CVE-2026-36576

An OS command injection vulnerability in the app.py component of openlabs docker-wkhtmltopdf-aas up to commit 9f50579 allows attackers to execute arbitrary commands via a crafted POST request...

PT-2026-45953

An OS command injection vulnerability in the app.py component of openlabs docker-wkhtmltopdf-aas up to commit 9f50579 allows attackers to execute arbitrary commands via a crafted POST request...

PT-2026-42646

Impact On POSIX, escapeshellarg‘/usr/bin/wkhtmltopdf’ returns the literal string ‘/usr/bin/wkhtmltopdf’ with the single-quote characters included. is executable then looks for a file whose actual name contains those quote characters, which essentially never exists. The safe branch is dead code an...

Astra Linux – Vulnerability in wkhtmltopdf

A directory traversal vulnerability exists in wkhtmltopdf version 0.12.5, allowing remote attackers to read local files and disclose sensitive information by using a crafted HTML file with default configurations...

Exploit for CVE-2022-25765

Command Injection quando processa URLs não sanitizadas. Isso aco...

EUVD-2020-14137

Malware in sbrugna...

EUVD-2018-6747

Malware in sbrugna...

EUVD-2024-51498

Malicious code in bioql PyPI...

CVE-2024-13285

Vulnerability in Drupal wkhtmltopdf.This issue affects wkhtmltopdf:...

CVE-2024-13285

Vulnerability in Drupal wkhtmltopdf.This issue affects wkhtmltopdf:...

CVE-2024-13285 wkhtmltopdf - Highly critical - Unsupported - SA-CONTRIB-2024-049

Vulnerability in Drupal wkhtmltopdf.This issue affects wkhtmltopdf:...

CVE-2024-13285

Summary of CVE-2024-13285: This entry concerns a vulnerability in Drupal’s wkhtmltopdf integration. The connected sources indicate the affected component is the wkhtmltopdf integration used within Drupal, but do not provide a concrete product/version range or a root cause description in the docum...

CVE-2024-13285 wkhtmltopdf - Highly critical - Unsupported - SA-CONTRIB-2024-049

Vulnerability in Drupal wkhtmltopdf.This issue affects wkhtmltopdf:...

Drupal wkhtmltopdf module all versions - Unauthenticated Other Vulnerability Type

Unauthenticated Other Vulnerability Type discovered by ? in WordPress Module wkhtmltopdf versions...

The vulnerability of the command-line utility for converting HTML files into PDF format, wkhtmltopdf, arises from an incorrect limitation on the path to the restricted directory. This allows a malicious individual to disclose confidential information.

The vulnerability of the command-line utility for converting HTML files into PDF format, wkhtmltopdf, is related to an incorrect limitation on the path to the restricted directory. Exploiting this vulnerability could allow a malicious actor to disclose confidential information remotely...

Ubuntu: Security Advisory (USN-6232-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-6232-1 wkhtmltopdf vulnerability

It was discovered that wkhtmltopdf was not properly enforcing the same-origin policy when processing certain HTML files. If a user or automated system using wkhtmltopdf were tricked into processing a specially crafted HTML file, an attacker could possibly use this issue to expose sensitive...

USN-6232-1: wkhtmltopdf vulnerability

It was discovered that wkhtmltopdf was not properly enforcing the same-origin policy when processing certain HTML files. If a user or automated system using wkhtmltopdf were tricked into processing a specially crafted HTML file, an attacker could possibly use this issue to expose sensitive...

Ubuntu 16.04 ESM / 18.04 ESM / 20.04 LTS : wkhtmltopdf vulnerability (USN-6232-1)

The remote Ubuntu 16.04 ESM / 18.04 ESM / 20.04 LTS host has a package installed that is affected by a vulnerability as referenced in the USN-6232-1 advisory. It was discovered that wkhtmltopdf was not properly enforcing the same-origin policy when processing certain HTML files. If a user or...

QuadraInspect - Android Framework That Integrates AndroPass, APKUtil, And MobFS, Providing A Powerful Tool For Analyzing The Security Of Android Applications

The security of mobile devices has become a critical concern due to the increasing amount of sensitive data being stored on them. With the rise of Android OS as the most popular mobile platform, the need for effective tools to assess its security has also increased. In response to this need, a ne...