62773 matches found
docker-cve-2022-39253-poc
docker host file read using cve-2022-39253 poc PoC reproduce environment $ docker run --name=cve-2022-39253 -ti -d ssst0n3/dockerarchive:gitcve-2022-39253 $ docker attach --detach-keys ctrl-x cve-2022-39253 use ctrl-x to exit container's terminal wait minutes for environment starting ... ... Ubun...
kali-linux-docker
Official Kali Linux Docker This Kali Linux Docker image provides a minimal base install of the latest version of the Kali Linux Rolling Distribution. There are no tools added to this image, so you will need to install them yourself. For details about Kali Linux metapackages, check...
wordpress_cropimage
WordPress Crop-Image CVE-2019-8943 A python3 script for WordPress Crop-Image CVE-2019-8943 Authenticated Remote Code Execution RCE. It drops a malicious PHP backdoor. Getting Started Executing program RCE python3 wprce.py -t http://wordpress.rce/ -u admin -p password -m twentytwenty Help For help...
CVE-2024-10410
Source code Online Hotel Reservation System in PHP/MySQLi with Source Code | SourceCodester Description A high risk vulnerability was found in Online Hotel Reservation System, affecting the upload function of /marimar/admin/modroom/controller.php file. The bypass detection operation of image...
CVE-2021-22205
CVE-2021-22205 Preauth RCE via exiftool on Gitlab CE/EE Summary of the CVE GitLab uses ExifTool to scan every tiff/jpeg/jpg file to remove any tags that are not whitelisted. But because ExifTool doesn't use file extensions to determine filetype but it rather uses the content of the file, which...
CVE-2026-118438
The Firelight Lightbox WordPress plugin before 2.3.24 does not properly escape image attribute values before processing them in the browser, which could allow users with contributor-level access and above to inject arbitrary web scripts that execute when another user views or previews the affecte...
CVE-2026-118438 Firelight Lightbox < 2.3.24 - Contributor+ Stored XSS via Image 'src' Attribute
The Firelight Lightbox WordPress plugin before 2.3.24 does not properly escape image attribute values before processing them in the browser, which could allow users with contributor-level access and above to inject arbitrary web scripts that execute when another user views or previews the affecte...
CVE-2026-118438
The Firelight Lightbox WordPress plugin, in versions before 2.3.24 , is vulnerable to Stored Cross-Site Scripting (XSS) . The root cause is the failure to properly escape image attribute values (specifically the src attribute) before processing them in the browser. This flaw allows users with con...
log4j-vuln-demo
log4j-vuln-demo Intentionally vulnerable demo image for Sysdig CNAPP scanning and remediation testing. Contains Log4j 2.14.1 — vulnerable to CVE-2021-44228 Log4Shell, CVSS 10.0 Critical. Purpose This repo exists to demonstrate Sysdig's end-to-end CNAPP workflow: 1. /sysdig-investigate — surfaces...
drupal-ckeditor-fileisimage
abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · drupal-ckeditor-fileisimage Write-up: https://abraxaslabs.tech/research/drupal-ckeditor-fileisimage drupal-ckeditor-fileisimage Class: Unrestricted upload / stored XSS Reach: Remote Drupal core 11.4.8 61044508 - Drupa...
CVE-2020-11800
Sections required by the assignment guidelines are marked with “Required”. 1. Environment Required Dockerfile Required This environment uses a custom Dockerfile based on the vulnerable Zabbix Server image provided by Vulhub. FROM vulhub/zabbix:3.0.3-server The Dockerfile builds a local image usin...
CVE-2021-22205
Vuln Impact An issue has been discovered in GitLab CE/EE affecting all versions starting from 11.9. GitLab was not properly validating image files that were passed to a file parser which resulted in a remote command execution. Vuln Product Gitlab CE/EE 13.10.3 Gitlab CE/EE 13.9.6 Gitlab CE/EE...
CVE-2024-55981
CVE-2024-55981 Nabz Image Gallery = v1.00 - Unauthenticated SQL Injection Description The Nabz Image Gallery plugin for WordPress is vulnerable to SQL Injection in versions up to, and including, v1.00 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation o...
CVE-2021-22204
CVE-2021-22204 Summary of the CVE Improper sanitization of user data in the DjVu file format in ExifTool versions 7.44 and up allows arbitrary code execution when parsing the malicious image. Affected Versions Version 7.44 - 12.23 Anomalies Dependencies: djvulibre-bin exiftool Calls these three...
CVE-2023-50596
CVE-2023-50596 Suggested description Cross Site Scripting vulnerability in Simple Image Stack Website using PHP and API v.1.00000 allows a remote attacker to execute arbitrary code via a crafted payload to the URL. Additional Information Lets paste our payload in the URL section...
StegoLab
🕵️ StegoLab – All-in-One Image Steganography Toolkit StegoLab is a lightweight, all-in-one image steganography analysis suite built for CTFs, cybersecurity challenges, and digital forensics. It automates the use of popular tools like binwalk, steghide, stegseek, zsteg, exiftool, and more — all in ...
TNC-Defense
TNC-Defense TNC-Defense provides research code for detecting and detoxifying backdoors in text-to-image diffusion models. The repository currently includes detection pipelines for Stable Diffusion v1.4, Stable Diffusion v1.5, Stable Diffusion XL, and Stable Diffusion 3 Medium, together with...
CVE-2019-11447
CVE-2019-11447 - PoC Exploits CuteNews 2.1.2 via poor file upload checks used when uploading an avatar image leading to RCE. Installation Clone the repository and install the requirements. pip install -r requirements.txt Usage In order to upload an avatar you will require a CuteNews user account,...
CVE-2026-66917
IDOR + Stored XSS via Broken Object-Level Authorization in JoomGallery JoomGallery ≤ 4.3.0 — Editor-Role User Hijacks Any Gallery Image and Stores XSS Payload, Enabling Admin Session Takeover SUMMARY UserimageController::save in JoomGallery checks checkACL'edit', ... instead of checkACL'edit.own'...