CVE-2022-25765

CVE-2022-25765 affects pdfkit (Ruby gem) with command injection in which pdfkit passes the user-supplied URL straight to wkhtmltopdf, allowing shell interpretation via backticks. Exploitation details show RCE via crafted URLs (e.g., http://example.comcmd), with multiple public PoCs/exploits and a...

CVE-2013-1607

CVE-2013-1607 affects the Ruby PDFKit gem prior to 0.5.3. The vulnerability arises from improper input validation/handling during PDF generation, allowing potential remote code execution. Affected component: PDFKit Ruby gem; root cause: parameter handling/validation flaw; impact: remote code exec...