Bedside-Hack-The-Box-Writeup

Bedside - Hack The Box Writeup !Hack The Boxhttps://img.sh...

Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS : pdfminer vulnerabilities (USN-8837-1)

The remote Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-8837-1 advisory. It was discovered that pdfminer did not safely parse specially crafted PDF files. An attacker could possibly use thes...

USN-8837-1 pdfminer vulnerabilities

It was discovered that pdfminer did not safely parse specially crafted PDF files. An attacker could possibly use these issues to execute arbitrary code. CVE-2025-64512, CVE-2025-70559...

USN-8837-1: pdfminer vulnerabilities

It was discovered that pdfminer did not safely parse specially crafted PDF files. An attacker could possibly use these issues to execute arbitrary code. CVE-2025-64512, CVE-2025-70559...

CVE-2026-54071

BabelDOC is a document translation tool. Prior to 0.6.3, BabelDOC's vendored PDF parser in babeldoc/pdfminer/cmapdb.py deserializes untrusted pickle data when CMapDB.loaddata loads CMap files. PDF-controlled Encoding or CMapName values and embedded PostScript usecmap operators can reach this sink...

CVE-2026-54071: Deserialization of Untrusted Data

BabelDOC is a document translation tool. Prior to 0.6.3, BabelDOC's vendored PDF parser in babeldoc/pdfminer/cmapdb.py deserializes untrusted pickle data when CMapDB.loaddata loads CMap files. PDF-controlled Encoding or CMapName values and embedded PostScript usecmap operators can reach this sink...

Exploit for Deserialization of Untrusted Data in Pdfminer Pdfminer.Six

CVE-2025-64512 - pdfminer.six Remote Code Execution RCE !...

Exploit for Deserialization of Untrusted Data in Pdfminer Pdfminer.Six

No d...

Exploit for Deserialization of Untrusted Data in Pdfminer Pdfminer.Six

CVE-2025-64...

Exploit for Deserialization of Untrusted Data in Pdfminer Pdfminer.Six

CVE-2025-64512 - pdfminer.six Remote Code Execution RCE !...

Exploit for Deserialization of Untrusted Data in Pdfminer Pdfminer.Six

CVE-2025-64512 — pdfminer.six Insecure Deserialization Pickle...

Exploit for Deserialization of Untrusted Data in Pdfminer Pdfminer.Six

No d...

BabelDOC: Arbitrary Code Execution via CMap Pickle Deserialization in babeldoc/pdfminer/cmapdb.py

Arbitrary Code Execution via CMap Pickle Deserialization in babeldoc/pdfminer/cmapdb.py SummaryBabelDOC's vendored PDF parser babeldoc/pdfminer/cmapdb.py deserializes untrusted pickle data when loading CMap files. The loaddata method strips only NUL bytes from a PDF-controlled CMap name, then...

agentix-agent-sdk (0.1.0), agixt (>=1.7.0, <=1.7.11) +60 more potentially affected by CVE-2025-64512 via pdfminer-six (20231228.0.0)

pdfminer-six PYPI version 20231228.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on pdfminer-six and may be impacted: - agentix-agent-sdk 0.1.0 - agixt =1.7.0, =1.0.0, =0.1.1, =5.2.161, =1.0.0, =0.1.0, =2.2.5rc1, =1.1.6, =0.1.0, =0.1.0, =2024.5.10,...

beancount-importer (>=0.2.0, <=0.3.0), bib-dedupe (>=0.1.0, <=0.3.0) +28 more potentially affected by CVE-2025-64512 via pdfminer-six (20220524.0.0)

pdfminer-six PYPI version 20220524.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on pdfminer-six and may be impacted: - beancount-importer =0.2.0, =0.1.0, =0.5.5, =0.9.3, =0.0.5, =0.1.0, =0.0.1, =0.1.5, =3.5.0, =0.3.0, =0.4.8 and more Source cves:...

babeldoc (>=0.3.38, <=0.3.60), iflow-mcp-pdfmathtranslate-pdf2zh (1.9.11) +3 more potentially affected by CVE-2025-64512 via pdfminer-six (20250416.0.0)

pdfminer-six PYPI version 20250416.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on pdfminer-six and may be impacted: - babeldoc =0.3.38, =1.9.8, =1.9.11 Source cves: CVE-2025-64512 Source advisory: OSV:PYSEC-2026-1762...

chatbot-rag (>=0.1.3, <=0.1.9), docassemble-base (>=1.7.0, <=1.7.7) +5 more potentially affected by CVE-2025-64512 via pdfminer-six (20250327.0.0)

pdfminer-six PYPI version 20250327.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on pdfminer-six and may be impacted: - chatbot-rag =0.1.3, =1.7.0, =1.7.0, =1.7.0, =1.7.7 - karhu 2.0.0 - pdfplumber 0.11.6 - textextraction 0.1.4 Source cves:...

beancount-ce (>=0.1.0, <=1.2.0), ocrmypdf (>=10.3.2, <=11.3.0) +4 more potentially affected by CVE-2025-64512 via pdfminer-six (20200726.0.0)

pdfminer-six PYPI version 20200726.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on pdfminer-six and may be impacted: - beancount-ce =0.1.0, =10.3.2, =0.3.0, =1.0.3, =1.44.0, =0.1.1, =0.1.7 Source cves: CVE-2025-64512 Source advisory:...

ocrmypdf (10.3.1), seleniumbase (>=1.43.0, <=1.43.1) potentially affected by CVE-2025-64512 via pdfminer-six (20200720.0.0)

pdfminer-six PYPI version 20200720.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on pdfminer-six and may be impacted: - ocrmypdf 10.3.1 - seleniumbase =1.43.0, =1.43.1 Source cves: CVE-2025-64512 Source advisory: OSV:PYSEC-2026-1762...

deckz (2.6.0), ocrmypdf (>=9.7.2, <=9.8.0) +4 more potentially affected by CVE-2025-64512 via pdfminer-six (20200402.0.0)

pdfminer-six PYPI version 20200402.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on pdfminer-six and may be impacted: - deckz 2.6.0 - ocrmypdf =9.7.2, =0.1.0, =1.0.0, =1.36.10, =1.38.1 Source cves: CVE-2025-64512 Source advisory: OSV:PYSEC-2026-1762...