование файла. Баг Согласно NVD мы можем обнаружить, что в vision 2.6 существует переполнение буфера на основе стека Stack-based Overflow в области буфера. Поэтому мы можем...
CVE-2026-54054 Transmute has full-read SSRF in URL file import (POST /api/files/url) — no host/IP validation, follows redirects
Transmute is a free, open-source, self-hosted file conversion and compression tool. Prior to version 1.3.0, Transmute's URL import endpoint, POST /api/files/url, is vulnerable to Server-Side Request Forgery SSRF. The HTTP downloader used by this endpoint fetches user-supplied URLs with redirects...
CVE-2026-44666
HRConvert2 is a self-hosted, drag-and-drop & nosql file conversion server & share tool. Prior to 3.3.8, the sanitizeString function in convertCore.php is missing backtick and tab \t from its strip list. User input then reaches shellexec, where the shell interprets these characters and commands...
EUVD-2026-30480
HRConvert2 is a self-hosted, drag-and-drop & nosql file conversion server & share tool. Prior to 3.3.8, the sanitizeString function in convertCore.php is missing backtick and tab \t from its strip list. User input then reaches shellexec, where the shell interprets these characters and commands...
CVE-2026-41355 OpenClaw < 2026.3.28 - Arbitrary Code Execution via Mirror Mode Sandbox File Conversion
OpenClaw before 2026.3.28 contains an arbitrary code execution vulnerability in mirror mode that converts untrusted sandbox files into workspace hooks. Attackers with mirror mode access can execute arbitrary code on the host during gateway startup by exploiting enabled workspace hooks...
Allocation of Resources Without Limits or Throttling
Overview Magick.NET-Q16-x64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...
Allocation of Resources Without Limits or Throttling
Overview Magick.NET-Q8-x64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...
The vulnerability of the file conversion tools between different formats, such as PS/IGES Parasolid Translator, arises from reading beyond the memory limit. This allows attackers to cause service failures or execute arbitrary code.
The vulnerability of the file conversion tools between different formats PS/IGES, Parasolid Translator is related to reading beyond the memory limit. Exploiting this vulnerability can allow an attacker to cause a service failure or execute arbitrary code...
PT-2025-46064
ImageMagick is free and open-source software used for editing and manipulating digital images. In versions prior to 7.1.2-0, infinite lines occur when writing during a specific XMP file conversion command. Version 7.1.2-0 fixes the issue...
EUVD-2012-2111
Malware in sbrugna...
EUVD-2018-9186
Malware in sbrugna...
EUVD-2018-9188
Malware in sbrugna...
EUVD-2018-9192
Malware in sbrugna...
EUVD-2020-14450
Malware in sbrugna...
EUVD-2017-6825
Malware in sbrugna...
EUVD-2024-1328
Malicious code in bioql PyPI...
EUVD-2025-21388
Malicious code in bioql PyPI...
CVE-2025-55151 Stirling-PDF SSRF vulnerability on /api/v1/convert/file/pdf
Stirling-PDF is a locally hosted web application that performs various operations on PDF files. Prior to version 1.1.0, the "convert file to pdf" functionality /api/v1/convert/file/pdf uses LibreOffice's unoconvert tool for conversion, and SSRF vulnerabilities exist during the conversion process...
