CVE-2026-116144

ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 contains uncontrolled recursion in the MVG decoder that can lead to a stack overflow. Attackers can supply a crafted MVG file that, when read with specific arguments, exhausts the stack and crashes the process, causing a denial of service...

CVE-2026-116140

The ImageMagick software versions prior to 6.9.13-58 and 7.x before 7.1.2-33 are vulnerable to a policy bypass. The root cause is the incorrect parsing of delegate invocations , which allows an attacker to bypass administrator-defined restrictions in the policy.xml file. By processing specific in...

EUVD-2026-109545

ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 incorrectly parses delegate invocations, which can allow an executable blocked in policy.xml to still run. An attacker who gets ImageMagick to process input that triggers a delegate invocation can bypass the administrator-defined policy and...

CVE-2026-116140

ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 incorrectly parses delegate invocations, which can allow an executable blocked in policy.xml to still run. An attacker who gets ImageMagick to process input that triggers a delegate invocation can bypass the administrator-defined policy and...

CVE-2026-116140 ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 Policy Bypass via Delegate Invocation Parsing

ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 incorrectly parses delegate invocations, which can allow an executable blocked in policy.xml to still run. An attacker who gets ImageMagick to process input that triggers a delegate invocation can bypass the administrator-defined policy and...

CVE-2026-116140 ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 Policy Bypass via Delegate Invocation Parsing

ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 incorrectly parses delegate invocations, which can allow an executable blocked in policy.xml to still run. An attacker who gets ImageMagick to process input that triggers a delegate invocation can bypass the administrator-defined policy and...

Malicious Package

Overview fontus is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...

Exploit for Improperly Controlled Sequential Memory Allocation in Php

php2shell — CVE-2026-109618 / CVE-2026-109619 Peringatan...

CVE-2022-48311

CVE-2022-48311 HP Deskjet 2540 series printer Firmware Version CEP1FN1418BR and Product Model Number A9U23B HTTP configuration page Cross Site Scripting XSS Vulnerability Description Cross Site Scripting XSS in HP Deskjet 2540 series printer Firmware Version CEP1FN1418BR and Product Model Number...

MAL-2026-18261 Malicious code in ionic-tiktok-scraper (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 81665bdc2eec89b96d3b0ce247657c1ad75f497503347b8c35c65d324e99a389 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-18258 Malicious code in insta-reel-search (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fc584c5e885d66c7d3e895a467192ddd7a40082a2fe2df9ad45d8835ba65c4e6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-18260 Malicious code in ionic-sound-cloud-loader-api (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b1fdd1acea61b27d664ac4012dcc63f8a5525fe7893a3f012b8a04bf00596b33 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-18267 Malicious code in sound-cloud-loader-api (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9fd8d35927bc622270dcca94349a58c1f9daf31ebeb6bd4c8fc784cd140cc263 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-18257 Malicious code in insta-api-wrapper (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6451b5d95d51aa4063e15551a18c1305088f92597bf3a7e47bd18472a81d9855 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-18268 Malicious code in tiktok-video-scraper (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2ef8afdfd46def73ea112fa0024f94e41f206305cf9334662735958c05ccfe99 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious Package

Overview ionic-youtube-search is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious Package

Overview youtube-search-without-api-key is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and thi...

Malicious Package

Overview insta-api-wrapper is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious Package

Overview ionic-insta-api-wrapper is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this packa...

Malicious Package

Overview ionic-youtube-streams is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...