4 matches found
CVE-2021-22204
CVE-2021-22204 - ExifTool 任意代码执行 这是针对 CVE-2021-22204 的升级版概念验证(PoC),该漏洞影响 ExifTool 7.44 至 12.23 版本,在处理恶意 DjVu 文件时可导致任意代码执行。 致谢 本文为衍生作品。该漏洞及原始利用代码并非本人所发现。 角色| 人员 ---|--- 漏洞发现者| William Bowling @wcbowling,通过 GitLab 漏洞赏金计划提交 — 2021 年 4 月 原始 PoC 作者| UNICORD NicPWNs & Dev-Yeoj 本仓库修改者| d4ytox 描述 ExifToo...
EUVD-2024-33847
Malicious code in bioql PyPI...
CVE-2024-11521 IrfanView DJVU File Parsing Use-After-Free Remote Code Execution Vulnerability
IrfanView DJVU File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or...
IrfanView DJVU File Parsing Use-After-Free Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of DJVU file...