Lucene search
+L

64 matches found

Kitploit
Kitploit
•added 2026/11/06 2:12 a.m.•33 views

exif-gps-tracer

exif-gps-tracer A python script which allows you to parse GeoLocation data from your Image files stored in a dataset.It also produces output in CSV file and also in HTML Google Maps Prerequisite To run this script fluently , 1 You should have Google Maps API 2 You should enable Map JavaScript API...

6.3AI score
SaveExploits0
Kitploit
Kitploit
•added 2026/11/05 10:01 a.m.•340 views

imago-forensics

imago-forensics 🕵️ Imago is a python tool that extract digital evidences from images recursively. This tool is useful throughout a digital forensic investigation. If you need to extract digital evidences and you have a lot of images, through this tool you will be able to compare them easily. Imago...

6.1AI score
SaveExploits0References4
NVD
NVD
•added 2026/10/30 8:17 p.m.•26 views

CVE-2026-119329

Immich is a high-performance self-hosted photo and video management solution. Prior to 3.0.0, GET /api/map/markers used server/src/services/map.service.ts to add partner owner identifiers when withPartners=true, while server/src/repositories/map.repository.ts applied Archive visibility to every...

4.3CVSS0.00251EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
•added 2026/10/30 7:51 p.m.•5 views

CVE-2026-119329 Immich: Partner "view-only" sharing leaks GPS coordinates of the sharer's archived assets via GET /api/map/markers

Immich is a high-performance self-hosted photo and video management solution. Prior to 3.0.0, GET /api/map/markers used server/src/services/map.service.ts to add partner owner identifiers when withPartners=true, while server/src/repositories/map.repository.ts applied Archive visibility to every...

4.3CVSS5.9AI score0.00251EPSS
SaveExploits0References4
osv_cve
osv_cve
•added 2026/10/30 7:51 p.m.•16 views

CVE-2026-119329 Immich: Partner "view-only" sharing leaks GPS coordinates of the sharer's archived assets via GET /api/map/markers

Immich is a high-performance self-hosted photo and video management solution. Prior to 3.0.0, GET /api/map/markers used server/src/services/map.service.ts to add partner owner identifiers when withPartners=true, while server/src/repositories/map.repository.ts applied Archive visibility to every...

4.3CVSS6AI score
SaveExploits0References6
CVE
CVE
•added 2026/10/30 7:51 p.m.•15 views

CVE-2026-119329

The Immich photo and video management solution contains a vulnerability prior to version 3.0.0 . The GET /api/map/markers endpoint incorrectly processes partner owner identifiers in server/src/services/map.service.ts while applying archive visibility in server/src/repositories/map.repository.ts. ...

4.3CVSS5.9AI score0.00251EPSS
SaveExploits0References4
EUVD
EUVD
•added 2026/10/30 7:51 p.m.•15 views

EUVD-2026-114376

Immich is a high-performance self-hosted photo and video management solution. Prior to 3.0.0, GET /api/map/markers used server/src/services/map.service.ts to add partner owner identifiers when withPartners=true, while server/src/repositories/map.repository.ts applied Archive visibility to every...

4.3CVSS5.9AI score0.00251EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2026/10/30 7:51 p.m.•28 views

CVE-2026-119329 Immich: Partner "view-only" sharing leaks GPS coordinates of the sharer's archived assets via GET /api/map/markers

Immich is a high-performance self-hosted photo and video management solution. Prior to 3.0.0, GET /api/map/markers used server/src/services/map.service.ts to add partner owner identifiers when withPartners=true, while server/src/repositories/map.repository.ts applied Archive visibility to every...

4.3CVSS0.00251EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/30 12:00 a.m.•10 views

CVE-2026-119329: immich-app immich: Immich is a high-performance self-hosted photo and video management solution

Immich is a high-performance self-hosted photo and video management solution. Prior to 3.0.0, GET /api/map/markers used server/src/services/map.service.ts to add partner owner identifiers when withPartners=true, while server/src/repositories/map.repository.ts applied Archive visibility to every...

4.3CVSS6AI score0.00251EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/10/30 12:00 a.m.•12 views

PT-2026-134166

Immich is a high-performance self-hosted photo and video management solution. Prior to 3.0.0, GET /api/map/markers used server/src/services/map.service.ts to add partner owner identifiers when withPartners=true, while server/src/repositories/map.repository.ts applied Archive visibility to every...

4.3CVSS6AI score0.00251EPSS
SaveExploits0References5
Kitploit
Kitploit
•added 2026/10/11 2:24 p.m.•27 views

imago-forensics

imago-forensics 🕵️ Imago es una herramienta Python que extrae evidencias digitales de imágenes de forma recursiva. Esta herramienta es útil durante una investigación forense digital. Si necesitas extraer evidencias digitales y tienes muchas imágenes, a través de esta herramienta podrás compararlas...

6.2AI score
SaveExploits0References4
NVD
NVD
•added 2026/09/25 4:17 p.m.•25 views

CVE-2026-39372

InvoicePlane is a self-hosted open source application for managing invoices, clients, and payments. Prior to 1.7.2, InvoicePlane stores and serves uploaded image attachments without stripping EXIF metadata. When an administrator uploads an image through invoice attachments, quote attachments, or...

4.9CVSS0.00353EPSS
SaveExploits0References4
EUVD
EUVD
•added 2026/09/25 3:21 p.m.•27 views

EUVD-2026-87122

InvoicePlane is a self-hosted open source application for managing invoices, clients, and payments. Prior to 1.7.2, InvoicePlane stores and serves uploaded image attachments without stripping EXIF metadata. When an administrator uploads an image through invoice attachments, quote attachments, or...

4.9CVSS5.9AI score0.00353EPSS
SaveExploits0References4
CVE
CVE
•added 2026/09/25 3:21 p.m.•52 views

CVE-2026-39372

InvoicePlane , a self-hosted application for managing invoices and payments, is vulnerable to sensitive information disclosure in versions prior to 1.7.2 . The application fails to strip EXIF metadata from uploaded image attachments. Consequently, when an administrator uploads an image via invoic...

4.9CVSS5.8AI score0.00353EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
•added 2026/09/25 3:21 p.m.•15 views

CVE-2026-39372 InvoicePlane: Sensitive Information Disclosure via Unstripped EXIF Metadata in Attachments

InvoicePlane is a self-hosted open source application for managing invoices, clients, and payments. Prior to 1.7.2, InvoicePlane stores and serves uploaded image attachments without stripping EXIF metadata. When an administrator uploads an image through invoice attachments, quote attachments, or...

4.9CVSS5.8AI score0.00353EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2026/09/25 3:21 p.m.•71 views

CVE-2026-39372 InvoicePlane: Sensitive Information Disclosure via Unstripped EXIF Metadata in Attachments

InvoicePlane is a self-hosted open source application for managing invoices, clients, and payments. Prior to 1.7.2, InvoicePlane stores and serves uploaded image attachments without stripping EXIF metadata. When an administrator uploads an image through invoice attachments, quote attachments, or...

4.9CVSS0.00353EPSS
SaveExploits0References4
osv_cve
osv_cve
•added 2026/09/25 3:21 p.m.•32 views

CVE-2026-39372 InvoicePlane: Sensitive Information Disclosure via Unstripped EXIF Metadata in Attachments

InvoicePlane is a self-hosted open source application for managing invoices, clients, and payments. Prior to 1.7.2, InvoicePlane stores and serves uploaded image attachments without stripping EXIF metadata. When an administrator uploads an image through invoice attachments, quote attachments, or...

4.9CVSS5.9AI score
SaveExploits0References6
Positive Technologies
Positive Technologies
•added 2026/09/25 12:00 a.m.•13 views

PT-2026-98877

Name of the Vulnerable Software and Affected Versions InvoicePlane versions prior to 1.7.2 Description InvoicePlane stores and serves uploaded image attachments without stripping EXIF metadata Exchangeable Image File Format, a standard for storing metadata in image files. When an administrator...

4.9CVSS5.8AI score0.00353EPSS
SaveExploits0References9
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/25 12:00 a.m.•18 views

CVE-2026-39372: Exposure of Private Personal Information to an Unauthorized Actor

InvoicePlane is a self-hosted open source application for managing invoices, clients, and payments. Prior to 1.7.2, InvoicePlane stores and serves uploaded image attachments without stripping EXIF metadata. When an administrator uploads an image through invoice attachments, quote attachments, or...

4.9CVSS5.9AI score0.00353EPSS
SaveExploits0References3
osv_debian
osv_debian
•added 2026/09/14 5:16 a.m.•24 views

DEBIAN-CVE-2026-90682

A security vulnerability has been detected in Matthias-Wandel jhead up to 3.3. This impacts the function ProcessGpsInfo of the file gpsinfo.c of the component WebP EXIF Handler. Such manipulation of the argument TAGGPSLAT/TAGGPSLONG leads to heap-based buffer overflow. An attack has to be...

4.8CVSS5.4AI score0.00172EPSS
SaveExploits0References1
Rows per page
Query Builder