Lucene search
+L

41871 matches found

attackerkb
attackerkb
•added 2026/02/24 1:01 a.m.•16 views

CVE-2026-25797

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, the ps coders, responsible for writing PostScript files, fails to sanitize the input before writing it into the PostScript header. An attacker can provide a...

5.7CVSS6.8AI score0.002EPSS
SaveExploits0References2Affected Software1
Snyk
Snyk
•added 2026/02/24 1:01 a.m.•14 views

Arbitrary Code Injection

Overview Magick.NET-Q8-x86 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

5.7CVSS6.5AI score0.002EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/02/24 1:01 a.m.•16 views

Arbitrary Code Injection

Overview Magick.NET-Q8-OpenMP-x64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package ar...

5.7CVSS6.5AI score0.002EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/02/24 1:01 a.m.•17 views

Arbitrary Code Injection

Overview Magick.NET-Q8-OpenMP-arm64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package...

5.7CVSS6.5AI score0.002EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/02/24 1:01 a.m.•19 views

Arbitrary Code Injection

Overview Magick.NET-Q16-OpenMP-arm64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package...

5.7CVSS6.5AI score0.002EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/02/24 1:01 a.m.•16 views

Arbitrary Code Injection

Overview Magick.NET-Q16-HDRI-AnyCPU is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package...

5.7CVSS6.5AI score0.002EPSS
SaveExploits0References2
Mend
Mend
•added 2026/02/24 1:01 a.m.•6 views

CVE-2026-25797

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, the ps coders, responsible for writing PostScript files, fails to sanitize the input before writing it into the PostScript header. An attacker can provide a...

5.7CVSS6.7AI score0.002EPSS
SaveExploits0References6
CVE
CVE
•added 2026/02/24 1:01 a.m.•188 views

CVE-2026-25797

ImageMagick (affected: 7.1.2-15 and 6.9.13-40) contains two input-sanitization issues in the PostScript header written by the ps coders and in HTML escaping when writing to documents. The ps coders fail to sanitize input before inserting into the PostScript header, allowing an attacker to craft a...

5.7CVSS6.7AI score0.002EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
•added 2026/02/24 12:03 a.m.•14 views

CVE-2025-9120 RCE vulnerability has been discovered in OpenText™ Carbonite Safe Server Backup.

Improper Control of Generation of Code 'Code Injection' vulnerability in OpenText™ Carbonite Safe Server Backup allows Code Injection. The vulnerability could be exploited through an open port, potentially allowing unauthorized access. This issue affects Carbonite Safe Server Backup: through 6.8....

8.6CVSS5.8AI score0.00168EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/02/24 12:03 a.m.•24 views

EUVD-2025-207564

Improper Control of Generation of Code 'Code Injection' vulnerability in OpenText™ Carbonite Safe Server Backup allows Code Injection. The vulnerability could be exploited through an open port, potentially allowing unauthorized access. This issue affects Carbonite Safe Server Backup: through 6.8....

8.6CVSS5.4AI score0.00168EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2026/02/24 12:03 a.m.•13 views

CVE-2025-9120

Improper Control of Generation of Code 'Code Injection' vulnerability in OpenText™ Carbonite Safe Server Backup allows Code Injection. The vulnerability could be exploited through an open port, potentially allowing unauthorized access. This issue affects Carbonite Safe Server Backup: through 6.8....

8.6CVSS5.5AI score0.00168EPSS
SaveExploits0References2
CVE
CVE
•added 2026/02/24 12:03 a.m.•63 views

CVE-2025-9120

CVE-2025-9120 : OpenText Carbonite Safe Server Backup is affected up to version 6.8.3 by an improper generation of code vulnerability (code injection). The issue can be exploited via an open port to potentially gain unauthorized access, with a CVSSv4.0 base score of 8.6 (HIGH) and local attack Ve...

8.6CVSS5.8AI score0.00168EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/02/24 12:03 a.m.•48 views

CVE-2025-9120 RCE vulnerability has been discovered in OpenText™ Carbonite Safe Server Backup.

Improper Control of Generation of Code 'Code Injection' vulnerability in OpenText™ Carbonite Safe Server Backup allows Code Injection. The vulnerability could be exploited through an open port, potentially allowing unauthorized access. This issue affects Carbonite Safe Server Backup: through 6.8....

8.6CVSS0.00168EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2026/02/24 12:00 a.m.•29 views

Alinto SOGo code injection vulnerability

Alinto SOGo is an open-source collaboration office software developed by Alinto. Versions 5.12.3 and 5.12.4 of Alinto SOGo contain a code injection vulnerability. This vulnerability stems from incorrect handling of parameter hints, which may lead to cross-site scripting attacks...

6.1CVSS5.2AI score0.0054EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2026/02/24 12:00 a.m.•30 views

Itsourcecode Event Management System: Code Injection Vulnerability

itsourcecode Event Management System is an open-source event management system developed by itsourcecode. Version 1.0 of the itsourcecode Event Management System contains a code injection vulnerability. This vulnerability arises from incorrect handling of the parameter “page” in the file...

6.1CVSS5AI score0.00547EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/02/24 12:00 a.m.•8 views

CVE-2025-9120: Improper Control of Generation of Code

Improper Control of Generation of Code 'Code Injection' vulnerability in OpenText™ Carbonite Safe Server Backup allows Code Injection. The vulnerability could be exploited through an open port, potentially allowing unauthorized access. This issue affects Carbonite Safe Server Backup: through 6.8....

8.6CVSS5.8AI score0.00168EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2026/02/24 12:00 a.m.•26 views

OpenText Carbonite Safe Server Backup code injection vulnerability

OpenText Carbonite Safe Server Backup is a hybrid cloud backup software developed by OpenText Corporation in Canada. Versions of OpenText Carbonite Safe Server Backup 6.8.3 and earlier contained a code injection vulnerability. This vulnerability stemmed from improper code generation controls, whi...

8.6CVSS5.9AI score0.00168EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/02/24 12:00 a.m.•33 views

PT-2026-21583

Improper Control of Generation of Code 'Code Injection' vulnerability in OpenText™ Carbonite Safe Server Backup allows Code Injection. The vulnerability could be exploited through an open port, potentially allowing unauthorized access. This issue affects Carbonite Safe Server Backup: through 6.8....

8.6CVSS5.4AI score0.00168EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/02/24 12:00 a.m.•4 views

CVE-2026-25797: Improper Control of Generation of Code

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, the ps coders, responsible for writing PostScript files, fails to sanitize the input before writing it into the PostScript header. An attacker can provide a...

5.7CVSS6.8AI score0.002EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2026/02/24 12:00 a.m.•21 views

ImageMagick code injection vulnerability

ImageMagick is a set of open-source image processing software developed by the ImageMagick project. It can read, convert, and write images in various formats. Versions of ImageMagick prior to 7.1.2-15 and 6.9.13-40 contained a code injection vulnerability. This vulnerability stemmed from the ps...

5.7CVSS6.6AI score0.002EPSS
SaveExploits0References2
Rows per page
Query Builder