CVE-2023-34152

This PoC exploits CVE-2023-34152 in ImageMagick by crafting a malicious PNG filename that executes a reverse shell when processed. It uses command injection via shell metacharacters in the filename to decode and execute a base64-encoded payload.

This PoC exploits CVE-2023-34152, an arbitrary command execution vulnerability in ImageMagick 6.9.6-4, by crafting a malicious PNG filename that triggers shell command injection when processed. The exploit generates a reverse shell payload embedded in the filename, leveraging incomplete sanitization of special characters like backticks and quotes.