247 matches found
ElectronVulnerableVersion
Find Electron Apps Vulnerable to CVE-2023-4863 / CVE-2023-5129 This PowerShell script downloads Sysinternals Strings, recursively searches for strings within all .exe files across all drives, and compares the Electron version found with known patched versions below to determine vulnerability to...
CVE-2023-4863
all credit goes to DARKNAVY's script. This is just a modified version with the OFFSET and VALUE constants added to the top of the file to make it easier to adjust...
BAD-WEBP-CVE-2023-4863
BAD-WEBP-CVE-2023-4863 BAD-WEBP-CVE-2023-4863...
libwebp-checker
中文 | EN Herramientas de verificación de dependencias libwebp CVE-2023-4863 Esta herramienta verifica si la aplicación o el proceso de tu servidor se ve afectado por el desbordamiento de búfer en el montón de libwebp CVE-2023-4863 versiones posteriores a 0.5.0. Ejecuta este script en tu entorno de...
Find-VulnerableElectronVersion
Find-VulnerableElectronVersion Scans an executable and determines if it was wrapped in an Electron version vulnerable to the Chromium vulnerability CVE-2023-4863/ CVE-2023-5129 using the Sysinternals tool Strings. Only supported on Windows devices. Requires Sysinternals to be installed:...
CVE-2023-4863
CVE-2023-4863/CVE-2023-41064 A POC for CVE-2023-4863. NOT an exploit Shout to @benhawkes who discovered the right set of codelengths to trigger this vulnerability! Please consult Ben's blog post for more information! https://blog.isosceles.com/the-webp-0day/...
NotEnough
Herramienta de hackeo de tablas de Huffman Esta herramienta calcula un histograma de Huffman canónico engañoso, capaz de provocar una escritura OOB fuera de los límites en la biblioteca libwebp vulnerable es decir, libwebp = 1.3.1. Esta vulnerabilidad se conoce como CVE-2023-4863 o CVE-2023-41064...
cve-2023-4863-analysis
CVE-2023-4863 libwebp Training and Defense Analysis Project Advisor Information Full Name| GitHub| Email| LinkedIn| Website ---|---|---|---|--- Keyvan Arasteh| Student Information Full Name| Student ID ---|--- Batuhan Seydi Çelik| 25201006 Course Information Course Name| Course Code|...
lab-cve-2023-4863
CVE-2023-4863 — Libwebp-Exploitationslabor Reproduktion von CVE-2023-4863 Heap-Buffer-Overflow in libwebp in einer vollständig isolierten und automatisierten Docker-Umgebung. Basierend auf der Übung des Moduls „Hacking Ético“ von CEFIRE. Was dieses Lab macht Es startet acht Container in einem...
webp-CVE-2023-4863
libwebp CVE-2023-4863 Una vulnerabilità per hackerare il mondo - CVE-2023-4863 Trovare la vulnerabilità .webp in 8 secondi Fuzzing con AFL++...
Photon OS 5.0: Libwebp PHSA-2023-5.0-91-0097
An update of the libwebp package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2023-5.0-91-0097. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...
Photon OS 5.0: Chromium PHSA-2023-5.0-91-0160
An update of the chromium package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2023-5.0-91-0160. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...
EUVD-2026-48614
Image::WebP versions through 0.2 for Perl bundle a vulnerable version of libwebp. Image::WebP does not link to the system libwebp. Instead, it uses a bundled copy of libwebp 0.3.0 released 2013-03-20. That version has multiple known vulnerabilities, including CVE-2023-4863. Any caller that decode...
CVE-2026-58586 Image::WebP versions before 0.3.0 for Perl bundle a vulnerable version of libwebp
Image::WebP versions before 0.3.0 for Perl bundle a vulnerable version of libwebp. Image::WebP does not link to the system libwebp. Instead, it uses a bundled copy of libwebp 0.3.0 released 2013-03-20. That version has multiple known vulnerabilities, including CVE-2023-4863. Any caller that decod...
afl-5.00c-1.1 on GA media (moderate)
afl-5.00c-1.1 on GA media Announcement ID: openSUSE-SU-2026:10991-1 Rating: moderate Cross-References: CVE-2023-4863 CVSS scores: CVE-2023-4863 SUSE : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can now be...
NewStart CGSL MAIN 6.06 (SP) : libwebp Vulnerability (NS-SA-2026-0031)
The remote NewStart CGSL host, running version MAIN 6.06 SP, has libwebp packages installed that are affected by a vulnerability: - Heap buffer overflow in libwebp in Google Chrome prior to 116.0.5845.187 and libwebp 1.3.2 allowed a remote attacker to perform an out of bounds memory write via a...
MiracleLinux 9 : firefox-102.15.1-1.el9.ML.1 (AXSA:2023-6450:36)
The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2023-6450:36 advisory. libwebp: Heap buffer overflow in WebP Codec CVE-2023-4863 Tenable has extracted the preceding description block directly from the MiracleLinux security...
MiracleLinux 9 : thunderbird-102.15.1-1.el9.ML.1 (AXSA:2023-6449:27)
The remote MiracleLinux 9 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2023-6449:27 advisory. libwebp: Heap buffer overflow in WebP Codec CVE-2023-4863 Tenable has extracted the preceding description block directly from the MiracleLinux security...
MiracleLinux 8 : thunderbird-102.15.1-1.el8.ML.1 (AXSA:2023-6445:26)
The remote MiracleLinux 8 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2023-6445:26 advisory. libwebp: Heap buffer overflow in WebP Codec CVE-2023-4863 Tenable has extracted the preceding description block directly from the MiracleLinux security...
MiracleLinux 7 : firefox-102.15.1-1.0.1.el7.AXS7 (AXSA:2023-6415:34)
The remote MiracleLinux 7 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2023-6415:34 advisory. libwebp: Heap buffer overflow in WebP Codec CVE-2023-4863 Tenable has extracted the preceding description block directly from the MiracleLinux security...