308 matches found
CVE-2022-44268-MagiLeak
ImageMagick 任意ファイル読み取り - CVE-2022-44268 このリポジトリには、ImageMagickの任意ファイル読み取りの脆弱性（CVE-2022-44268）を悪用するための概念実証（PoC）コードが含まれています。このPoCは、攻撃者がこの脆弱性を利用してシステム上の任意のファイルを読み取る方法を示しています。 前提条件 コードを実行するには、以下の依存関係がインストールされていることを確認してください： Python 3.x Pillow（Python Imaging Library） 必要な依存関係は pip を使用してインストールできます：...
CVE-2025-65018-Heap-buffer-overflow-in-libpng-ps4-ps5-
CVE-2025-65018-Heap-buffer-overflow-in-libpng-ps4-ps5- 用 Poc 使用方法: 1-シェアボタンを押してスクリーンショットを撮ります 2-ftp で次のパスに移動します: /user/avcontents/photo/NPXS20001/NPXS20001/XXX/ そこに撮影したスクリーンショットがあります。 3-それをPCにコピーし、makepng.py で実行すると、poc.png が出力されます。 4-それをスクリーンショットの名前にリネームし、ftp で同じパスに置き換えます。...
CVE-2022-44268-pilgrimage
CVE-2022-44268 任意ファイル読み取り PoC - PNGジェネレーター これは、https://www.metabaseq.com/imagemagick-zero-days/ によって発見された ImageMagick のバグの概念実証です。 これは Pilgrimage HackTheBox チャレンジ用の自動化ツールです。 これは https://git.rotfl.io/v/CVE-2022-44268 からのフォークです。 ImageMagick v. 7.1.0-48 および 6.9.11-60 でテスト済み。 使い方 プロジェクトのクローン git clone...
Astra Linux – Vulnerability in exiv2
In Exiv2 0.27.99.0, the PngImage::readMetadata function in the pngimage.cpp file allows attackers to cause a denial of service heap-based buffer over-read through a crafted image file...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: libpng12 (UTSA-2026-093147)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-093147 advisory. Multiple off-by-one errors in libpng before 1.2.32beta01, and 1.4 before 1.4.0beta34, allow context- dependent attackers to cause a denial of service crash or have...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: libpng12 (UTSA-2026-093149)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-093149 advisory. The pngformatbuffer function in pngerror.c in libpng 1.0.x before 1.0.55, 1.2.x before 1.2.45, 1.4.x before 1.4.8, and 1.5.x before 1.5.4 allows remote attackers to...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: libpng12 (UTSA-2026-093154)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-093154 advisory. The pngerr function in pngerror.c in libpng 1.0.x before 1.0.55, 1.2.x before 1.2.45, 1.4.x before 1.4.8, and 1.5.x before 1.5.4 makes a function call using a NULL...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: libpng12 (UTSA-2026-093152)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-093152 advisory. Buffer overflow in libpng 1.0.x before 1.0.55, 1.2.x before 1.2.45, 1.4.x before 1.4.8, and 1.5.x before 1.5.4, when used by an application that calls the pngrgbtogr...
PT-2026-32927
libsixel is a SIXEL encoder/decoder implementation derived from kmiya's sixel. Versions 1.8.7 and prior contain an integer overflow which leads to a heap buffer overflow via sixel frame convert to rgb888 in frame.c, where allocation size and pointer offset computations for palettised images PAL1,...
ROS-20260401-73-0012
A vulnerability in the pngimagefinishread function of the pngimagefinishread library for handling bitmap graphics in the PNG libpng format is related to writing beyond buffer boundaries in memory. Exploitation of the vulnerability could allow an attacker to execute arbitrary code by loading a...
ROS-20260401-73-0024
A vulnerability in the pngsetquantize function of the libpng PNG raster graphics library is related to a buffer overflow in dynamic memory. Exploitation of the vulnerability could allow a remote attacker to execute arbitrary code using a specially generated PNG file...
The vulnerability of the png_set_quantize() function in the library for working with PNG bitmap graphics in libpng allows a hacker to execute arbitrary code.
The vulnerability of the pngsetquantize function in the library for working with PNG bitmap graphics in libpng is related to buffer overflow in dynamic memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code using a specially crafted PNG file...
Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS : libpng vulnerabilities (USN-8035-1)
The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-8035-1 advisory. It was discovered that the libpng simplified API incorrectly processed palette PNG images with partial transparency and gamma...
USN-8039-1: libpng vulnerability
It was discovered that the libpng simplified API incorrectly handled quantizing RGB images. If a user or automated system were tricked into opening a specially crafted PNG file, an attacker could use this issue to cause libpng to crash, resulting in a denial of service...
Ubuntu 24.04 LTS : libpng vulnerabilities (USN-7993-1)
The remote Ubuntu 24.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-7993-1 advisory. It was discovered that libpng incorrectly handled memory when processing certain malformed PNG files. If a user or automated system were tricked into...
Ubuntu 22.04 LTS / 24.04 LTS / 25.04 / 25.10 : libpng vulnerabilities (USN-7963-1)
The remote Ubuntu 22.04 LTS / 24.04 LTS / 25.04 / 25.10 host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-7963-1 advisory. It was discovered that the libpng simplified API incorrectly processed palette PNG images with partial transparency and gamma...
openSUSE 16 Security Update : libpng16 (openSUSE-SU-2026:20017-1)
The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:20017-1 advisory. - CVE-2025-64505: heap buffer over-read in pngdoquantize when processing PNG files malformed palette indices bsc1254157. - CVE-2025-64506: heap...
MiracleLinux 4 : libpng-1.2.48-1.AXS4 (AXSA:2012-452:02)
The remote MiracleLinux 4 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2012-452:02 advisory. The libpng package contains a library of functions for creating and manipulating PNG Portable Network Graphics image format files. PNG is a bit-mapped graphic...
MiracleLinux 3 : libpng-1.2.10-7.1.5.0.1.AXS3 (AXSA:2011-300:01)
The remote MiracleLinux 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2011-300:01 advisory. The libpng package contains a library of functions for creating and manipulating PNG Portable Network Graphics image format files. PNG is a bit-mappe...
