Lucene search
+L

298 matches found

OSV
OSV
•added 2025/05/04 10:12 a.m.•15 views

MAL-2025-3597 Malicious code in msl-example-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0c52efb23287b19a22a63e448d5f7075ec0f2e9410801d21797a93a6caf6180b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7.2AI score
SaveExploits0References1
Imperva Blog
Imperva Blog
•added 2024/10/22 1:00 p.m.•216 views

ShadyShader: Crashing Apple Devices with a Single Click

Introduction A while ago, we discovered an interesting vulnerability in the GPU’s drivers of iPhones, iPads, and macOS computers with M-series chips. Dubbed ShadyShader, this flaw allows a specially crafted shader program to overwhelm Apple’s GPU, causing repeated freezes that ultimately lead to ...

6.4AI score0.00906EPSS
SaveExploits0
Packet Storm
Packet Storm
•added 2024/10/11 12:00 a.m.•337 views

Craft CMS 4.4.14 Code Injection

============================================================================================================================================= | Title : Craft CMS 4.4.14 Code Injection Vulnerability | | Author : indoushka | | Tested on : windows 10 FrPro / browser : Mozilla firefox 130.0.2 64 bits...

7.4AI score
SaveExploits0
Packet Storm
Packet Storm
•added 2023/12/22 12:00 a.m.•655 views

Craft CMS 4.4.14 Remote Code Execution

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Craft CMS unauthenticated Remote Code Execution RCE', 'Description' = %q This module exploits Remote Code Execution vulnerability CVE-2023-41892 ...

10CVSS7.4AI score0.94215EPSS
SaveExploits10
Metasploit
Metasploit
•added 2023/09/13 12:00 a.m.•769 views

Craft CMS unauthenticated Remote Code Execution (RCE)

This module exploits Remote Code Execution vulnerability CVE-2023-41892 in Craft CMS which is a popular content management system. Craft CMS versions between 4.0.0-RC1 - 4.4.14 are affected by this vulnerability allowing attackers to execute arbitrary code remotely, potentially compromising the...

10CVSS9.1AI score0.94215EPSS
SaveExploits10
SUSE CVE
SUSE CVE
•added 2023/02/15 5:04 a.m.•8 views

SUSE CVE-2016-3716

The MSL coder in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allows remote attackers to move arbitrary files via a crafted image...

3.3CVSS7.3AI score0.11338EPSS
SaveExploits5References10
RedHat Linux
RedHat Linux
•added 2020/03/31 8:15 p.m.•18 views

ImageMagick: memory leak in WriteMSLImage of coders/msl.c

There is a memory leak in the function WriteMSLImage of coders/msl.c in ImageMagick 7.0.8-13 Q16, and the function ProcessMSLScript of coders/msl.c in GraphicsMagick before 1.3.31...

6.5CVSS5.8AI score0.02019EPSS
SaveExploits1References4
CNVD
CNVD
•added 2018/10/23 12:00 a.m.•7 views

ImageMagick memory leak vulnerability (CNVD-2018-21518)

ImageMagick is a set of open-source image processing software from the U.S. company ImageMagick Studio. The software can read, convert and write pictures in a variety of formats. A memory leak vulnerability exists in the 'WriteMSLImage' function in the coders/msl.c file in ImageMagick version...

6.5CVSS7.4AI score0.02019EPSS
SaveExploits1References1
CNVD
CNVD
•added 2017/12/28 12:00 a.m.•12 views

ImageMagick memory leak vulnerability (CNVD-2018-00101)

ImageMagick is a software for creating, editing, and compositing images that can read, convert, and write images in many formats. A memory leak vulnerability exists in coders/msl.c in ImageMagick version 7.0.7-17 Q16 x8664. The vulnerability is due to the program failing to properly handle...

6.5CVSS6.7AI score0.02516EPSS
SaveExploits0References1
OSV
OSV
•added 2017/12/27 5:08 p.m.•4 views

DEBIAN-CVE-2017-17934

ImageMagick 7.0.7-17 Q16 x8664 has memory leaks in coders/msl.c, related to MSLPopImage and ProcessMSLScript, and associated with mishandling of MSLPushImage calls...

6.5CVSS7.7AI score0.02516EPSS
SaveExploits0References1
OSV
OSV
•added 2017/12/27 12:00 a.m.•9 views

UBUNTU-CVE-2017-17934

ImageMagick 7.0.7-17 Q16 x8664 has memory leaks in coders/msl.c, related to MSLPopImage and ProcessMSLScript, and associated with mishandling of MSLPushImage calls...

6.5CVSS6.9AI score0.02516EPSS
SaveExploits0References3
Openbugbounty
Openbugbounty
•added 2017/09/29 7:27 p.m.•16 views

sealevel.info XSS vulnerability

Vulnerable URL: http://sealevel.info/MSLgraph.php?id=13'" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.12.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 3448409 VIP website status:| No Coordinated Disclosure Timeline: Descriptio...

6.3AI score
SaveExploits0
OSV
OSV
•added 2017/09/04 11:29 p.m.•7 views

DEBIAN-CVE-2017-14139

ImageMagick 7.0.6-2 has a memory leak vulnerability in WriteMSLImage in coders/msl.c...

6.5CVSS6.7AI score0.01305EPSS
SaveExploits1References1
BDU FSTEC
BDU FSTEC
•added 2017/08/10 12:00 a.m.•13 views

The vulnerability of the ProcessMSLScript function in the coder’s msl.c file of the console-based graphic editor ImageMagick allows a hacker to trigger a service failure.

The vulnerability of the ProcessMSLScript function in the code “coders/msl.c” of the console-based graphic editor ImageMagick arises from the execution of an operation outside the buffer in memory. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause a service...

4.3CVSS7.6AI score0.02072EPSS
SaveExploits0References3Affected Software1
Veracode
Veracode
•added 2017/04/17 11:52 a.m.•29 views

Denial Of Service (DoS)

ImageMagick is vulnerable to denial of service DoS attacks. The MSL interpreter in coders/msl.c allows remote attackers to cause segmentation fault and application crashes using a malicious XML file...

5.5CVSS6.7AI score0.01889EPSS
SaveExploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
•added 2017/04/13 12:00 a.m.•15 views

The vulnerability of the OpenSUSE Leap operating system allows a hacker to trigger a service failure.

The vulnerability of the MSL interpreter in the OpenSUSE Leap operating system exists due to insufficient checking of input data. Exploiting this vulnerability allows a malicious actor, operating remotely, to cause service failures segmentation errors and application termination by using a...

4.3CVSS6.6AI score0.01889EPSS
SaveExploits0References8
NVD
NVD
•added 2017/03/02 9:59 p.m.•27 views

CVE-2016-10068

The MSL interpreter in ImageMagick before 6.9.6-4 allows remote attackers to cause a denial of service segmentation fault and application crash via a crafted XML file...

5.5CVSS6.8AI score0.01889EPSS
SaveExploits0References7
UbuntuCve
UbuntuCve
•added 2017/03/02 9:59 p.m.•29 views

CVE-2016-10068

The MSL interpreter in ImageMagick before 6.9.6-4 allows remote attackers to cause a denial of service segmentation fault and application crash via a crafted XML file...

5.5CVSS6.8AI score0.01889EPSS
SaveExploits0References3
OSV
OSV
•added 2017/03/02 9:59 p.m.•9 views

DEBIAN-CVE-2016-10068

The MSL interpreter in ImageMagick before 6.9.6-4 allows remote attackers to cause a denial of service segmentation fault and application crash via a crafted XML file...

5.5CVSS7AI score0.01889EPSS
SaveExploits0References1
Prion
Prion
•added 2017/03/02 9:59 p.m.•20 views

Design/Logic Flaw

The MSL interpreter in ImageMagick before 6.9.6-4 allows remote attackers to cause a denial of service segmentation fault and application crash via a crafted XML file...

4.3CVSS6.8AI score0.01889EPSS
SaveExploits0References7Affected Software2
Rows per page
Query Builder