ElectronVulnerableVersion

查找易受 CVE-2023-4863 / CVE-2023-5129 影响的 Electron 应用 该 PowerShell 脚本下载 Sysinternals Strings，递归搜索所有驱动器中所有 .exe 文件内的字符串，并将找到的 Electron 版本与下面已知的已修补版本进行比较，以确定是否易受 CVE-2023-4863 / CVE-2023-5129 影响。 注意： 脚本将 strings.zip 下载到 C:\Windows\Temp 并从中提取 strings.exe。运行脚本的用户需要该文件夹的权限。如果您使用 RMM 工具，则不会有问题，因为它以 SYSTEM...

NotEnough

Herramienta de hackeo de tablas de Huffman Esta herramienta calcula un histograma de Huffman canónico engañoso, capaz de provocar una escritura OOB fuera de los límites en la biblioteca libwebp vulnerable es decir, libwebp = 1.3.1. Esta vulnerabilidad se conoce como CVE-2023-4863 o CVE-2023-41064...

webp-CVE-2023-4863

libwebp CVE-2023-4863 一个可以黑掉全世界的漏洞 - CVE-2023-4863 8秒内发现.webp漏洞（使用AFL++进行模糊测试）...

Rocky Linux 8.6 [CIQ] Security Update: libwebp / libwebp-debuginfo / libwebp-debugsource / libwebp-devel / etc (ciqsa-2026_0098)

The Rocky Linux 8.6 host has packages installed that are affected by a vulnerability as referenced in the CIQ ciqsa-20260098 advisory. This advisory aggregates security fixes for the libwebp SRPM in CIQ LTS 8.6. It addresses 1 CVE: CVE-2023-4863. Tenable has extracted the preceding description...

CVE-2023-4863

所有功劳归功于 DARKNAVY 的脚本。这只是修改后的版本，在文件顶部添加了 OFFSET 和 VALUE 常量，以便更容易调整。...

BAD-WEBP-CVE-2023-4863

BAD-WEBP-CVE-2023-4863 BAD-WEBP-CVE-2023-4863...

libwebp-checker

中文 | EN CVE-2023-4863 libwebp 依存関係チェックツール このツールは、サーバーのアプリケーションやプロセスが、CVE-2023-4863 libwebp ヒープバッファオーバーフローの影響を受けるかどうかをチェックします（バージョン 0.5.0 以上）。 このスクリプトは本番環境で慎重に実行してください。 結果のスクリーンショット スキャン結果 目次 1. 仕組み 2. 動作シナリオ 3. はじめに 4. コミュニケーション 5. ライセンス 仕組み 1...

Find-VulnerableElectronVersion

Find-VulnerableElectronVersion 扫描可执行文件，并通过Sysinternals工具Strings判断它是否被打包到受Chromium漏洞CVE-2023-4863/CVE-2023-5129影响的Electron版本中。仅支持Windows设备。 需要安装Sysinternals: https://learn.microsoft.com/en-us/sysinternals/downloads/sysinternals-suite 示例语法: Find-VulnerableElectronVersion -AppPath...

CVE-2023-4863

CVE-2023-4863/CVE-2023-41064 CVE-2023-4863 的概念验证，并非利用程序 感谢 @benhawkes 发现了正确的 codelengths 集合来触发此漏洞！ 更多信息请参阅 Ben 的博客文章！ https://blog.isosceles.com/the-webp-0day/...

cve-2023-4863-analysis

CVE-2023-4863 libwebp 培训与防御分析项目 顾问信息 姓名| GitHub| 电子邮件| LinkedIn| 网站 ---|---|---|---|--- Keyvan Arasteh| @keyvanarasteh| [email protected]| keyvanarasteh| qline.tech 学生信息 姓名| 学号 ---|--- Batuhan Seydi Çelik| 25201006 课程信息 课程名称| 课程代码| 学分| 先修条件| 学期 ---|---|---|---|--- 渗透测试与漏洞分析| BGT006| 3 EC...

lab-cve-2023-4863

CVE-2023-4863 — libwebp 漏洞利用实验室 在完全隔离且自动化的 Docker 环境中复现 CVE-2023-4863（libwebp 堆缓冲区溢出）。基于 CEFIRE 的道德黑客模块实践。 本实验室功能 在私有网络中启动八个容器： 容器| 角色 ---|--- attacker| 使用 craft.c 生成 exploit.webp，并通过 HTTP 提供该文件以及一个模拟钓鱼页面 victim-cli| Ubuntu 22.04，带 libwebp 1.2.2-2ubuntu0.22.04.1（有漏洞版本）。自动下载并处理该漏洞利用文件 → 崩溃...

Photon OS 5.0: Libwebp PHSA-2023-5.0-91-0097

An update of the libwebp package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2023-5.0-91-0097. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 5.0: Chromium PHSA-2023-5.0-91-0160

An update of the chromium package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2023-5.0-91-0160. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

PT-2026-64894

Forensic Master Report: API and GPS Infrastructure Interference 1. Threat Actor Identification and Landscape Forensic telemetry identifies a multi-tiered adversarial campaign characterized by a sophisticated coordination between institutional actors and Advanced Persistent Threat APT groups. The...

EUVD-2026-48614

Image::WebP versions through 0.2 for Perl bundle a vulnerable version of libwebp. Image::WebP does not link to the system libwebp. Instead, it uses a bundled copy of libwebp 0.3.0 released 2013-03-20. That version has multiple known vulnerabilities, including CVE-2023-4863. Any caller that decode...

CVE-2026-58586 Image::WebP versions before 0.3.0 for Perl bundle a vulnerable version of libwebp

Image::WebP versions before 0.3.0 for Perl bundle a vulnerable version of libwebp. Image::WebP does not link to the system libwebp. Instead, it uses a bundled copy of libwebp 0.3.0 released 2013-03-20. That version has multiple known vulnerabilities, including CVE-2023-4863. Any caller that decod...

CVE-2026-58586: Dependency on Vulnerable Third-Party Component

Image::WebP versions before 0.3.0 for Perl bundle a vulnerable version of libwebp. Image::WebP does not link to the system libwebp. Instead, it uses a bundled copy of libwebp 0.3.0 released 2013-03-20. That version has multiple known vulnerabilities, including CVE-2023-4863. Any caller that decod...

afl-5.00c-1.1 on GA media (moderate)

afl-5.00c-1.1 on GA media Announcement ID: openSUSE-SU-2026:10991-1 Rating: moderate Cross-References: CVE-2023-4863 CVSS scores: CVE-2023-4863 SUSE : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can now be...

NewStart CGSL MAIN 6.06 (SP) : libwebp Vulnerability (NS-SA-2026-0031)

The remote NewStart CGSL host, running version MAIN 6.06 SP, has libwebp packages installed that are affected by a vulnerability: - Heap buffer overflow in libwebp in Google Chrome prior to 116.0.5845.187 and libwebp 1.3.2 allowed a remote attacker to perform an out of bounds memory write via a...

MiracleLinux 9 : firefox-102.15.1-1.el9.ML.1 (AXSA:2023-6450:36)

The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2023-6450:36 advisory. libwebp: Heap buffer overflow in WebP Codec CVE-2023-4863 Tenable has extracted the preceding description block directly from the MiracleLinux security...