CVE-2026-116153 ImageMagick before 7.1.2-33 Heap Buffer Overflow via Convex-Hull on 32-bit

ImageMagick before 7.1.2-33 contains a heap buffer overflow vulnerability on 32-bit systems that allows attackers to overwrite heap memory when convex-hull information is requested. Attackers can supply crafted images processed with convex-hull calculations to corrupt heap memory, causing crashes...

CVE-2026-116153 ImageMagick before 7.1.2-33 Heap Buffer Overflow via Convex-Hull on 32-bit

ImageMagick before 7.1.2-33 contains a heap buffer overflow vulnerability on 32-bit systems that allows attackers to overwrite heap memory when convex-hull information is requested. Attackers can supply crafted images processed with convex-hull calculations to corrupt heap memory, causing crashes...

CVE-2026-116153

ImageMagick before 7.1.2-33 contains a heap buffer overflow vulnerability on 32-bit systems that allows attackers to overwrite heap memory when convex-hull information is requested. Attackers can supply crafted images processed with convex-hull calculations to corrupt heap memory, causing crashes...

EUVD-2026-109414

ImageMagick before 7.1.2-33 contains a heap buffer overflow vulnerability on 32-bit systems that allows attackers to overwrite heap memory when convex-hull information is requested. Attackers can supply crafted images processed with convex-hull calculations to corrupt heap memory, causing crashes...

CVE-2026-116148 ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 Code Injection via MVG Encoder Drawing Options

ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 contains an injection vulnerability in the MVG encoder, which does not properly neutralize user-specified drawing options before writing them into generated MVG output. Attackers who can supply drawing options can inject arbitrary MVG drawing...

CVE-2026-116148

ImageMagick versions before 6.9.13-58 and 7.x before 7.1.2-33 are vulnerable to a code injection flaw in the MVG encoder . The root cause is the failure to properly neutralize user-specified drawing options before they are written into the generated MVG output. This allows an attacker capable of ...

CVE-2026-116148 ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 Code Injection via MVG Encoder Drawing Options

ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 contains an injection vulnerability in the MVG encoder, which does not properly neutralize user-specified drawing options before writing them into generated MVG output. Attackers who can supply drawing options can inject arbitrary MVG drawing...

CVE-2026-116148

ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 contains an injection vulnerability in the MVG encoder, which does not properly neutralize user-specified drawing options before writing them into generated MVG output. Attackers who can supply drawing options can inject arbitrary MVG drawing...

CVE-2026-116144

ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 contains uncontrolled recursion in the MVG decoder that can lead to a stack overflow. Attackers can supply a crafted MVG file that, when read with specific arguments, exhausts the stack and crashes the process, causing a denial of service...

CVE-2026-116140

The ImageMagick software versions prior to 6.9.13-58 and 7.x before 7.1.2-33 are vulnerable to a policy bypass. The root cause is the incorrect parsing of delegate invocations , which allows an attacker to bypass administrator-defined restrictions in the policy.xml file. By processing specific in...

EUVD-2026-109545

ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 incorrectly parses delegate invocations, which can allow an executable blocked in policy.xml to still run. An attacker who gets ImageMagick to process input that triggers a delegate invocation can bypass the administrator-defined policy and...

CVE-2026-116140

ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 incorrectly parses delegate invocations, which can allow an executable blocked in policy.xml to still run. An attacker who gets ImageMagick to process input that triggers a delegate invocation can bypass the administrator-defined policy and...

CVE-2026-116140 ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 Policy Bypass via Delegate Invocation Parsing

ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 incorrectly parses delegate invocations, which can allow an executable blocked in policy.xml to still run. An attacker who gets ImageMagick to process input that triggers a delegate invocation can bypass the administrator-defined policy and...

CVE-2026-116140 ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 Policy Bypass via Delegate Invocation Parsing

ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 incorrectly parses delegate invocations, which can allow an executable blocked in policy.xml to still run. An attacker who gets ImageMagick to process input that triggers a delegate invocation can bypass the administrator-defined policy and...

Malicious Package

Overview fontus is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...

Exploit for Improperly Controlled Sequential Memory Allocation in Php

php2shell — CVE-2026-109618 / CVE-2026-109619 Peringatan...

CVE-2022-48311

CVE-2022-48311 HP Deskjet 2540 series printer Firmware Version CEP1FN1418BR and Product Model Number A9U23B HTTP configuration page Cross Site Scripting XSS Vulnerability Description Cross Site Scripting XSS in HP Deskjet 2540 series printer Firmware Version CEP1FN1418BR and Product Model Number...

CVE-2018-20250

exp for Extracting Code Execution From Winrar poc by Ridter how to use ? you just need to install python 3.7, and prepare a evil file you want to run, set the values you want, this exp script will generate the evil archive file automatically! 1. set the values you want ... ... The archive filenam...

MAL-2026-18268 Malicious code in tiktok-video-scraper (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2ef8afdfd46def73ea112fa0024f94e41f206305cf9334662735958c05ccfe99 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-18261 Malicious code in ionic-tiktok-scraper (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 81665bdc2eec89b96d3b0ce247657c1ad75f497503347b8c35c65d324e99a389 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...