sticky_keys_hunter

Sticky Keys Hunter This POC bash script tests for sticky keys and utilman backdoors. The script will connect to an RDP server, send both the sticky keys and utilman triggers and screenshot the result. This script was written to prove a theory I had about detecting these backdoors in a blackbox...

CVE-2022-44268-PoC

CVE-2022-44268-PoC This repository includes a test file for CVE-2022-44268 ImageMagick Arbitrary File Read. Testing 1. Upload the pngout.png into a Webapplication 2. Check if the image can be cropped, cut or edited in any way 3. Download the edited image 4. Use identify -verbose editimage.png to...

CVE-2022-44268-automated-poc

CVE-2022-44268 ImageMagick Arbitrary File Read poc Fully Automated ⚙ An information disclosure vulnerability that could be exploited to read arbitrary files from a server when parsing an image. Image Magic version effected Version: ImageMagick 6.9.11-60 Q16 x8664 2021-01-25 https://imagemagick.or...

CVE-2026-123273

ImageMagick before 7.1.2-35 and 6.9.13-60 contains an infinite loop vulnerability in the SVG decoder because QueueAuthenticPixelCacheNexus in MagickCore/cache.c fails to validate requested region width and height. Attackers can supply a crafted SVG image that repeatedly requests a non-advancing...

cve-2022-44268

CVE-2022-44268 ImageMagick is a free and open-source cross-platform software suite for displaying, converting, and editing raster image and vector image files. It can read and write over 200 image file formats. ImageMagick is licensed under the Apache License 2.0. It is available in the form of...

CVE-2026-123273

A flaw was found in ImageMagick. An attacker can cause a Denial of Service DoS by submitting a specially crafted Scalable Vector Graphics SVG image. Due to improper validation of pixel cache dimensions during decoding, the application enters an infinite loop while processing the image. This...

Linux Distros Unpatched Vulnerability : CVE-2026-122006

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The activestorage gem before 8.1.4.1 for Ruby on Rails, when ImageMagick attachment processing occurs, can allow server read and write operations e.g., reading...

UBUNTU-CVE-2026-123273

ImageMagick before 7.1.2-35 and 6.9.13-60 contains an infinite loop vulnerability in the SVG decoder because QueueAuthenticPixelCacheNexus in MagickCore/cache.c fails to validate requested region width and height. Attackers can supply a crafted SVG image that repeatedly requests a non-advancing...

Linux Distros Unpatched Vulnerability : CVE-2026-123273

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ImageMagick before 7.1.2-35 and 6.9.13-60 contains an infinite loop vulnerability in the SVG decoder because QueueAuthenticPixelCacheNexus in MagickCore/cache.c...

CVE-2026-123273

ImageMagick before 7.1.2-35 and 6.9.13-60 contains an infinite loop vulnerability in the SVG decoder because QueueAuthenticPixelCacheNexus in MagickCore/cache.c fails to validate requested region width and height. Attackers can supply a crafted SVG image that repeatedly requests a non-advancing...

CVE-2026-123273 ImageMagick before 7.1.2-35 and 6.9.13-60 Infinite Loop via SVG Decoder

ImageMagick before 7.1.2-35 and 6.9.13-60 contains an infinite loop vulnerability in the SVG decoder because QueueAuthenticPixelCacheNexus in MagickCore/cache.c fails to validate requested region width and height. Attackers can supply a crafted SVG image that repeatedly requests a non-advancing...

EUVD-2026-117726

ImageMagick before 7.1.2-35 and 6.9.13-60 contains an infinite loop vulnerability in the SVG decoder because QueueAuthenticPixelCacheNexus in MagickCore/cache.c fails to validate requested region width and height. Attackers can supply a crafted SVG image that repeatedly requests a non-advancing...

CVE-2026-123273

Versions of ImageMagick before 7.1.2-35 and 6.9.13-60 are vulnerable to an infinite loop within the SVG decoder . The root cause is located in QueueAuthenticPixelCacheNexus in MagickCore/cache.c , which fails to validate the requested region's width and height. An attacker can provide a crafted S...

ROOT-OS-DEBIAN-13-CVE-2023-34152 CVE-2023-34152 in imagemagick - Patched by Root

Root has patched CVE-2023-34152 in the imagemagick package for Root:Debian:13. Multiple fixed versions available...

ROOT-OS-DEBIAN-13-CVE-2026-66011 CVE-2026-66011 in imagemagick - Patched by Root

Root has patched CVE-2026-66011 in the imagemagick package for Root:Debian:13. Multiple fixed versions available...

ROOT-OS-DEBIAN-13-CVE-2018-15607 CVE-2018-15607 in imagemagick - Patched by Root

Root has patched CVE-2018-15607 in the imagemagick package for Root:Debian:13. Multiple fixed versions available...

ROOT-OS-DEBIAN-13-CVE-2025-55160 CVE-2025-55160 in imagemagick - Patched by Root

Root has patched CVE-2025-55160 in the imagemagick package for Root:Debian:13. Multiple fixed versions available...

ROOT-OS-DEBIAN-13-CVE-2026-119123 CVE-2026-119123 in imagemagick - Patched by Root

Root has patched CVE-2026-119123 in the imagemagick package for Root:Debian:13. Multiple fixed versions available...

Exploit for CVE-2026-122006

cve-2026-122006-check Detection script for CVE-2026-122006...

CVE-2026-122006

A flaw was found in Active Storage. When processing file attachments using ImageMagick, the analyzer executes without an adequate security policy to restrict unintended operations. A remote attacker can exploit this vulnerability by uploading a crafted file, allowing unauthorized read and write...