ElectronVulnerableVersion

Поиск Electron-приложений, уязвимых для CVE-2023-4863 / CVE-2023-5129 Этот PowerShell-скрипт загружает Sysinternals Strings, рекурсивно ищет строки во всех .exe-файлах на всех дисках и сравнивает найденную версию Electron с известными исправленными версиями ниже, чтобы определить уязвимость к...

NotEnough

Outil de piratage de table de Huffman Cet outil calcule un histogramme Huffman canonique délicat, capable de déclencher une écriture hors limites OOB pour la bibliothèque libwebp vulnérable i.e. libwebp = 1.3.1. Cette vulnérabilité est connue sous le nom de CVE-2023-4863 ou CVE-2023-41064. Nous...

lab-cve-2023-4863

CVE-2023-4863 — Libwebp-Exploitationslabor Reproduktion von CVE-2023-4863 Heap-Buffer-Overflow in libwebp in einer vollständig isolierten und automatisierten Docker-Umgebung. Basierend auf der Übung des Moduls „Hacking Ético“ von CEFIRE. Was dieses Lab macht Es startet acht Container in einem...

CVE-2023-4863

tutto il credito va allo script di DARKNAVY. Questa è solo una versione modificata con le costanti OFFSET e VALUE aggiunte all'inizio del file per renderne più semplice la regolazione...

Find-VulnerableElectronVersion

Find-VulnerableElectronVersion Analizza un eseguibile e determina se è stato confezionato con una versione di Electron vulnerabile alla vulnerabilità Chromium CVE-2023-4863 / CVE-2023-5129 utilizzando lo strumento Sysinternals Strings. Supportato solo su dispositivi Windows. Richiede...

webp-CVE-2023-4863

libwebp CVE-2023-4863 Una vulnerabilità per hackerare il mondo - CVE-2023-4863 Trovare la vulnerabilità .webp in 8 secondi Fuzzing con AFL++...

BAD-WEBP-CVE-2023-4863

BAD-WEBP-CVE-2023-4863...

libwebp-checker

中文 | EN Strumenti di verifica delle dipendenze libwebp CVE-2023-4863 Questo strumento verifica se l'applicazione o il processo del tuo server è affetto da CVE-2023-4863, una vulnerabilità di overflow del buffer heap in libwebp versioni superiori alla 0.5.0. Esegui questo script nel tuo ambiente d...

CVE-2023-4863

CVE-2023-4863/CVE-2023-41064 Una POC per CVE-2023-4863. NON è un exploit Un ringraziamento a @benhawkes che ha scoperto il giusto set di codelengths per attivare questa vulnerabilità! Consulta il post del blog di Ben per maggiori informazioni! https://blog.isosceles.com/the-webp-0day/...

cve-2023-4863-analysis

CVE-2023-4863 libwebp — Projet d'analyse pédagogique et de défense...

Photon OS 5.0: Libwebp PHSA-2023-5.0-91-0097

An update of the libwebp package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2023-5.0-91-0097. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 5.0: Chromium PHSA-2023-5.0-91-0160

An update of the chromium package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2023-5.0-91-0160. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

EUVD-2026-48614

Image::WebP versions through 0.2 for Perl bundle a vulnerable version of libwebp. Image::WebP does not link to the system libwebp. Instead, it uses a bundled copy of libwebp 0.3.0 released 2013-03-20. That version has multiple known vulnerabilities, including CVE-2023-4863. Any caller that decode...

CVE-2026-58586 Image::WebP versions before 0.3.0 for Perl bundle a vulnerable version of libwebp

Image::WebP versions before 0.3.0 for Perl bundle a vulnerable version of libwebp. Image::WebP does not link to the system libwebp. Instead, it uses a bundled copy of libwebp 0.3.0 released 2013-03-20. That version has multiple known vulnerabilities, including CVE-2023-4863. Any caller that decod...

afl-5.00c-1.1 on GA media (moderate)

afl-5.00c-1.1 on GA media Announcement ID: openSUSE-SU-2026:10991-1 Rating: moderate Cross-References: CVE-2023-4863 CVSS scores: CVE-2023-4863 SUSE : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can now be...

NewStart CGSL MAIN 6.06 (SP) : libwebp Vulnerability (NS-SA-2026-0031)

The remote NewStart CGSL host, running version MAIN 6.06 SP, has libwebp packages installed that are affected by a vulnerability: - Heap buffer overflow in libwebp in Google Chrome prior to 116.0.5845.187 and libwebp 1.3.2 allowed a remote attacker to perform an out of bounds memory write via a...

MiracleLinux 9 : firefox-102.15.1-1.el9.ML.1 (AXSA:2023-6450:36)

The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2023-6450:36 advisory. libwebp: Heap buffer overflow in WebP Codec CVE-2023-4863 Tenable has extracted the preceding description block directly from the MiracleLinux security...

MiracleLinux 7 : firefox-102.15.1-1.0.1.el7.AXS7 (AXSA:2023-6415:34)

The remote MiracleLinux 7 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2023-6415:34 advisory. libwebp: Heap buffer overflow in WebP Codec CVE-2023-4863 Tenable has extracted the preceding description block directly from the MiracleLinux security...

MiracleLinux 8 : thunderbird-102.15.1-1.el8.ML.1 (AXSA:2023-6445:26)

The remote MiracleLinux 8 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2023-6445:26 advisory. libwebp: Heap buffer overflow in WebP Codec CVE-2023-4863 Tenable has extracted the preceding description block directly from the MiracleLinux security...

MiracleLinux 9 : thunderbird-102.15.1-1.el9.ML.1 (AXSA:2023-6449:27)

The remote MiracleLinux 9 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2023-6449:27 advisory. libwebp: Heap buffer overflow in WebP Codec CVE-2023-4863 Tenable has extracted the preceding description block directly from the MiracleLinux security...