CVE-2023-36664

CVE-2023-36664 : Ghostscript 원격 코드 실행 CVE-2023-36664에 대한 개념 증명 코드입니다. 사용법 .eps 파일에 페이로드를 삽입하려면: root@kitploit: python3 poc.py -f "파일이름" --payload "명령어" python3 poc.py -f file.eps --payload firefox .eps 파일에 리버스 셸 페이로드를 삽입하려면: root@kitploit: python3 poc.py -f "파일이름" --revshell --ip "IP" --port "포트"...

CVE-2017-0261

CVE-2017-0261 및 악용 샘플 분석 0x01 취약점 설명 원인: Office 문서를 열 때 FLTLDR.EXE가 해당 취약점을 포함하는 내장 EPS 파일을 렌더링하는 데 사용됩니다. 이 파일은 PostScript 언어로 작성되었으며, 공격자가 "save-restore" 작업을 통해 악용할 수 있습니다. 본질적으로 UAFUse-After-Free 취약점입니다. 사용자가 잘못된 형식의 그래픽 이미지가 포함된 파일을 열거나, 잘못된 형식의 그래픽 이미지를 Office 파일에 삽입할 때 이 취약점이 악용될 수 있습니다. 영향...

CVE-2024-29510

Оригинальное исследование и код PoC: https://codeanlabs.com/blog/research/cve-2024-29510-ghostscript-format-string-exploitation/ ПРИМЕЧАНИЕ: Я не вносил никаких изменений в PoC, кроме выполняемой команды. Полная заслуга принадлежит Томасу Ринсме из Codean Labs за их потрясающее исследование и PoC...

PYSEC-2026-1354 Exiv2 Segmentation Faults in Exiv2::EpsImage::writeMetadata() via crafted EPS file

Impact An out-of-bounds read was found in Exiv2 versions v0.28.5 and earlier. Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. The out-of-bounds read is triggered when Exiv2 is used to write metadata into a crafted image...

EUVD-2020-9378

Malware in sbrugna...

EUVD-2020-8265

Malware in sbrugna...

EUVD-2012-5950

Malware in sbrugna...

EUVD-2002-2026

Malware in sbrugna...

EUVD-2021-0184

Malware in sbrugna...

EUVD-2019-4830

Malware in sbrugna...

CVE-2025-54080

CVE-2025-54080 (Exiv2) is an out-of-bounds read vulnerability in Exiv2 up to version 0.28.5 that is triggered when writing metadata to a crafted image. The issue can cause a denial of service by crashing Exiv2, when a user runs the tool on a manipulated image file. The root cause is an out-of-bou...

CVE-2023-44464

pretix before 2023.7.2 allows Pillow to parse EPS files...

CVE-2020-8883

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit Studio Photo 3.6.6.916. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists with...

CVE-2020-17425

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Studio Photo 3.6.6.922. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

CVE-2024-41853 Indesign 2024 EPS File Parsing Heap Memory Corruption Remote Code Execution Vulnerability

InDesign Desktop versions ID19.4, ID18.5.2 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2024-39392

Adobe InDesign Desktop versions ID18.5.2, ID19.3 and earlier are affected by a Heap-based Buffer Overflow that can lead to arbitrary code execution in the context of the current user. Exploitation requires user interaction (opening a malicious file). Affects InDesign on Windows/macOS per sources....

Exploit for Files or Directories Accessible to External Parties in Artifex Ghostscript

CVE-2023-36664 : Ghostscript remote code execution Proof of c...

CVE-2023-44464

pretix before 2023.7.2 allows Pillow to parse EPS files...

CVE-2023-44464

pretix before 2023.7.2 allows Pillow to parse EPS files...

CVE-2022-41193

Due to lack of proper memory management, when a victim opens a manipulated Encapsulated Post Script .eps, ai.x3d file received from untrusted sources in SAP 3D Visual Enterprise Viewer - version 9, it is possible that a Remote Code Execution can be triggered when payload forces a stack-based...