80 matches found
EUVD-2026-34099
An OS command injection vulnerability in the app.py component of openlabs docker-wkhtmltopdf-aas up to commit 9f50579 allows attackers to execute arbitrary commands via a crafted POST request...
Openlabs docker-wkhtmltopdf-aas 命令注入漏洞
Docker-WKHTMLTOPDF-AAS is an open-source tool developed by Openlabs that converts HTML into PDF via a web-based service. Previous versions of Docker-WKHTMLTOPDF-AAS, including version 9f50579, had security vulnerabilities. These vulnerabilities stemmed from the app.py component, which allowed for...
CVE-2026-36576
An OS command injection vulnerability in the app.py component of openlabs docker-wkhtmltopdf-aas up to commit 9f50579 allows attackers to execute arbitrary commands via a crafted POST request...
PT-2026-45953
An OS command injection vulnerability in the app.py component of openlabs docker-wkhtmltopdf-aas up to commit 9f50579 allows attackers to execute arbitrary commands via a crafted POST request...
PT-2026-42646
Impact On POSIX, escapeshellarg‘/usr/bin/wkhtmltopdf’ returns the literal string ‘/usr/bin/wkhtmltopdf’ with the single-quote characters included. is executable then looks for a file whose actual name contains those quote characters, which essentially never exists. The safe branch is dead code an...
Exploit for CVE-2022-25765
Command Injection quando processa URLs não sanitizadas. Isso aco...
EUVD-2020-14137
Malware in sbrugna...
EUVD-2018-6747
Malware in sbrugna...
EUVD-2024-51498
Malicious code in bioql PyPI...
CVE-2024-13285
Vulnerability in Drupal wkhtmltopdf.This issue affects wkhtmltopdf:...
CVE-2024-13285
Vulnerability in Drupal wkhtmltopdf.This issue affects wkhtmltopdf:...
CVE-2024-13285 wkhtmltopdf - Highly critical - Unsupported - SA-CONTRIB-2024-049
Vulnerability in Drupal wkhtmltopdf.This issue affects wkhtmltopdf:...
CVE-2024-13285
Summary of CVE-2024-13285: This entry concerns a vulnerability in Drupal’s wkhtmltopdf integration. The connected sources indicate the affected component is the wkhtmltopdf integration used within Drupal, but do not provide a concrete product/version range or a root cause description in the docum...
CVE-2024-13285 wkhtmltopdf - Highly critical - Unsupported - SA-CONTRIB-2024-049
Vulnerability in Drupal wkhtmltopdf.This issue affects wkhtmltopdf:...
Drupal wkhtmltopdf module all versions - Unauthenticated Other Vulnerability Type
Unauthenticated Other Vulnerability Type discovered by ? in WordPress Module wkhtmltopdf versions...
The vulnerability of the command-line utility for converting HTML files into PDF format, wkhtmltopdf, arises from an incorrect limitation on the path to the restricted directory. This allows a malicious individual to disclose confidential information.
The vulnerability of the command-line utility for converting HTML files into PDF format, wkhtmltopdf, is related to an incorrect limitation on the path to the restricted directory. Exploiting this vulnerability could allow a malicious actor to disclose confidential information remotely...
Ubuntu: Security Advisory (USN-6232-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
USN-6232-1 wkhtmltopdf vulnerability
It was discovered that wkhtmltopdf was not properly enforcing the same-origin policy when processing certain HTML files. If a user or automated system using wkhtmltopdf were tricked into processing a specially crafted HTML file, an attacker could possibly use this issue to expose sensitive...
USN-6232-1: wkhtmltopdf vulnerability
It was discovered that wkhtmltopdf was not properly enforcing the same-origin policy when processing certain HTML files. If a user or automated system using wkhtmltopdf were tricked into processing a specially crafted HTML file, an attacker could possibly use this issue to expose sensitive...
Ubuntu 16.04 ESM / 18.04 ESM / 20.04 LTS : wkhtmltopdf vulnerability (USN-6232-1)
The remote Ubuntu 16.04 ESM / 18.04 ESM / 20.04 LTS host has a package installed that is affected by a vulnerability as referenced in the USN-6232-1 advisory. It was discovered that wkhtmltopdf was not properly enforcing the same-origin policy when processing certain HTML files. If a user or...