93 matches found
CVE-2023-36664
CVE-2023-36664 : Ghostscript 远程代码执行 CVE-2023-36664 的概念验证。 使用方法 将载荷插入 .eps 文件： python3 poc.py -f "filename" --payload "command" python3 poc.py -f file.eps --payload firefox 将反弹 Shell 载荷插入 .eps 文件： python3 poc.py -f "filename" --revshell --ip "ip" --port "port" python3 poc.py -f file.eps --revshell...
CVE-2017-0261
CVE-2017-0261及利用样本分析 0x01 漏洞描述 成因：打开Office文档时，FLTLDR.EXE将被用于渲染包含该漏洞的嵌入式EPS文件。该文件是由PostScript语言编写而成，可以被攻击者通过"save-restore"操作利用，其本质为一UAF漏洞。 当用户打开包含格式错误的图形图像的文件时，或者当用户将格式错误的图形图像插入到 Office 文件时，该漏洞可能会受到利用。 影响版本：Microsoft Office 2010 Service Pack 2、Microsoft Office 2013 Service Pack 1、Microsoft Office...
CVE-2024-29510
原始研究及POC代码：https://codeanlabs.com/blog/research/cve-2024-29510-ghostscript-format-string-exploitation/ 注意：除执行的命令外，我未对POC做任何修改。全部功劳归功于 Codean Labs 的 Thomas Rinsma 的出色研究及POC。 本地场景 1. 封装在stager脚本中，用于下载并运行检查脚本以判断主机是否存在漏洞 2. 修改POC以下载并执行Python3反弹Shell 3. Stager和反弹Shell通过标准输入下载并执行 4. POC会在 /tmp...
JLSEC-2026-1314 Exiv2 Segmentation Faults in Exiv2::EpsImage::writeMetadata() via crafted EPS file
Impact An out-of-bounds read was found in Exiv2 versions v0.28.5 and earlier. Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. The out-of-bounds read is triggered when Exiv2 is used to write metadata into a crafted image...
PYSEC-2026-1354 Exiv2 Segmentation Faults in Exiv2::EpsImage::writeMetadata() via crafted EPS file
Impact An out-of-bounds read was found in Exiv2 versions v0.28.5 and earlier. Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. The out-of-bounds read is triggered when Exiv2 is used to write metadata into a crafted image...
EUVD-2002-2026
Malware in sbrugna...
EUVD-2020-8265
Malware in sbrugna...
EUVD-2020-9378
Malware in sbrugna...
EUVD-2012-5950
Malware in sbrugna...
EUVD-2021-0184
Malware in sbrugna...
EUVD-2019-4830
Malware in sbrugna...
CVE-2025-54080
CVE-2025-54080 (Exiv2) is an out-of-bounds read vulnerability in Exiv2 up to version 0.28.5 that is triggered when writing metadata to a crafted image. The issue can cause a denial of service by crashing Exiv2, when a user runs the tool on a manipulated image file. The root cause is an out-of-bou...
CVE-2023-44464
pretix before 2023.7.2 allows Pillow to parse EPS files...
CVE-2020-8883
This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit Studio Photo 3.6.6.916. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists with...
CVE-2020-17425
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Studio Photo 3.6.6.922. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...
CVE-2024-41853 Indesign 2024 EPS File Parsing Heap Memory Corruption Remote Code Execution Vulnerability
InDesign Desktop versions ID19.4, ID18.5.2 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...
CVE-2024-39392
Adobe InDesign Desktop versions ID18.5.2, ID19.3 and earlier are affected by a Heap-based Buffer Overflow that can lead to arbitrary code execution in the context of the current user. Exploitation requires user interaction (opening a malicious file). Affects InDesign on Windows/macOS per sources....
Exploit for Files or Directories Accessible to External Parties in Artifex Ghostscript
CVE-2023-36664 : Ghostscript remote code execution Proof of c...
