372 matches found
PT-2026-24127
Name of the Vulnerable Software and Affected Versions ImageMagick versions prior to 7.1.2-16 ImageMagick versions prior to 6.9.13-41 Description ImageMagick is software used for editing and manipulating digital images. A heap-use-after-free issue exists in the MSL encoder, where an image is...
Malicious code in orange-msl-project (npm)
The package orange-msl-project was found to contain malicious code...
MAL-2025-28417 Malicious code in orange-msl-project (npm)
The package orange-msl-project was found to contain malicious code...
Malware in msl-example-client
Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...
MAL-2025-3597 Malicious code in msl-example-client (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0c52efb23287b19a22a63e448d5f7075ec0f2e9410801d21797a93a6caf6180b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
ShadyShader: Crashing Apple Devices with a Single Click
Introduction A while ago, we discovered an interesting vulnerability in the GPU’s drivers of iPhones, iPads, and macOS computers with M-series chips. Dubbed ShadyShader, this flaw allows a specially crafted shader program to overwhelm Apple’s GPU, causing repeated freezes that ultimately lead to ...
Craft CMS 4.4.14 Code Injection
============================================================================================================================================= | Title : Craft CMS 4.4.14 Code Injection Vulnerability | | Author : indoushka | | Tested on : windows 10 FrPro / browser : Mozilla firefox 130.0.2 64 bits...
Craft CMS 4.4.14 Remote Code Execution
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Craft CMS unauthenticated Remote Code Execution RCE', 'Description' = %q This module exploits Remote Code Execution vulnerability CVE-2023-41892 ...
Craft CMS unauthenticated Remote Code Execution (RCE)
This module exploits Remote Code Execution vulnerability CVE-2023-41892 in Craft CMS which is a popular content management system. Craft CMS versions between 4.0.0-RC1 - 4.4.14 are affected by this vulnerability allowing attackers to execute arbitrary code remotely, potentially compromising the...
SUSE CVE-2016-3716
The MSL coder in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allows remote attackers to move arbitrary files via a crafted image...
graphicsmagick:coder_MSL_fuzzer: Heap-use-after-free in xmlParseInternalSubset
Detailed Report: https://oss-fuzz.com/testcase?key=5517147919482880 Project: graphicsmagick Fuzzing Engine: libFuzzer Fuzz Target: coderMSLfuzzer Job Type: libfuzzerasani386graphicsmagick Platform Id: linux Crash Type: Heap-use-after-free READ 4 Crash Address: 0xf5700624 Crash State:...
graphicsmagick:coder_MSL_fuzzer: Global-buffer-overflow in xmlParsePI
Detailed Report: https://oss-fuzz.com/testcase?key=6102648196038656 Project: graphicsmagick Fuzzing Engine: afl Fuzz Target: coderMSLfuzzer Job Type: aflasangraphicsmagick Platform Id: linux Crash Type: Global-buffer-overflow READ 1 Crash Address: 0x000001920ca2 Crash State: xmlParsePI...
graphicsmagick:coder_MSL_fuzzer: Global-buffer-overflow in xmlParsePI
Detailed Report: https://oss-fuzz.com/testcase?key=6514436804837376 Project: graphicsmagick Fuzzing Engine: honggfuzz Fuzz Target: coderMSLfuzzer Job Type: honggfuzzasangraphicsmagick Platform Id: linux Crash Type: Global-buffer-overflow READ 1 Crash Address: 0x000001a45c02 Crash State: xmlParseP...
tint:tint_spv_reader_msl_writer_fuzzer: Use-of-uninitialized-value in std::__1::basic_ostream<char, std::__1::char_traits<char> >& std::__1::__put_cha
Detailed Report: https://oss-fuzz.com/testcase?key=5025186655633408 Project: tint Fuzzing Engine: libFuzzer Fuzz Target: tintspvreadermslwriterfuzzer Job Type: libfuzzermsantint Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: std::1::basicostream &...
graphicsmagick:coder_MSL_fuzzer: Use-of-uninitialized-value in MSLEndElement
Project: http://hg.code.sf.net/p/graphicsmagick/code Detailed Report: https://oss-fuzz.com/testcase?key=5739753327689728 Project: graphicsmagick Fuzzing Engine: libFuzzer Fuzz Target: coderMSLfuzzer Job Type: libfuzzermsangraphicsmagick Platform Id: linux Crash Type: Use-of-uninitialized-value...
ImageMagick: memory leak in WriteMSLImage of coders/msl.c
There is a memory leak in the function WriteMSLImage of coders/msl.c in ImageMagick 7.0.8-13 Q16, and the function ProcessMSLScript of coders/msl.c in GraphicsMagick before 1.3.31...
ImageMagick memory leak vulnerability (CNVD-2018-21518)
ImageMagick is a set of open-source image processing software from the U.S. company ImageMagick Studio. The software can read, convert and write pictures in a variety of formats. A memory leak vulnerability exists in the 'WriteMSLImage' function in the coders/msl.c file in ImageMagick version...
ImageMagick memory leak vulnerability (CNVD-2018-00101)
ImageMagick is a software for creating, editing, and compositing images that can read, convert, and write images in many formats. A memory leak vulnerability exists in coders/msl.c in ImageMagick version 7.0.7-17 Q16 x8664. The vulnerability is due to the program failing to properly handle...
