Linux Distros Unpatched Vulnerability : CVE-2026-87020

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An integer overflow in a specified pitch and buffer-size computation leads to a heap out-of-bounds write when Orthanc DICOM Server decodes an attacker-supplied...

Dropper

隐蔽投放器 JPEG/PNG 该项目是一个将有效载荷嵌入 JPG/PNG 格式图像的工具，允许你在打开它们时执行某些操作。 🚫 免责声明 本仓库仅供教育目的 提供，并用于授权的安全研究 。 严禁 在未经授权或非法活动中使用这些材料。 项目使用指南及 exploit3r.py 的使用方法 该项目使用 CMake 来自动化构建和集成各种库，包括 Python 2。以下是构建项目并使用该漏洞利用程序的主要步骤。 CMakeLists.txt 的主要功能： 1. C++ 标准与编译选项 ： 项目配置为使用 C++17 标准。 添加了编译标志 -Wall（用于警告）和 -g（用于调试信息）。 2...

CVE-2022-44268

CVE-2022-44268 🧙‍♂️ CVE-2022-44268 ImageMagick 任意文件读取 用法 🛠 污染图像 ☣️ root@kitploit: python3 CVE-2022-44268.py --image imagetopoison.png --file-to-read /etc/hosts --output poisoned.png root@kitploit: Upload poisoned PNG image. 检查漏洞是否利用成功 🗡 root@kitploit: python3 CVE-2022-44268.py --url...

openSUSE 16 Security Update : libcupsfilters (openSUSE-SU-2026:21818-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21818-1 advisory. - CVE-2026-64611: infinite-loop CPU-exhaustion DoS in cfIEEE1284NormalizeMakeModel on empty MDL field bsc1273145. - CVE-2026-64612: malformed PN...

blenny

Blenny 是一款面向 Windows 的概念验证型载荷混淆工具，它可以将可执行载荷数据隐藏在可执行文件的图标中。其名称来源于剑齿鳚，这种鱼会模仿清洁鱼的行为和外貌，以捕食毫无防备的鱼类。 为什么？ 我已经记不清故事的具体经过，但一位名叫 retr0id（@DavidBuchanan314）的黑客提出了将载荷隐藏在可执行文件图标中的想法。由于 PNG 文件的种种特殊性质，再加上 Windows 图标文件可以包含 PNG 数据，我意识到可以相当轻松地实现这个想法，只是需要费些功夫。为此，我创建了 Facade 库——一个专门用于在 PNG 文件中生成载荷的库。...

DEBIAN-CVE-2026-87020

An integer overflow in a specified pitch and buffer-size computation leads to a heap out-of-bounds write when Orthanc DICOM Server decodes an attacker-supplied PNG...

CVE-2026-87020

An integer overflow in a specified pitch and buffer-size computation leads to a heap out-of-bounds write when Orthanc DICOM Server decodes an attacker-supplied PNG...

UBUNTU-CVE-2026-87020

An integer overflow in a specified pitch and buffer-size computation leads to a heap out-of-bounds write when Orthanc DICOM Server decodes an attacker-supplied PNG...

EUVD-2026-76113

An integer overflow in a specified pitch and buffer-size computation leads to a heap out-of-bounds write when Orthanc DICOM Server decodes an attacker-supplied PNG...

CVE-2026-87020 Orthanc DICOM Server Integer Overflow or Wraparound

An integer overflow in a specified pitch and buffer-size computation leads to a heap out-of-bounds write when Orthanc DICOM Server decodes an attacker-supplied PNG...

CVE-2026-87020

Orthanc DICOM Server (headquartered in Belgium, deployed worldwide in the healthcare sector) is vulnerable to an integer overflow in its pitch and buffer-size computation when decoding an attacker-supplied PNG or JPEG image. This leads to a heap out-of-bounds write , resulting in a process crash ...

Anxun-isoon

ocr.json ：包含从 png 文件处理得到的 CN 文本 ocroutputtranslated.json ：包含翻译后的 ocr.json 文件，翻译使用本地运行的 LLM（facebook/mbart-large-50-many-to-many-mmt）完成 所有使用的脚本位于 /userscripts...

halogen

Halogen is a tool to automate the creation of yara rules based on the image files embedded within a malicious document. This can assist cyber security professionals in writing detection rules for malicious threats as well as help responders in identifying with particular threat they are dealing...

halogen

Halogen は、悪意のあるドキュメントに埋め込まれた画像ファイルに基づいて YARA ルールの作成を自動化するツールです。これは、サイバーセキュリティの専門家が悪意のある脅威に対する検出ルールを作成する際や、対応者が特定の脅威を識別する際に役立ちます。現在、Halogen は JPG および PNG ファイルに基づくルールを作成できます。 Halogen ヘルプ root@kitploit: python3 halogen.py -h usage: halogen.py -h -f FILE -d DIR -n NAME --png-idat --jpg-sos...

AntiCropalypse

2023年3月31日更新 本日より、DiscordのCDNはPNGの転送中に末尾のデータを除去するようになりました。そのため、古いアップロードもaCropalypseの脆弱性から安全になりました。したがって、このボットはもはや必要ありませんが、ユーザーがアーカイブ画像をダウンロードできるよう、オンラインのまま維持されます。 ボットの元のREADMEは以下にあります。 AntiCropalypse...

astrolock

Astrolock 一个故意存在漏洞的应用程序，用于演示针对 PNG 文件的 PHP 载荷走私技术。...

PT-2026-89580

TRC analysis shows authenticated attackers are exploiting CVE-2026-87020 to crash Orthanc DICOM servers by uploading malicious PNG/JPEG images. The integer overflow triggers heap corruption, disrupting medical imaging operations across healthcare facilities. Healthcare Vulnerability :link: Full...

Linux Distros Unpatched Vulnerability : CVE-2026-56711

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - VLC media player versions 3.0.0 through 3.0.23 contain a memory-safety vulnerability reachable when processing crafted media. Exploitation requires user...

CVE-2026-56711

A flaw was found in VLC media player. An integer overflow vulnerability exists when computing the size of a picture buffer, specifically in the AllocatePicture function. A remote attacker could exploit this by providing a specially crafted Portable Network Graphics PNG image file with large width...

DEBIAN-CVE-2026-56711

VLC media player versions 3.0.0 through 3.0.23 contain a memory-safety vulnerability reachable when processing crafted media. Exploitation requires user interaction and may result in application termination or code execution with the privileges of the VLC process...