exploit-CVE-2021-22204

Exploit for CVE-2021-22204 ExifTool - Arbitrary Code Execution Like this repo? Give us a ⭐! For educational and authorized security research purposes only. Exploit Author @UNICORDev by @NicPWNs and @Dev-Yeoj Vulnerability Description Improper neutralization of user data in the DjVu file format in...

Samsung-CVE-2025-21042

🔐 CVE-2025-21042 — Samsung Image Codec Remote Code Execution ⚙️ What it is A critical vulnerability in Samsung’s image-processing library libimagecodec.quram.so — used on Galaxy Android devices. 🧩 It’s an out-of-bounds write flaw triggered when parsing malicious image files like DNG. 📸 A crafted...

adiskreader-secretsdump

🚩 Sponsors If you like this project, consider purchasing licenses of OctoPwn, our full pentesting suite that runs in your browser! For notifications on new builds/releases and other info, hop on to our Discord adiskreader-secretsdump Extract registry and NTDS secrets from local or remote disk...

CVE-2021-22204

CVE-2021-22204 Description Improper neutralization of user data in the DjVu file format in ExifTool versions 7.44 and up allows arbitrary code execution when parsing the malicious image Script Script Link Script usage: System cmd: bash CVE-2021-2204.sh "system'id'" happy.jpg Reverse shell bash...

CVE-2021-22204

CVE-2021-22204 Summary of the CVE Improper sanitization of user data in the DjVu file format in ExifTool versions 7.44 and up allows arbitrary code execution when parsing the malicious image. Affected Versions Version 7.44 - 12.23 Anomalies Dependencies: djvulibre-bin exiftool Calls these three...

CVE-2022-44268-automated-poc

CVE-2022-44268 ImageMagick Arbitrary File Read poc Fully Automated ⚙ An information disclosure vulnerability that could be exploited to read arbitrary files from a server when parsing an image. Image Magic version effected Version: ImageMagick 6.9.11-60 Q16 x8664 2021-01-25 https://imagemagick.or...

AlmaLinux 9.2 [TuxCare] Security Update: openexr / openexr-devel / openexr-libs (ALMALINUX9.2:CLSA-2025:1749743322)

The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2025:1749743322 advisory. - Due to a failure in validating the number of scanline samples of a OpenEXR file containing deep scanline data, Academy Software Foundation...

CVE-2026-91807 Foxit PDF Editor/Reader PDF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

A heap-based out-of-bounds read vulnerability exists in Foxit PDF Editor/Reader’s handling of malformed image soft-mask data. Insufficient validation of the soft-mask data attribute during image parsing may cause an arithmetic underflow, resulting in an out-of-bounds read and application crash...

Foxit PDF Reader JPEG2000 Parsing Memory Corruption Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

CVE-2026-91807: Out-of-bounds Read

A heap-based out-of-bounds read vulnerability exists in Foxit PDF Editor/Reader’s handling of malformed image soft-mask data. Insufficient validation of the soft-mask data attribute during image parsing may cause an arithmetic underflow, resulting in an out-of-bounds read and application crash...

Astra Linux – Vulnerability in openimageio

A read vulnerability exists in the handling of IPTC data when parsing TIFF images in OpenImageIO v2.3.19.0. A specially crafted TIFF file can cause a read of adjacent heap memory, potentially exposing sensitive process information. An attacker can provide a malicious file to exploit this...

Adobe Photoshop DCM JPEG-LS Image Parsing Integer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Photoshop. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of DIC...

Important: gimp:2.8 security update

The GIMP GNU Image Manipulation Program is an image composition and editing program. GIMP provides a large image manipulation toolbox, including channel operations and layers, effects, sub-pixel imaging and anti-aliasing, and conversions, all with multi-level undo. Security Fixes: gimp: gimp: Sta...

CVE-2026-78465

An integer overflow in the file-pcx plugin of GIMP affects 32-bit builds only . When a crafted PCX image file sets the number of color planes to 4 alongside sufficiently large dimensions, the memory allocation size calculation exceeds the 32-bit integer limit, producing an undersized heap buffer ...

CVE-2026-18303

GIMP TIF File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page ...

CVE-2026-77118

A heap out-of-bounds write exists in the Photo CD PCD decoder of GraphicsMagick. In DecodeImage coders/pcd.c, the Huffman delta loop advances its output pointer with q++ after every decoded delta and never checks it against the end of the heap-allocated luma/chroma plane buffers. The pointer is...

Fedora 44 : perl-Imager (2026-8a61adae6f)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-8a61adae6f advisory. Upstream changes 1.034: - Security fix: EXIF: fix decoding of ASCII fields with zero size CVE-2026-19082, GHSA-hx46-55wp-hv6m - JPEG: depend on Imager 1.034...

Apple fixes another image-processing flaw that could allow code execution

Apple has released security updates for more than two dozen security vulnerabilities across iPhone, iPad, and macOS Tahoe,including yet another image parsing vulnerability that could compromise your device. This update delivers security fixes that were first made available in the iOS 27 and iPadO...

MINI-CV28-GHF4-WGHC

Bulletin has no description...

DEBIAN-CVE-2026-74552

In the Linux kernel, the following vulnerability has been resolved: hwmon: lm90 Only report alarms if driver is ready Userspace can read sysfs attributes before driver registration is complete, immediately after devmhwmondeviceregisterwithinfo has been called. At that time, data-hwmondev is not y...