Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%

Stirling-Tools — Vulnerabilities & Security Advisories 14

Browse all 14 CVE security advisories affecting Stirling-Tools. AI-powered Chinese analysis, POCs, and references for each vulnerability.

Stirling-Tools develops security testing software, primarily used for vulnerability assessment and penetration testing. Historically, their products have been associated with multiple remote code execution, cross-site scripting, and privilege escalation vulnerabilities, with 10 CVEs documented to date. While no major public security incidents have been reported, the consistent presence of critical flaws in their testing tools suggests potential risks for organizations relying on these solutions for security validation. Users should implement strict network segmentation and access controls when deploying Stirling-Tools products to mitigate potential exploitation of these vulnerabilities.

Top products by Stirling-Tools: Stirling-PDF
CVE ID Title CVSS Severity Published
CVE-2026-57485 Stirling-PDF: Internal Service Account API Key Disclosure via Pipeline Endpoint — Stirling-PDF CWE-200 8.5 High 2026-08-17
CVE-2026-33437 Stirling PDF: Stored XSS in Info Summary — Stirling-PDF CWE-79 8.1 High 2026-08-17
CVE-2026-71270 Stirling-PDF Server-Side Request Forgery via /api/v1/convert/url/pdf WeasyPrint Subprocess — Stirling-PDF CWE-918 8.6 High 2026-08-05
CVE-2026-41580 Stirling-PDF: Reflected XSS through crafted PDF metadata fields (Title and Author) — Stirling-PDF CWE-79 6.1 Medium 2026-07-15
CVE-2026-33436 Stirling-PDF: Reflected XSS through crafted filename in file upload functionality — Stirling-PDF CWE-20 3.1 Low 2026-04-17
CVE-2026-34071 Stirling-PDF has Stored Cross Site Scripting (XSS) via EML-to-HTML Export — Stirling-PDF CWE-79 5.4 Medium 2026-03-26
CVE-2026-33438 Stirling-PDF vulnerable to DoS via add-watermark — Stirling-PDF CWE-770 6.5 Medium 2026-03-26
CVE-2026-27625 Stirling-PDF Zip Slip: Arbitrary File Write via Path Traversal in Markdown-to-PDF ZIP Extraction — Stirling-PDF CWE-22 8.1 High 2026-03-20
CVE-2025-55161 Stirling-PDF SSRF vulnerability on /api/v1/convert/markdown/pdf — Stirling-PDF CWE-918 8.6 High 2025-08-11
CVE-2025-55150 Stirling-PDF SSRF vulnerability on /api/v1/convert/html/pdf — Stirling-PDF CWE-918 8.6 High 2025-08-11
CVE-2025-55151 Stirling-PDF SSRF vulnerability on /api/v1/convert/file/pdf — Stirling-PDF CWE-918 8.6 High 2025-08-11
CVE-2025-46568 Stirling-PDF Server-Side Request Forgery (SSRF)-Induced Arbitrary File Read Vulnerability — Stirling-PDF CWE-918 7.5AI High AI 2025-05-01
CVE-2024-52286 Self Cross Site Scripting (XSS) In Merge Functionality in Stirling-PDF — Stirling-PDF CWE-20 6.1AI Medium AI 2024-11-11
CVE-2024-9075 Stirling-Tools Stirling-PDF Markdown-to-PDF cross site scripting — Stirling-PDF CWE-79 2.6 Low 2024-09-21

This page lists every published CVE security advisory associated with Stirling-Tools. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.