sticky_keys_hunter

Sticky Keys Hunter This POC bash script tests for sticky keys and utilman backdoors. The script will connect to an RDP server, send both the sticky keys and utilman triggers and screenshot the result. This script was written to prove a theory I had about detecting these backdoors in a blackbox...

CVE-2026-123273

Versions of ImageMagick before 7.1.2-35 and 6.9.13-60 are vulnerable to an infinite loop within the SVG decoder . The root cause is located in QueueAuthenticPixelCacheNexus in MagickCore/cache.c , which fails to validate the requested region's width and height. An attacker can provide a crafted S...

EUVD-2026-117726

ImageMagick before 7.1.2-35 and 6.9.13-60 contains an infinite loop vulnerability in the SVG decoder because QueueAuthenticPixelCacheNexus in MagickCore/cache.c fails to validate requested region width and height. Attackers can supply a crafted SVG image that repeatedly requests a non-advancing...

ROOT-OS-DEBIAN-13-CVE-2023-34152 CVE-2023-34152 in imagemagick - Patched by Root

Root has patched CVE-2023-34152 in the imagemagick package for Root:Debian:13. Multiple fixed versions available...

ROOT-OS-DEBIAN-13-CVE-2026-66011 CVE-2026-66011 in imagemagick - Patched by Root

Root has patched CVE-2026-66011 in the imagemagick package for Root:Debian:13. Multiple fixed versions available...

ROOT-OS-DEBIAN-13-CVE-2025-55160 CVE-2025-55160 in imagemagick - Patched by Root

Root has patched CVE-2025-55160 in the imagemagick package for Root:Debian:13. Multiple fixed versions available...

ROOT-OS-DEBIAN-13-CVE-2018-15607 CVE-2018-15607 in imagemagick - Patched by Root

Root has patched CVE-2018-15607 in the imagemagick package for Root:Debian:13. Multiple fixed versions available...

ROOT-OS-DEBIAN-13-CVE-2026-119123 CVE-2026-119123 in imagemagick - Patched by Root

Root has patched CVE-2026-119123 in the imagemagick package for Root:Debian:13. Multiple fixed versions available...

Exploit for CVE-2026-122006

cve-2026-122006-check Detection script for CVE-2026-122006...

CVE-2026-122006

A flaw was found in Active Storage. When processing file attachments using ImageMagick, the analyzer executes without an adequate security policy to restrict unintended operations. A remote attacker can exploit this vulnerability by uploading a crafted file, allowing unauthorized read and write...

[SECURITY] [DSA 6611-1] imagemagick security update

------------------------------------------------------------------------- Debian Security Advisory DSA-6611-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff November 04, 2026 https://www.debian.org/security/faq -...

CVE-2026-122006

The activestorage gem before 8.1.4.1 for Ruby on Rails, when ImageMagick attachment processing occurs, can allow server read and write operations e.g., reading secretkeybase because the ImageMagick analyzer runs when a file is attached, and there is not an ImageMagick security policy to block...

CVE-2026-122006

The activestorage gem before 8.1.4.1 for Ruby on Rails, when ImageMagick attachment processing occurs, can allow server read and write operations e.g., reading secretkeybase because the ImageMagick analyzer runs when a file is attached, and there is not an ImageMagick security policy to block...

EUVD-2026-116914

The activestorage gem before 8.1.4.1 for Ruby on Rails, when ImageMagick attachment processing occurs, can allow server read and write operations e.g., reading secretkeybase because the ImageMagick analyzer runs when a file is attached, and there is not an ImageMagick security policy to block...

CVE-2026-122006

The activestorage gem (versions before 8.1.4.1 ) for Ruby on Rails is vulnerable to unauthorized server read and write operations during ImageMagick attachment processing. The root cause is the execution of the ImageMagick analyzer upon file attachment without a security policy to block unintende...

CVE-2026-122006

The activestorage gem before 8.1.4.1 for Ruby on Rails, when ImageMagick attachment processing occurs, can allow server read and write operations e.g., reading secretkeybase because the ImageMagick analyzer runs when a file is attached, and there is not an ImageMagick security policy to block...

ROOT-OS-DEBIAN-13-CVE-2026-116149 CVE-2026-116149 in imagemagick - Patched by Root

Root has patched CVE-2026-116149 in the imagemagick package for Root:Debian:13. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2026-66011 CVE-2026-66011 in imagemagick - Patched by Root

Root has patched CVE-2026-66011 in the imagemagick package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2023-34152 CVE-2023-34152 in imagemagick - Patched by Root

Root has patched CVE-2023-34152 in the imagemagick package for Root:Debian:12. Multiple fixed versions available...

CVE-2026-122006: rubyonrails Active Storage: The activestorage gem before 8.1.4.1 for Ruby on Rails, when ImageMagick attachment processing occurs, can allow server…

The activestorage gem before 8.1.4.1 for Ruby on Rails, when ImageMagick attachment processing occurs, can allow server read and write operations e.g., reading secretkeybase because the ImageMagick analyzer runs when a file is attached, and there is not an ImageMagick security policy to block...