41936 matches found
Arbitrary Code Injection
Overview Magick.NET-Q16-HDRI-x64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...
Arbitrary Code Injection
Overview Magick.NET-Q16-HDRI-x86 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...
Arbitrary Code Injection
Overview Magick.NET-Q16-OpenMP-x64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package a...
Arbitrary Code Injection
Overview Magick.NET-Q16-x64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...
Arbitrary Code Injection
Overview Magick.NET-Q16-HDRI-AnyCPU is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package...
DEBIAN-CVE-2026-105404
ImageMagick before 6.9.13-56 and 7.x before 7.1.2-31 contains a code injection vulnerability in its PostScript coders, because some values are not properly escaped or trimmed when written to output. Attackers can supply crafted values that embed arbitrary PostScript code into files generated by...
CVE-2026-105404
Rejected reason: This CVE ID has been rejected as a duplicate...
CVE-2026-105404
Removed by vendor...
CVE-2026-105404 ImageMagick before 7.1.2-31 Code Injection via PostScript Coders
ImageMagick before 6.9.13-56 and 7.x before 7.1.2-31 contains a code injection vulnerability in its PostScript coders, because some values are not properly escaped or trimmed when written to output. Attackers can supply crafted values that embed arbitrary PostScript code into files generated by...
CVE-2026-105404
The ImageMagick software is vulnerable to a code injection flaw in its PostScript coders prior to versions 6.9.13-56 and 7.x before 7.1.2-31 . The root cause is the failure to properly sanitize, escape, or trim values written to output files. A remote attacker can supply crafted input values to e...
CVE-2026-105404
ImageMagick before 6.9.13-56 and 7.x before 7.1.2-31 contains a code injection vulnerability in its PostScript coders, because some values are not properly escaped or trimmed when written to output. Attackers can supply crafted values that embed arbitrary PostScript code into files generated by...
EUVD-2026-95008
ImageMagick before 6.9.13-56 and 7.x before 7.1.2-31 contains a code injection vulnerability in its PostScript coders, because some values are not properly escaped or trimmed when written to output. Attackers can supply crafted values that embed arbitrary PostScript code into files generated by...
CVE-2026-105404
...
Exploit for Code Injection in Vmware Spring_Framework
Spring4Shell CVE-2022-22965 Vulhub's...
Oracle Linux 8 : vim (ELSA-2026-77359)
The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-77359 advisory. - RHEL-257017 CVE-2026-73073 arbitrary Ex command execution during C omni-completion - RHEL-253666 CVE-2026-28420 buffer overflow in terminal emulator -...
PT-2026-108153
Name of the Vulnerable Software and Affected Versions dot-access versions 0.0.3 through 1.0.0 Description A code injection flaw exists where the get function concatenates user-supplied paths into a new Function body within index.js. This allows remote attackers to access constructor.constructor t...
CVE-2026-107700: Improper Control of Generation of Code
dot-access 0.0.3 through 1.0.0 contains a code injection vulnerability that allows remote attackers to execute JavaScript by supplying crafted paths to get. The path is concatenated into a new Function body in index.js, so attackers can reach constructor.constructor to load childprocess and run...
PT-2026-107980
Name of the Vulnerable Software and Affected Versions ImageMagick versions prior to 6.9.13-56 ImageMagick versions prior to 7.1.2-31 Description Code injection is possible in the PostScript coders because certain values are not properly escaped or trimmed during output. This allows attackers to...
CVE-2026-106577
A flaw was found in ImageMagick. Due to improper input sanitization, unescaped or untrimmed values can result in code injection within output generated by PostScript coders. A remote attacker could supply specially crafted input to embed arbitrary code into the generated PostScript documents. Whe...