Lucene search
+L

2853 matches found

Kitploit
Kitploit
added 2026/09/15 1:56 a.m.6 views

CVE-2019-14811-in-pdf-exploit

CVE-2019-14811 GhostScript PDF preview Exploit PoC This exploit targets CVE-2019-14811 in GS environments where PostScript output is not reflected, but is executed such as PDF previews via png images. Exploit renders commands directly in pngXXm preview, it is based on...

7.8CVSS7.5AI score0.03746EPSS
SaveExploits1References1
Kitploit
Kitploit
added 2026/09/14 11:43 p.m.5 views

ghostscript-CVE-2023-43115

ghostscript-CVE-2023-43115 A small write-up with examples to help understand CVE-2023-43115. !WARNING I wrote this mainly for myself to understand the problem and to learn about cybersecurity. So there may be errors. The Problem To utilize the IJS device Improved Inkjet Printing, Ghostscript is...

8.8CVSS7.8AI score0.0468EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/09/14 7:51 p.m.9 views

CVE-2017-0261

CVE-2017-0261 and Exploit Sample Analysis 0x01 Vulnerability Description Cause: When opening an Office document, FLTLDR.EXE is used to render an embedded EPS file containing the vulnerability. The file is written in PostScript language and can be exploited by an attacker through a "save-restore"...

9.3CVSS7.8AI score0.7813EPSS
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/14 7:00 p.m.10 views

PIL-RCE-Ghostscript-CVE-2018-16509

Ejecución Remota de Comandos de Shell a través de Ghostscript CVE-2018-16509 en Python PIL/Pillow Inspirado en https://github.com/ysrc/PIL-RCE-By-GhostButt RCE en PIL/Pillow a través de CVE-2017-8291. Este entorno docker utiliza una versión más reciente de Ghostscript v9.23 y un exploit más nuevo...

9.3CVSS7.8AI score0.92499EPSS
SaveExploits4References1
Kitploit
Kitploit
added 2026/09/14 2:09 p.m.7 views

PRET

PRET - Kit de Explotación de Impresoras ¿Tu impresora es segura? Verifícalo antes de que alguien más lo haga... PRET es una nueva herramienta para pruebas de seguridad de impresoras desarrollada en el marco de una Tesis de Maestría en la Universidad del Ruhr en Bochum. Se conecta a un dispositivo...

5.8AI score
SaveExploits0
AstraLinux
AstraLinux
added 2026/09/14 12:41 p.m.9 views

Astra Linux – Vulnerability in imagemagick

ImageMagick is free software available as a ready-to-run binary distribution or as source code that you can use, copy, modify, and distribute in both open and proprietary applications. In affected versions, Postscript files may be read and written when specifically excluded by a module policy in...

4.4CVSS6AI score0.00353EPSS
SaveExploits0References2
Kitploit
Kitploit
added 2026/09/08 9:28 p.m.9 views

CVE-2018-16509

CVE-2018-16509 Docker Playground "An issue was discovered in Artifex Ghostscript before 9.24. Incorrect "restoration of privilege" checking during handling of /invalidaccess exceptions could be used by attackers able to supply crafted PostScript to execute code using the "pipe" instruction."...

9.3CVSS7.3AI score0.92499EPSS
SaveExploits4
AstraLinux
AstraLinux
added 2026/08/24 10:19 a.m.8 views

Astra Linux – Vulnerability in pillow

A issue was discovered in Pillow prior to version 8.2.0. For EPS data, the readline implementation used in EPSImageFile has to handle any combination of \r and \n as line endings. This implementation uses a quadratic method of accumulating lines while searching for a line ending. A malicious EPS...

7.5CVSS6.6AI score0.02338EPSS
SaveExploits0References2
AstraLinux
AstraLinux
added 2026/08/24 10:19 a.m.7 views

Astra Linux – Vulnerability in GhostScript

In Artifex Ghostscript version 10.01.2, the gdevijs.c file in GhostPDL can lead to remote code execution through crafted PostScript documents. This occurs because the IJS device can be switched, or the IjsServer parameter can be changed, after SAFER has been activated. NOTE: It is a documented ri...

8.8CVSS8.6AI score0.0468EPSS
SaveExploits0References2
AstraLinux
AstraLinux
added 2026/08/24 10:19 a.m.6 views

Astra Linux – Vulnerability in GhostScript

A issue was discovered in Artifex Ghostscript prior to version 10.03.1. The file contrib/opvp/gdevopvp.c allows for arbitrary code execution through a custom Driver library, which can be exploited using a crafted PostScript document. This occurs because the Driver parameter for opvp and oprp...

8.8CVSS8.3AI score0.01425EPSS
SaveExploits0References2
AstraLinux
AstraLinux
added 2026/08/24 10:19 a.m.12 views

Astra Linux – Vulnerability in cups

Due to a failure in validating the length provided by a PPD PostScript document crafted by an attacker, CUPS and libppd are vulnerable to a heap-based buffer overflow, potentially leading to code execution. This issue has been fixed in CUPS version 2.4.7, released in September 2023...

7CVSS7.3AI score0.00663EPSS
SaveExploits2References2
AstraLinux
AstraLinux
added 2026/08/24 10:19 a.m.17 views

Astra Linux – Vulnerability in GhostScript

In Artifex Ghostscript version 10.01.0, there is a buffer overflow that may lead to corruption of data within the PostScript interpreter, specifically in the bcp/sbcp.c file. This issue affects functions such as BCPEncode, BCPDecode, TBCPEncode, and TBCPDecode. If the write buffer is filled just...

9.8CVSS8.4AI score0.06341EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
added 2026/08/19 12:00 a.m.51 views

Linux Distros Unpatched Vulnerability : CVE-2026-65640

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - WordPress is vulnerable to a remote code execution vulnerability via malicious Postscript file upload by an Author level user or higher. Prerequisites: Imagick...

8.8CVSS7.6AI score0.01947EPSS
SaveExploits0References3
NVD
NVD
added 2026/08/17 9:16 p.m.15 views

CVE-2026-65640

WordPress is vulnerable to a remote code execution vulnerability via malicious Postscript file upload by an Author level user or higher. Prerequisites: Imagick and Ghostscript in use on the server A malicious user with the uploadfiles capability This issue affects all versions of WordPress. Versi...

8.8CVSS0.01947EPSS
SaveExploits0References1
OSV
OSV
added 2026/08/17 9:16 p.m.13 views

DEBIAN-CVE-2026-65640

WordPress is vulnerable to a remote code execution vulnerability via malicious Postscript file upload by an Author level user or higher. Prerequisites: Imagick and Ghostscript in use on the server A malicious user with the uploadfiles capability This issue affects all versions of WordPress. Versi...

8.8CVSS8.7AI score0.01947EPSS
SaveExploits0References1
Debian CVE
Debian CVE
added 2026/08/17 8:55 p.m.18 views

CVE-2026-65640

WordPress is vulnerable to a remote code execution vulnerability via malicious Postscript file upload by an Author level user or higher. Prerequisites: Imagick and Ghostscript in use on the server A malicious user with the uploadfiles capability This issue affects all versions of WordPress. Versi...

8.8CVSS6.5AI score0.01947EPSS
SaveExploits0
CVE
CVE
added 2026/08/17 8:55 p.m.321 views

CVE-2026-65640

Affected: WordPress core

8.8CVSS8.7AI score0.01947EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/08/17 8:55 p.m.36 views

CVE-2026-65640

WordPress is vulnerable to a remote code execution vulnerability via malicious Postscript file upload by an Author level user or higher. Prerequisites: Imagick and Ghostscript in use on the server A malicious user with the uploadfiles capability This issue affects all versions of WordPress. Versi...

8.8CVSS0.01947EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/08/14 12:00 a.m.16 views

PT-2026-71974

Name of the Vulnerable Software and Affected Versions WordPress versions prior to 7.0.4 Description An authenticated user with Author level privileges or higher can achieve remote code execution by uploading a malicious Postscript file. This issue occurs when the server utilizes Imagick and...

8.8CVSS8.7AI score0.01947EPSS
SaveExploits0References9
Tenable Nessus
Tenable Nessus
added 2026/08/10 12:00 a.m.10 views

MiracleLinux 9 : cups-2.3.3op2-39.el9_8 (AXSA:2026-1504:10)

The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2026-1504:10 advisory. cups: OpenPrinting CUPS: Shared PostScript queue lets anonymous Print-Job requests reach lp code execution over the network CVE-2026-34980 Tenable has...

7.5CVSS6.8AI score0.00502EPSS
SaveExploits2References2
Rows per page
Query Builder