Welcome to our
Cyber Security News Aggregator
.Cyber Tzar
provide acyber security risk management
platform; including automated penetration tests and risk assesments culminating in a "cyber risk score" out of 1,000, just like a credit score.
First slide label
Some representative placeholder content for the first slide.
Second slide label
Some representative placeholder content for the second slide.
Third slide label
Some representative placeholder content for the third slide.
Breaking mPDF with regex and logic
published on 2025-11-12 23:24:06 UTC by /u/ZoltyLisContent:
TLDR:
mPDF is an open source PHP library for generating PDFs from HTML. Right now it has ~70 million installs on packagist.
Because of some logic quirks, it is possible to trigger web requests by providing it with a crafted input, even in cases where it is sanitized.
And at fault is… regex?
[link] [comments]
https://www.reddit.com/r/netsec/comments/1ovl2ke/breaking_mpdf_with_regex_and_logic/
Published: 2025 11 12 23:24:06
Received: 2025 11 12 23:31:55
Feed: /r/netsec - Information Security News and Discussion
Source: /r/netsec - Information Security News and Discussion
Category: Cyber Security
Topic: Cyber Security
Views: 6
