907 matches found
CVE-2023-4863
nivel 1: craft.c - bad.webp exist: docker 813b6b757038 /webp cd CVE-2023-4863 make -f makefile.unix -B fatal error: jpeglib.h: No such file or directory apt-get update apt-get install libjpeg-dev fatal error: png.h: No such file or directory apt-get install libpng-dev fatal error: tiffio.h: No su...
CVE-2017-0478
CVE-2017-0478 poc of CVE-2017-0478 The file of FrameSequencewebp.cpp is not compiled in AOSP currently, so when you compile libframesequence.so with webp, you need compile with FRAMESEQUENCEINCLUDEWEBPlike this: FRAMESEQUENCEINCLUDEWEBP=true mm -B...
stegano
bzt 的隐写术 在线演示 简而言之， 隐写术 是一种将信息隐藏在另一种媒介中，使之在大庭广众之下不被人察觉的艺术。此实现读取常见网页格式（WEBP、PNG、GIF、JPEG）的图像，将（可选加密的）文本隐藏其中，并将结果保存为 WEBP 图像。然后你可以将此新图像上传到任何公共网站、论坛、Instagram、Facebook 聊天、邮件附件等。没有人会察觉，没有人知道图片中实际上藏有信息，除非你明确告诉他们（并且如果使用了加密，他们还需要正确的密码）。 用法 1. 选择输入图像（通过 URL 或本地文件） 2. 可选地输入密码（如果你想要额外的军用级加密） 3/a...
CVE-2017-0478
CVE-2017-0478 poc de CVE-2017-0478 El archivo FrameSequencewebp.cpp no está compilado actualmente en AOSP, por lo que cuando compiles libframesequence.so con webp, necesitas compilar con FRAMESEQUENCEINCLUDEWEBPcomo esto: FRAMESEQUENCEINCLUDEWEBP=true mm -B...
CVE-2023-4683-Test
CVE-2023-4683-Test Este repositorio contiene un POC fácil de usar para CVE-2023-4683. Simplemente haz git clone de este repositorio y extrae webp-test o ejecuta setup-webp-test.sh. webp-test ya contiene los archivos necesarios git commit 7ba44f80f3b94fc0138db159afea770ef06532a0 de...
WordPress WebP Converter for Media < 4.0.3 - Unauthenticated Open Redirect
WordPress WebP Converter for Media 4.0.3 contains a file passthru.php which does not validate the src parameter before redirecting the user to it, leading to an open redirect issue. id: CVE-2021-25074 info: name: WordPress WebP Converter for Media 4.0.3 - Unauthenticated Open Redirect author:...
Images to WebP < 1.9 - Authenticated Local File Inclusion
The Images to WebP WordPress plugin before version 1.9 did not validate or sanitize the tab parameter before using it in the include function. id: CVE-2021-24644 info: name: Images to WebP 1.9 - Authenticated Local File Inclusion author: Sourabh-Sahu severity: high description: | The Images to We...
BAD-WEBP-CVE-2023-4863
BAD-WEBP-CVE-2023-4863 BAD-WEBP-CVE-2023-4863...
CVE-2023-41064
vulnerabilidad-LibWebP-CVE-2023-41064 longitudes de código para desencadenar esta vulnerabilidad CVE-2023-41064 Este es un script de Python que crea un archivo WebP un formato de imagen vacío con una estructura de encabezado específica. El propósito de este script es generar un archivo WebP que...
CVE-2023-4863
CVE-2023-4863/CVE-2023-41064 Un POC para CVE-2023-4863. NO es un exploit Agradecimientos a @benhawkes que descubrió el conjunto correcto de codelengths para desencadenar esta vulnerabilidad. ¡Consulte la publicación del blog de Ben para más información! https://blog.isosceles.com/the-webp-0day/...
CVE-2022-26711
CVE-2022-26711: Desbordamiento de enteros en Apple ImageIO WebP Una vulnerabilidad de desbordamiento de enteros en el framework ImageIO de Apple al analizar imágenes WebP, que provoca un acceso a memoria fuera de los límites. Análisis completo - Análisis detallado de la causa raíz con recorrido...
vulnerabilidad-LibWebP-CVE-2023-41064
vulnerabilidad-LibWebP-CVE-2023-41064 longitudes de código para desencadenar esta vulnerabilidad CVE-2023-41064 Este es un script de Python que crea un archivo WebP un formato de imagen vacío con una estructura de encabezado específica. El propósito de este script es generar un archivo WebP que...
CVE-2023-4863
CVE-2023-4863 签出 webp git clone https://chromium.googlesource.com/webm/libwebp/ webptest cd webptest/ 签出存在漏洞的版本 git checkout 7ba44f80f3b94fc0138db159afea770ef06532a0 启用 AddressSanitizer sed -i 's/^EXTRAFLAGS=./& -fsanitize=address/' makefile.unix 构建 webp make -f makefile.unix cd examples/ 获取...
webp-CVE-2023-4863
libwebp CVE-2023-4863 Una vulnerabilidad para hackear el mundo - CVE-2023-4863 Encontrando la vulnerabilidad .webp en 8s Fuzzing con AFL++...
CVE-2022-36752
Description for CVE-2022-36752 png2webp v1.0.4 was discovered to contain an out-of-bounds write via the function w2p. This vulnerability is exploitable via a crafted webp file when reversing the format back to png. Reproduction To reproduce the vulnerability, download the vulnerable version of...
CVE-2026-91802
A heap-based out-of-bounds write vulnerability exists in Foxit PDF Editor/Reader’s WebP image decoding due to improper handling of bitmap stride and target buffer formats. Successful exploitation could result in an application crash...
EUVD-2026-85120
A heap-based out-of-bounds write vulnerability exists in Foxit PDF Editor/Reader’s WebP image decoding due to improper handling of bitmap stride and target buffer formats. Successful exploitation could result in an application crash...
CVE-2026-91802
A heap-based out-of-bounds write vulnerability exists in Foxit PDF Editor/Reader within its WebP image decoding functionality. The vulnerability is caused by the improper handling of bitmap stride and target buffer formats , which could lead to an application crash if successfully exploited. No s...
Microsoft WebP Image Extension < 1.2.31.0 RCE (CVE-2026-70351) (September 2026)
The version of the Microsoft WebP Image Extension app installed on the remote Windows host is prior to 1.2.31.0. It is, therefore, affected by a remote code execution vulnerability: - Integer overflow or wraparound in Microsoft WebP Image Extension allows an unauthorized attacker to execute code...
