Serious ImageMagick Zero-Day Vulnerabilities

DumpBrowserSecrets is a post‑exploitation credential‑harvesting tool that extracts saved passwords, session cookies, OAuth refresh tokens, credit card data and browsing artifacts from Chrome, Edge, Brave, Opera (and variants), Vivaldi and Firefox. It bypasses Chrome's App‑Bound Encryption by spawning a headless Chromium process and injecting a DLL to call the IElevator COM interface, uses DPAPI/NSS handling for other browsers, includes several evasion techniques, and is intended for red‑team/assumed‑breach testing but can be abused for rapid cloud account takeover and lateral movement.