7 matches found
AntiCropalypse
2023年3月31日更新 从今天起，Discord 的 CDN 会在传输过程中剥离 PNG 的尾部数据，这意味着即使是旧的上传文件现在也不会受到 aCropalypse 漏洞的影响。因此，这个机器人不再必要，但它将继续在线运行，以便用户 下载其已归档的图像。 该机器人的原始 README 可在下方找到。 AntiCropalypse 一个 Discord 机器人，用于搜索并删除易受 aCropalypse 漏洞（CVE-2023-21036 和 CVE-2023-28303）影响的图像。 你可以在此处了解更多关于该项目的信息，并将公共机器人添加到你的服务器。 自行托管 该机器人使用...
SnipRecover-CLI
SnipRecover CLI 检测并恢复受 CVE-2023-28303 影响的 Windows 截图工具 PNG 截图 SnipRecover CLI 是一款极简、无依赖的命令行工具，旨在： 检测 因 Windows 截图工具漏洞（CVE‑2023‑28303）而被修改的 PNG 文件。 恢复 原始图像，通过恢复附加在 IEND 块之后的压缩数据。 默认情况下，恢复后的图像使用 RGBA ，分辨率为 1920×1080 ；如果未指定输出路径，工具将写入 restored-.png。 🧠 理论背景 根据 PNG 规范（ISO/IEC 15948），所有图像数据（IDAT...
CVE-2023-28303
CVE-2023-28303 affects Windows Snipping Tool and Snip & Sketch (Windows 10/11). The issue is an information-disclosure vulnerability where parts of a cropped image that were intended to be removed are not fully deleted and can be restored when saved. Root cause: incomplete removal of cropped imag...
CVE-2023-28303 Windows Snipping Tool Information Disclosure Vulnerability
...
Windows Snip & Sketch/ Snipping Tool CVE-2023-28303 (Acropalypse)
An information disclosure vulnerability exists in Windows Snip & Sketch Windows 10 and Snipping Tool Windows 11 where parts of a cropped image that were to be removed are not completely deleted and can be restored if saved to the cropped image file. Note that Nessus has not tested for this issue...
Microsoft Issues Patch for aCropalypse Privacy Flaw in Windows Screenshot Tools
Microsoft has released an out-of-band update to address a privacy-defeating flaw in its screenshot editing tool for Windows 10 and Windows 11. The issue, dubbed aCropalypse, could enable malicious actors to recover edited portions of screenshots, potentially revealing sensitive information that m...
