PT-2025-46803

Name of the Vulnerable Software and Affected Versions WooCommerce PDF Invoice Builder versions through 1.2.150 Description The software contains a flaw related to incorrectly configured access control security levels, potentially allowing unauthorized access. The issue impacts the WooCommerce PDF...

CVE-2025-8397: Improper Neutralization of Input During Web Page Generation

The Save as PDF Button plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's restpackpdfbutton shortcode in all versions up to, and including, 1.9.2 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...

Linux Distros Unpatched Vulnerability : CVE-2025-64503

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - cups-filters contains backends, filters, and other software required to get the cups printing service working on operating systems other than macos. In...

CVE-2025-64269: Missing Authorization

Missing Authorization vulnerability in EDGARROJAS WooCommerce PDF Invoice Builder woo-pdf-invoice-builder allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WooCommerce PDF Invoice Builder: from n/a through = 1.2.150...

DEBIAN-CVE-2025-64503

cups-filters contains backends, filters, and other software required to get the cups printing service working on operating systems other than macos. In cups-filters prior to 1.28.18, by crafting a PDF file with a large MediaBox value, an attacker can cause CUPS-Filter 1.x’s pdftoraster tool to...

EUVD-2025-150365

cups-filters contains backends, filters, and other software required to get the cups printing service working on operating systems other than macos. In cups-filters prior to 1.28.18, by crafting a PDF file with a large MediaBox value, an attacker can cause CUPS-Filter 1.x’s pdftoraster tool to...

CVE-2025-64503

cups-filters contains backends, filters, and other software required to get the cups printing service working on operating systems other than macos. In cups-filters prior to 1.28.18, by crafting a PDF file with a large MediaBox value, an attacker can cause CUPS-Filter 1.x’s pdftoraster tool to...

CVE-2025-64503

CVE-2025-64503 is a publicly reported issue affecting cups-filters (and libcupsfilters) where a crafted PDF with an oversized MediaBox width triggers an integer overflow in bytesPerLine calculation, leading to an out-of-bounds write in pdftoraster/writePixel8 and potential memory corruption. The ...

EUVD-2025-120811

Malicious code in venus-parcel-markdown-pdf-pulsar npm...

EUVD-2025-121939

Malicious code in slides-graphql-markdown-pdf-dynamo npm...

EUVD-2025-121917

Malicious code in slidev-markdown-pdf-vuepress-optimize-css-assets-webpack-plugin npm...

EUVD-2025-123233

Malicious code in protractor-markdown-pdf-epimetheus-chromedriver npm...

EUVD-2025-123958

Malicious code in parcel-markdown-pdf-cli-centauri npm...

EUVD-2025-111418

Malicious code in markdown-pdf-nebula-ursa-magellan npm...

Malicious code in orbit-markdown-pdf-octans-convict (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a0641cc7aee43d97ec6273b6e03734f3d96d764db8cf8ace1375ac67e421705 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avior-element-ui-markdown-pdf-vuetify (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f279e5f9baee2ff306120aa1e5e7e65475542a7cf455bfcc004d35ada818c8d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-113477

Malicious code in fornax-markdown-pdf-fornax-europa npm...

EUVD-2025-115433

Malicious code in changelog-markdown-pdf-rocket-hermes npm...

EUVD-2025-114244

Malicious code in elara-canopus-markdown-pdf-native npm...

MAL-2025-145560 Malicious code in nodejs-cygnus-sync-markdown-pdf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83ce14a4ddd7e7d11d764543dc23faf3d5934fb6001941a7c607b55b5975b389 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...