ElectronVulnerableVersion

Encuentra aplicaciones Electron vulnerables a CVE-2023-4863 / CVE-2023-5129 Este script de PowerShell descarga Sysinternals Strings, busca recursivamente cadenas en todos los archivos .exe en todas las unidades, y compara la versión de Electron encontrada con las versiones parcheadas conocidas a...

NotEnough

Huffman table hacking tool This tool calculates tricky canonical huffman histogram, which is able to trigger OOB Out Of Band write for vulnerable libwebp library i.e. libwebp = 1.3.1. This vulnerability is known as CVE-2023-4863 or CVE-2023-41064. We can overflow the pre-allocated huffman table b...

webp-CVE-2023-4863

libwebp CVE-2023-4863 Una vulnerabilidad para hackear el mundo - CVE-2023-4863 Encontrando la vulnerabilidad .webp en 8s Fuzzing con AFL++...

CVE-2023-4863

all credit goes to DARKNAVY's script. This is just a modified version with the OFFSET and VALUE constants added to the top of the file to make it easier to adjust...

BAD-WEBP-CVE-2023-4863

BAD-WEBP-CVE-2023-4863 BAD-WEBP-CVE-2023-4863...

libwebp-checker

中文 | EN 针对CVE-2023-4863漏洞的libwebp检查工具 用于在命令行检测指定目录或当前运行进程中是否存在大于0.5.0版本的libwebp依赖，从而识别可能受到CVE-2023-4863漏洞影响的软件。 由于涉及文件扫描，建议尽量在测试环境中运行，以免影响生产服务。 效果截图 运行结果 目录 1. 工作原理 2. 使用场景 3. 使用步骤 4. 已发现的受影响java组件 5. 交流和问题反馈 6. 开源协议 工作原理 1. CVE-2023-4863漏洞影响libwebp...

Find-VulnerableElectronVersion

Find-VulnerableElectronVersion Escanea un ejecutable y determina si estaba empaquetado en una versión de Electron vulnerable a la vulnerabilidad de Chromium CVE-2023-4863/ CVE-2023-5129 mediante la herramienta Strings de Sysinternals. Solo compatible con dispositivos Windows. Requiere que...

CVE-2023-4863

CVE-2023-4863/CVE-2023-41064 Un POC para CVE-2023-4863. NO es un exploit Agradecimientos a @benhawkes que descubrió el conjunto correcto de codelengths para desencadenar esta vulnerabilidad. ¡Consulte la publicación del blog de Ben para más información! https://blog.isosceles.com/the-webp-0day/...

cve-2023-4863-analysis

CVE-2023-4863 libwebp Proyecto de Análisis de Formación y Defensa...

lab-cve-2023-4863

CVE-2023-4863 — Laboratorio de explotación de libwebp Reproducción de CVE-2023-4863 heap buffer overflow en libwebp en un entorno Docker completamente aislado y automatizado. Basado en la práctica del módulo de Hacking Ético de CEFIRE. Qué hace este lab Levanta ocho containers en red privada:...

Photon OS 5.0: Libwebp PHSA-2023-5.0-91-0097

An update of the libwebp package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2023-5.0-91-0097. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 5.0: Chromium PHSA-2023-5.0-91-0160

An update of the chromium package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2023-5.0-91-0160. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

EUVD-2026-48614

Image::WebP versions through 0.2 for Perl bundle a vulnerable version of libwebp. Image::WebP does not link to the system libwebp. Instead, it uses a bundled copy of libwebp 0.3.0 released 2013-03-20. That version has multiple known vulnerabilities, including CVE-2023-4863. Any caller that decode...

CVE-2026-58586 Image::WebP versions before 0.3.0 for Perl bundle a vulnerable version of libwebp

Image::WebP versions before 0.3.0 for Perl bundle a vulnerable version of libwebp. Image::WebP does not link to the system libwebp. Instead, it uses a bundled copy of libwebp 0.3.0 released 2013-03-20. That version has multiple known vulnerabilities, including CVE-2023-4863. Any caller that decod...

afl-5.00c-1.1 on GA media (moderate)

afl-5.00c-1.1 on GA media Announcement ID: openSUSE-SU-2026:10991-1 Rating: moderate Cross-References: CVE-2023-4863 CVSS scores: CVE-2023-4863 SUSE : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can now be...

NewStart CGSL MAIN 6.06 (SP) : libwebp Vulnerability (NS-SA-2026-0031)

The remote NewStart CGSL host, running version MAIN 6.06 SP, has libwebp packages installed that are affected by a vulnerability: - Heap buffer overflow in libwebp in Google Chrome prior to 116.0.5845.187 and libwebp 1.3.2 allowed a remote attacker to perform an out of bounds memory write via a...

MiracleLinux 9 : firefox-102.15.1-1.el9.ML.1 (AXSA:2023-6450:36)

The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2023-6450:36 advisory. libwebp: Heap buffer overflow in WebP Codec CVE-2023-4863 Tenable has extracted the preceding description block directly from the MiracleLinux security...

MiracleLinux 8 : thunderbird-102.15.1-1.el8.ML.1 (AXSA:2023-6445:26)

The remote MiracleLinux 8 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2023-6445:26 advisory. libwebp: Heap buffer overflow in WebP Codec CVE-2023-4863 Tenable has extracted the preceding description block directly from the MiracleLinux security...

MiracleLinux 7 : firefox-102.15.1-1.0.1.el7.AXS7 (AXSA:2023-6415:34)

The remote MiracleLinux 7 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2023-6415:34 advisory. libwebp: Heap buffer overflow in WebP Codec CVE-2023-4863 Tenable has extracted the preceding description block directly from the MiracleLinux security...

MiracleLinux 9 : thunderbird-102.15.1-1.el9.ML.1 (AXSA:2023-6449:27)

The remote MiracleLinux 9 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2023-6449:27 advisory. libwebp: Heap buffer overflow in WebP Codec CVE-2023-4863 Tenable has extracted the preceding description block directly from the MiracleLinux security...