Jashid Sany

**Name of the Vulnerable Software and Affected Versions** CactusViewer version 2.3.0 **Description** A DLL hijacking issue in CactusViewer allows attackers to escalate privileges and execute arbitrary code by using a crafted DLL. DLL hijacking is a technique where an application is tricked into loading a malicious dynamic-link library (DLL) instead of the intended one. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** openlabs docker-wkhtmltopdf-aas versions prior to commit 9f50579 **Description** An OS command injection flaw exists in the `app.py` component. This issue allows attackers to execute arbitrary system commands by sending a specially crafted POST request. **Recommendations** Update openlabs docker-wkhtmltopdf-aas to a version beyond commit 9f50579.