EUVD-2026-107564

Pillow: PNG eXIf chunk makes EXIF parsing run in quadratic time...

CVE-2022-44268

CVE-2022-44268 This repository contains a Proof of Concept POC for a vulnerability in ImageMagick v. 7.1.0-49, a widely used open-source image manipulation library. The vulnerability allows an attacker to embed the content of an arbitrary file into a resized image when ImageMagick parses a PNG...

cve-2014-7911-exp

cve-2014-7911-exp exploit for cve-2014-7911; android; java deserialization ;system privilege;ace; This exp refers to retme7's exp,but the rop chain is different. And the most important part is Chunk Spray. Hope it will help. environment device:nexus5 os version:Android4.4.4...

tomcat-line-check

tomcat-line-check CVE-2026-24880 · GHSA-563x-q5rq-57qp —— Does Apache's upgrade to version 11.0.20, 10.1.52 or 9.0.116 actually apply to you? For most people it doesn't, and there are four different ways it doesn't apply. This tool scans your artifacts and tells you which one it is. java -jar...

CVE-2025-55182

CVE-2025-55182 - React Server Components RCE NOTE: Written by AI/Claude https://github.com/ejpir/CVE-2025-55182-bypass TL;DR CVE-2025-55182 is a critical RCE vulnerability in React's Flight Protocol. The attack chains path traversal + fake chunk injection + $B handler abuse to execute...

Windows-kernel-SegmentHeap-Aligned-Chunk-Confusion

This repository contains a PoC exploit using an exploitation technique called Aligned Chunk Confusion. The details on the technique can be found in the paper. This exploit leverages a heap overflow in the Windows kernel heap to elevate its privileges from Low to SYSTEM. The research The goal of t...

CVE-2025-55182-poc

CVE-2025-55182 React Flight protocol vulnerability allowing prototype chain traversal via chunk references. Testing against bullshit-react-project. Detection This is slightly out of date as the real PoC has now been revealed. Vite RSC : bash ./vite-detect.sh https://example.com Next.js : bash...

DEBIAN-CVE-2026-96643

Pillow is a Python imaging library. From 11.0.0 until 13.0.0, Exif.load in src/PIL/Image.py repeatedly slices the remaining EXIF data while it begins with the six-byte Exif header. src/PIL/PngImagePlugin.py accepts an uncapped PNG eXIf chunk, so a file filled with repeated headers causes a new...

fhex

Fhex - A Full-Featured HexEditor This project is born with the aim to develop a lightweight, but useful tool. The reason is that the existing hex editors have some different limitations e.g. too many dependencies, missing hex coloring features, etc.. This project is based on qhexedit2 , capstone...

CVE-2023-21036

Acropalypse detection and sanitization tools You can use the python script acropalypsedetection.py or the yara rule acropalypsedetection.yar to detect cropped images affected by acropalypse: $ for i in testimgs/; do python3 acropalypsedetection.py $i; done testimgs/windows10snippingtool1cropped.p...

CVE-2025-55182-POC

CVE-2025-55182 / CVE-2025-66478 Vulnerability Reproduction Environment This is a minimal MVP for reproducing the React2Shell CVE-2025-55182 and Next.js RSC RCE CVE-2025-66478 vulnerabilities. ⚠️ Warning This project is intended for security research and educational purposes only. Do not use it in...

CVE-2025-55182-RCE-Exploit

POC for CVE-2025-55182 – Next.js 16.0.6 Remote Code Execution This repository contains a working proof-of-concept POC for CVE-2025-55182 , a critical deserialization vulnerability affecting Next.js 16.0.6. The exploit abuses $@ chunk deserialization and Chunk.prototype.then to gain full control...

CVE-2026-96643

Pillow is a Python imaging library. From 11.0.0 until 13.0.0, Exif.load in src/PIL/Image.py repeatedly slices the remaining EXIF data while it begins with the six-byte Exif header. src/PIL/PngImagePlugin.py accepts an uncapped PNG eXIf chunk, so a file filled with repeated headers causes a new...

CVE-2026-96643

The Pillow Python imaging library (versions 11.0.0 through 13.0.0 ) is vulnerable to an inefficient algorithmic complexity issue (CWE-407 ). The root cause resides in src/PIL/Image.py, where Exif.load() repeatedly slices EXIF data starting with a six-byte header. Because src/PIL/PngImagePlugin.py...

CVE-2026-96643

Pillow is a Python imaging library. From 11.0.0 until 13.0.0, Exif.load in src/PIL/Image.py repeatedly slices the remaining EXIF data while it begins with the six-byte Exif header. src/PIL/PngImagePlugin.py accepts an uncapped PNG eXIf chunk, so a file filled with repeated headers causes a new...

CVE-2026-96643 Pillow: PNG eXIf chunk makes EXIF parsing run in quadratic time

Pillow is a Python imaging library. From 11.0.0 until 13.0.0, Exif.load in src/PIL/Image.py repeatedly slices the remaining EXIF data while it begins with the six-byte Exif header. src/PIL/PngImagePlugin.py accepts an uncapped PNG eXIf chunk, so a file filled with repeated headers causes a new...

CVE-2025-55182-research

CVE-2025-55182 - React Server Components RCE NOTE: Written by AI/Claude https://github.com/ejpir/CVE-2025-55182-bypass TL;DR CVE-2025-55182 is a critical RCE vulnerability in React's Flight Protocol. The attack chains path traversal + fake chunk injection + $B handler abuse to execute...

CVE-2025-55315-detection-playground

Here are some tests that can be performed against these services to observe different behavior on GET/POST routes between the patched and unpatched versions of Kestrel. GET against unpatched sends 200 and socket remains open printf 'GET / HTTP/1.1\r\nHost: localhost\r\nTransfer-Encoding:...

React2Shell-CVE-2025-55182-original-poc

Original PoCs for CVE-2025-55182 As public PoCs are circulating and Google's Scanner uses a variation of my original submitted PoC, it's finally a responsible time to share my original PoCs for React2Shell. This repository contains 3 PoCs: 00-very-first-rce-poc - the very first PoC I managed to...

PT-2026-120821

Pillow is a Python imaging library. From 11.0.0 until 13.0.0, Exif.load in src/PIL/Image.py repeatedly slices the remaining EXIF data while it begins with the six-byte Exif header. src/PIL/PngImagePlugin.py accepts an uncapped PNG eXIf chunk, so a file filled with repeated headers causes a new...