Ascii-And-Sub-Encoder

ASCII And/Sub Encoder 이 도구는 레거시 OSCE 인증으로 이어지는 offensive security CTP 과정을 준비하는 동안 제작되었습니다. 이 도구는 맞춤형 Ascii Subtraction Encoder의 nasm 친화적인 어셈블리 명령어를 생성합니다. 이 도구의 개발은 Vello Security의 다음 블로그 게시물에서 설명된 Ascii Subtraction Encoder 로직의 설명을 기반으로 합니다. Vello Security - 제한적 문자 집합을 사용한 셸코드 조각 컴파일 x86 아키텍처의 경우...

CVE-2026-105823

ImageMagick before 6.9.13-56 and 7.x before 7.1.2-31 lacks a security policy check in the CUT encoder, allowing configured security policies to be bypassed. Attackers can supply crafted input processed by the CUT encoder to crash the application or leak sensitive data...

EUVD-2026-95010

ImageMagick before 6.9.13-56 and 7.x before 7.1.2-31 lacks a security policy check in the CUT encoder, allowing configured security policies to be bypassed. Attackers can supply crafted input processed by the CUT encoder to crash the application or leak sensitive data...

CVE-2026-105823

The ImageMagick image processing library is vulnerable to a security policy bypass in the CUT encoder due to a lack of adequate security policy checks. This affects versions before 6.9.13-56 and 7.x before 7.1.2-31 . An attacker can provide crafted input to the CUT encoder to cause an application...

CVE-2026-105823 ImageMagick before 7.1.2-31 Policy Bypass in CUT Encoder

ImageMagick before 6.9.13-56 and 7.x before 7.1.2-31 lacks a security policy check in the CUT encoder, allowing configured security policies to be bypassed. Attackers can supply crafted input processed by the CUT encoder to crash the application or leak sensitive data...

xed

Intel® X86 エンコーダー/デコーダー Intel® XED Doxygen API マニュアルとソースビルドマニュアル: https://intelxed.github.io バグ: https://github.com/intelxed/xed/issues/new GITHUB による簡易ビルド手順: git clone https://github.com/intelxed/xed.git xed git clone https://github.com/intelxed/mbuild.git mbuild cd xed ./mfile.py 次に、obj ディレクトリか...

owasp-java-encoder

OWASP Java Encoder Contextual output encoding for Java 8+. Choose an encoder for the parser context receiving untrusted text: HTML, JavaScript, CSS, XML or a URL component. The core has no runtime dependencies; optional JSP and Jakarta adapters provide view-layer bindings. Encoding is one part of...

Slink

Slink는 7f를 초과하는 문자를 다시 포맷하기 위해 간단한 수학 연산을 사용하는 영숫자alphanumeric 셸코드x86 인코더입니다. 이 도구는 다음 스플로잇 EDB-ID: 44455에서 영감을 받아 만들어졌습니다. 현재 기능 목록은 다음과 같습니다: 01-7f 문자 집합을 사용하여 인코딩합니다. 기본적으로 \x00\x10\x0a\x0d\x20 같은 일반적인 배드 문자를 제외합니다. \x90으로 패딩하여 셸코드가 4로 나누어떨어지도록 합니다. 입력으로 여러 셸코드 형식을 허용합니다. 셸코드 변수 이름을 지정합니다. 인코딩...

YouPHPTube Encoder 2.3 - Remote Command Injection

YouPHPTube Encoder 2.3 is susceptible to a command injection vulnerability which could allow an attacker to compromise the server. These exploitable unauthenticated command injections exist via the parameter base64Url in /objects/getImage.php. id: CVE-2019-5127 info: name: YouPHPTube Encoder 2.3 ...

YouPHPTube Encoder - Arbitrary File Write

Exploitable unauthenticated command injections exist in YouPHPTube Encoder 2.3 a plugin for providing encoder functionality in YouPHPTube.The parameter base64Url in /objects/getImageMP4.php is vulnerable to a command injection attack. id: CVE-2019-5128 info: name: YouPHPTube Encoder - Arbitrary...

YouPHPTube Encoder 2.3 - Command Injection

Exploitable unauthenticated command injections exist in YouPHPTube Encoder 2.3 a plugin for providing encoder functionality in YouPHPTube.The parameter base64Url in /objects/getImageMP4.php is vulnerable to a command injection attack. id: CVE-2019-5129 info: name: YouPHPTube Encoder 2.3 - Command...

PT-2026-107982

ImageMagick before 6.9.13-56 and 7.x before 7.1.2-31 lacks a security policy check in the CUT encoder, allowing configured security policies to be bypassed. Attackers can supply crafted input processed by the CUT encoder to crash the application or leak sensitive data...

flask-session-cookie-manager

Flask 세션 쿠키 디코더/인코더 원저자 : Wilson Sumanang 수정 및 개선 저자 : Alexandre ZANNI 출처 : saruberoz.github.io 종속성 Python 2 또는 Python 3 itsdangerous Flask 설치 패키지 BlackArch Linux pacman -S flask-session-cookie-manager3,2 Git ArchLinux Python 3 및 Python 2 모두: git clone...

ImageSharp: TIFF CCITT T6 encoder writes beyond an undersized output buffer

Summary The TIFF CCITT Group 4 T6 encoder writes beyond its logical compressed-data buffer when encoding a 1-bit image. A valid 1×1 Group 4 TIFF decoded and re-encoded with the default TiffEncoder terminates the process with an unhandled exception. Affected package and versions - Package:...

GHSA-JJFR-HCJ7-QF5W ImageSharp: TIFF CCITT T6 encoder writes beyond an undersized output buffer

Summary The TIFF CCITT Group 4 T6 encoder writes beyond its logical compressed-data buffer when encoding a 1-bit image. A valid 1×1 Group 4 TIFF decoded and re-encoded with the default TiffEncoder terminates the process with an unhandled exception. Affected package and versions - Package:...

EUVD-2026-93574

ImageSharp: TIFF CCITT T4 encoder can write past its compressed output buffer...

GHSA-J9GM-C75J-XC9Q ImageSharp: TIFF CCITT T4 encoder can write past its compressed output buffer

Summary ImageSharp's TIFF CCITT Group 3 T4 encoder can write beyond its allocated compressed-data buffer when encoding narrow 1-bit images. The unchecked writes can corrupt process memory and terminate the process. This report concerns only the T4 CcittGroup3Fax encoder path. It replaces the prio...

ImageSharp: TIFF CCITT T4 encoder can write past its compressed output buffer

Summary ImageSharp's TIFF CCITT Group 3 T4 encoder can write beyond its allocated compressed-data buffer when encoding narrow 1-bit images. The unchecked writes can corrupt process memory and terminate the process. This report concerns only the T4 CcittGroup3Fax encoder path. It replaces the prio...

CVE-2026-106580

A flaw was found in ImageMagick. A missing security policy check in the CUT encoder allows a local attacker to execute a crafted encoding operation that bypasses established restrictions. Successful exploitation can lead to unauthorized data reading information disclosure or cause the application...

DEBIAN-CVE-2026-106580

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-31 and 6.9.13-56, a missing security-policy check in the CUT encoder allows a crafted local encoding operation to read data that policy should deny and can also cause a crash. This issue ...