218 matches found
CVE-2021-22204
CVE-2021-22204 Description Improper neutralization of user data in the DjVu file format in ExifTool versions 7.44 and up allows arbitrary code execution when parsing the malicious image Script Script Link Script usage: System cmd: bash CVE-2021-2204.sh "system'id'" happy.jpg Reverse shell bash...
CVE-2021-22204
CVE-2021-22204 Summary of the CVE Improper sanitization of user data in the DjVu file format in ExifTool versions 7.44 and up allows arbitrary code execution when parsing the malicious image. Affected Versions Version 7.44 - 12.23 Anomalies Dependencies: djvulibre-bin exiftool Calls these three...
CVE-2021-22204
CVE-2021-22204 - ExifTool Arbitrary Code Execution An upgraded proof-of-concept for CVE-2021-22204, a vulnerability in ExifTool versions 7.44 through 12.23 that allows arbitrary code execution when processing malicious DjVu files. Credit This is derivative work. The vulnerability and the original...
CVE-2021-22205
CVE-2021-22205 - GitLab 인증되지 않은 원격 코드 실행 CVE-2021-22205 는 GitLab Community Edition CE 및 Enterprise Edition EE에 영향을 미치는 치명적인 원격 코드 실행RCE 취약점입니다. 이 취약점은 타사 유틸리티 ExifTool 이 처리하는 업로드된 이미지 파일의 부적절한 검증에서 비롯됩니다. 공격자는 악의적인 파일을 조작하여 GitLab 서버에서 임의 명령 실행을 유발할 수 있습니다. 이 취약점은 CVSS 점수 10.0 심각을 받았으며, 실제 환경에서...
Astra Linux – Vulnerability in DjVuLibre
A flaw was discovered in djvulibre-3.5.28 and earlier. A heap buffer overflow occurs in the function DJVU::GBitmap::decode, due to a malicious djvu file, which may lead to the application crashing and other related issues...
Astra Linux – Vulnerability in DjVuLibre
A flaw was discovered in djvulibre-3.5.28 and earlier. A stack overflow occurred in the function DJVU::DjVuDocument::getdjvufile, due to a malicious djvu file, which could lead to the application crashing and other related issues...
Astra Linux – Vulnerability in DjVuLibre
A flaw was discovered in djvulibre-3.5.28 and earlier. A malicious read operation in the function DJVU::DataPool::hasdata, through a crafted djvu file, may cause the application to crash and lead to other issues...
Astra Linux – Vulnerability in DjVuLibre
In DjVuLibre 3.5.27, the DjVmDir.cpp file within the DJVU reader component allows attackers to cause a denial-of-service attack resulting in a crash of the application by creating a DJVU file that triggers a heap-based buffer overflow attack in the GStringRep::strdup function within...
Astra Linux – Vulnerability in DjVuLibre
A flaw was discovered in djvulibre-3.5.28 and earlier. An integer overflow in the render function in tools/ddjvu, through a crafted djvu file, may cause the application to crash and lead to other issues...
EUVD-2021-19338
Malware in sbrugna...
EUVD-2017-6049
Malware in sbrugna...
EUVD-2017-6192
Malware in sbrugna...
EUVD-2017-6059
Malware in sbrugna...
EUVD-2021-26820
Malware in sbrugna...
EUVD-2017-4013
Malware in sbrugna...
EUVD-2017-4014
Malware in sbrugna...
EUVD-2021-19336
Malware in sbrugna...
EUVD-2017-6055
Malware in sbrugna...