Exif-Remove

Command Line Tool- Remove Exif Data With Ease This tool is made in Python 2.7 compiled using pyinstaller for Windows OS. Nothing is special about this tool it just ease the work for me, maybe will for you too For what reason ? Exif is Metadata stored in hidden in your pictures. Many...

exifLooter

Exif Looter Запись в блоге » · Сообщить об ошибке · Предложить улучшение Содержание 1. Начало работы Установка 2. Использование Анализ конкретного изображения Анализ конкретной директории Конвейер с другими инструментами Удаление метаданных из изображений Получение URL Open Street Map 3. Отчёты 4...

imago-forensics

imago-forensics 🕵️ Imago — это инструмент на Python, который рекурсивно извлекает цифровые улики из изображений. Этот инструмент полезен при проведении цифровых криминалистических расследований. Если вам нужно извлечь цифровые улики и у вас много изображений, с помощью этого инструмента вы сможете...

exif-gps-tracer

exif-gps-tracer Скрипт на Python, который позволяет извлекать данные геолокации из ваших файлов изображений, хранящихся в наборе данных. Он также создает выходные данные в формате CSV и в HTML Google Maps. Предварительные требования Для бесперебойной работы этого скрипта: 1 У вас должен быть ключ...

GitLab-preauth-RCE_CVE-2021-22205

GitLab-preauth-RCECVE-2021-22205 GitLab 사전 인증 RCECVE-2021-22205용 한 줄 bash PoC t="http://vuln.site";cmd='echo xxxbase64ofreverseshellcodexxx |base64 -d|bash';f="1.jpg";echo...

Pixel-Flood-Attack

Pixel Flood DoS - CVE-2024-22393 PoC Pixel Flood баг для веб-серверов Легковесное Proof-of-Concept для тестирования уязвимости исчерпания памяти Pixel Flood в веб-приложениях, работающих на уязвимых версиях Apache Answer. Содержание Описание Технические детали Уязвимые версии Требования...

CVE-2026-39372

InvoicePlane is a self-hosted open source application for managing invoices, clients, and payments. Prior to 1.7.2, InvoicePlane stores and serves uploaded image attachments without stripping EXIF metadata. When an administrator uploads an image through invoice attachments, quote attachments, or...

CVE-2026-39372

InvoicePlane , a self-hosted application for managing invoices and payments, is vulnerable to sensitive information disclosure in versions prior to 1.7.2 . The application fails to strip EXIF metadata from uploaded image attachments. Consequently, when an administrator uploads an image via invoic...

CVE-2026-39372 InvoicePlane: Sensitive Information Disclosure via Unstripped EXIF Metadata in Attachments

InvoicePlane is a self-hosted open source application for managing invoices, clients, and payments. Prior to 1.7.2, InvoicePlane stores and serves uploaded image attachments without stripping EXIF metadata. When an administrator uploads an image through invoice attachments, quote attachments, or...

CVE-2026-39372 InvoicePlane: Sensitive Information Disclosure via Unstripped EXIF Metadata in Attachments

InvoicePlane is a self-hosted open source application for managing invoices, clients, and payments. Prior to 1.7.2, InvoicePlane stores and serves uploaded image attachments without stripping EXIF metadata. When an administrator uploads an image through invoice attachments, quote attachments, or...

CVE-2026-39372 InvoicePlane: Sensitive Information Disclosure via Unstripped EXIF Metadata in Attachments

InvoicePlane is a self-hosted open source application for managing invoices, clients, and payments. Prior to 1.7.2, InvoicePlane stores and serves uploaded image attachments without stripping EXIF metadata. When an administrator uploads an image through invoice attachments, quote attachments, or...

CVE-2026-39372: Exposure of Private Personal Information to an Unauthorized Actor

InvoicePlane is a self-hosted open source application for managing invoices, clients, and payments. Prior to 1.7.2, InvoicePlane stores and serves uploaded image attachments without stripping EXIF metadata. When an administrator uploads an image through invoice attachments, quote attachments, or...

OESA-2026-3970 gstreamer1-plugins-base security update

GStreamer is a graphics library for built-in media processing components. BasePlug-ins is a the collections used to maintain the GStreamer plugin. Security Fixes: GStreamer EXIF Metadata Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to...

OESA-2026-3968 gstreamer1-plugins-base security update

GStreamer is a graphics library for built-in media processing components. BasePlug-ins is a the collections used to maintain the GStreamer plugin. Security Fixes: GStreamer EXIF Metadata Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to...

OESA-2026-3967 gstreamer1-plugins-base security update

GStreamer is a graphics library for built-in media processing components. BasePlug-ins is a the collections used to maintain the GStreamer plugin. Security Fixes: GStreamer EXIF Metadata Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to...

CVE-2026-81652

The Photo Gallery, Sliders, Proofing and WordPress plugin before 4.5.0 does not verify that the requesting user is entitled to a given image record before returning it, allowing users with the Contributor role and above to read the stored metadata of any image on the site, including images in...

[SECURITY] Fedora 45 Update: exiv2-0.28.9-1.fc45

A command line utility to access image metadata, allowing one to: print the Exif metadata of Jpeg images as summary info, interpreted values, or the plain data for each tag print the Iptc metadata of Jpeg images print the Jpeg comment of Jpeg images set, add and delete Exif and Iptc metadata of...

CVE-2026-51974

An eval injection vulnerability in the getlist function in modules/metaparser.py in lllyasviel Fooocus 2.1.854 through 2.5.5 allows remote attackers to execute arbitrary Python code via a crafted styles payload in the EXIF metadata of an uploaded image file...

CVE-2026-51974

An eval injection vulnerability in the getlist function in modules/metaparser.py in lllyasviel Fooocus 2.1.854 through 2.5.5 allows remote attackers to execute arbitrary Python code via a crafted styles payload in the EXIF metadata of an uploaded image file...

CVE-2026-51974

The lllyasviel Fooocus software (versions 2.1.854 through 2.5.5) is vulnerable to an eval() injection vulnerability within the get_list function located in modules/meta_parser.py. A remote attacker can exploit this by providing a crafted styles payload embedded in the EXIF metadata of an uploaded...