PT-2026-6866

Summary An authenticated SQL Injection vulnerability in OpenSTAManager's Scadenzario Payment Schedule print template allows any authenticated user to extract sensitive data from the database, including admin credentials, customer information, and financial records. The vulnerability enables...

EUVD-2018-3399

Malware in sbrugna...

CVE-2025-20297

In Splunk Enterprise versions below 9.4.2, 9.3.4 and 9.2.6, and Splunk Cloud Platform versions below 9.3.2411.102, 9.3.2408.111 and 9.2.2406.118, a low-privileged user that does not hold the "admin" or "power" Splunk roles could craft a malicious payload through the pdfgen/render REST endpoint th...

Splunk Cloud Platform和Splunk Enterprise 跨站脚本漏洞

Splunk Cloud Platform and Splunk Enterprise are both products of Splunk, Inc. of the U.S. Splunk Cloud Platform is a powerful data collection, processing, and analytics service.Splunk Enterprise is a suite of data collection and analytics software. A cross-site scripting vulnerability exists in...

Heap overflow

jpegsize in pdfgen.c in PDFGen before 2018-04-09 has a heap-based buffer over-read...

CVE-2018-11363

jpegsize in pdfgen.c in PDFGen before 2018-04-09 has a heap-based buffer over-read...

CVE-2018-11363

CVE-2018-11363 affects PDFGen: the jpeg_size function in pdfgen.c is vulnerable to a heap-based buffer over-read in versions prior to 2018-04-09. This can enable denial of service. The provided documents do not specify a patched version or remediation steps; references mention related advisories/...

PDFGen Heap Buffer Over-Read Vulnerability

PDFGen is a simple C PDF creation/generation library. A heap buffer over-read vulnerability exists in jpegsize in pdfgen.c in PDFGen. An attacker could exploit this vulnerability to cause a denial of service...

Sql injection

SQL injection vulnerability in plugins/pdfClasses/pdfgen.php in Andy's PHP Knowledgebase Aphpkb 0.95.4 allows remote attackers to execute arbitrary SQL commands via the pdfa parameter...

Andy's PHP KnowledgeBase 0.95.4 - SQL Injection

------------------------------------------------------------------------ Software................Andy's PHP Knowledgebase Project 0.95.4 Vulnerability...........SQL Injection Threat Level............Critical 4/5 Download................http://www.aphpkb.org/ Discovery Date..........3/27/2011 Test...