ExifSmugglingPoC

Exif Smuggling Une preuve de concept évoluée du Cache Smuggling. Cette attaque dissimule une charge utile exécutable dans les données Exif d'une image JPG. Ainsi, la mise en cache d'images comme celle d'un navigateur Web peut être utilisée pour télécharger passivement la charge utile. Par...

xzf

Введение xzf — это простая PoC, демонстрирующая, как данные EXIF могут использоваться для управления и контроля C2. xzf получает изображение по заданному URL, затем считывает тег Software для строки аутентификации. Если строка совпадает, xzf выполнит всё, что содержится в теге ImageDescription...

FOCA

FOCA Fingerprinting Organizations with Collected Archives FOCA est un outil utilisé principalement pour trouver des métadonnées et des informations cachées dans les documents qu'il analyse. Ces documents peuvent se trouver sur des pages web, et peuvent être téléchargés et analysés avec FOCA. Il e...

external_libexif_AOSP10_r33_CVE-2020-0198

libexif ------- DESCRIPTION libexif est une bibliothèque pour analyser, éditer et sauvegarder des données EXIF. Elle est destinée à remplacer de nombreuses implémentations redondantes dans les utilitaires en ligne de commande et les programmes avec des IHM. FONCTIONNALITÉS libexif prend en charge...

basecrack

BaseCrack Décodeur pour les schémas de codage en base BaseCrack est un outil écrit en Python qui peut décoder tous les schémas de codage en base alphanumériques. Cet outil peut accepter une entrée utilisateur unique, plusieurs entrées depuis un fichier, une entrée depuis un argument, des bases...

Inject-PHP-to-JPG-Using-Jhead

Инъекция PHP в JPG с помощью Jhead $ pkg install vim или apt-get install vim $ pkg install jhead или apt-get install jhead $ jhead -h для справки $ jhead -purejpg yourfiles.jpg $ jhead -ce yourfiles.jpg Нажмите ESC, введите :x для сохранения $ jhead yourfiles.jpg Пример:...

libexif_Android10_r33_CVE-2016-6328

libexif ОПИСАНИЕ libexif — это библиотека для разбора, редактирования и сохранения данных EXIF. Она призвана заменить множество избыточных реализаций в консольных утилитах и программах с графическим интерфейсом. ВОЗМОЖНОСТИ libexif поддерживает разбор, редактирование и сохранение данных EXIF. Кро...

LocalExifGeoMap

Local Exif Geo Map 📍 Мощный браузерный инструмент, ориентированный на конфиденциальность, для визуализации и анализа GPS-данных из ваших фотографий. Просто перетащите изображения, чтобы создавать интерактивные карты, тепловые карты, профили высот и статистику поездок. Зачем? Я всегда хотел...

Astra Linux – Vulnerability in exiv2

A flaw was discovered in Exiv2 in versions prior to and including 0.27.4-RC1. Improper input validation of the rawData.size property in the Jp2Image::readMetadata function, located in jp2image.cpp, can lead to a heap-based buffer overflow through a specially crafted JPG image containing malicious...

EUVD-2026-54561

Imager versions from 0.4502 before 1.034 for Perl may expose adjacent heap bytes via strlen over-read from zero-count ASCII EXIF entries in copystringtags. copystringtags computes an ASCII EXIF tag's length as entry-size - 1 to strip the trailing NUL. A zero-count ASCII entry sets entry-size to 0...

CVE-2026-19082

Imager versions from 0.4502 before 1.034 for Perl may expose adjacent heap bytes via strlen over-read from zero-count ASCII EXIF entries in copystringtags. copystringtags computes an ASCII EXIF tag's length as entry-size - 1 to strip the trailing NUL. A zero-count ASCII entry sets entry-size to 0...

CVE-2026-66040 FFmpeg Heap Out-of-Bounds Write via PNG/APNG eXIf Encoder

FFmpeg through 8.1.2, fixed in commit b506faf, contains a heap out-of-bounds write vulnerability in the native PNG and APNG encoders that allows remote attackers to corrupt heap memory by supplying a crafted PNG image with a malicious eXIf chunk. Attackers can craft an eXIf chunk where multiple I...

CVE-2026-66040

FFmpeg

PT-2026-64416

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 8.1.2 Description A heap out-of-bounds write exists in the native PNG and APNG encoders. A remote attacker can corrupt heap memory by providing a crafted PNG image containing a malicious eXIf chunk. By creating an eXIf...

Linux Distros Unpatched Vulnerability : CVE-2026-14454

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Imager versions before 1.033 for Perl treat unsigned EXIF IFD entry counts as signed. Imager mishandled large EXIF IFD entry count values, treating them as...

DEBIAN-CVE-2026-14454

Imager versions before 1.033 for Perl treat unsigned EXIF IFD entry counts as signed. Imager mishandled large EXIF IFD entry count values, treating them as negative numbers. This could lead to an attempt to allocate a block nearly the size of the address space, which fails and kills the process. ...

UBUNTU-CVE-2026-14454

Imager versions before 1.033 for Perl treat unsigned EXIF IFD entry counts as signed. Imager mishandled large EXIF IFD entry count values, treating them as negative numbers. This could lead to an attempt to allocate a block nearly the size of the address space, which fails and kills the process. ...

CVE-2026-14454

Imager versions before 1.033 for Perl treat unsigned EXIF IFD entry counts as signed. Imager mishandled large EXIF IFD entry count values, treating them as negative numbers. This could lead to an attempt to allocate a block nearly the size of the address space, which fails and kills the process. ...

CVE-2026-14454 Imager versions before 1.033 for Perl treat unsigned EXIF IFD entry counts as signed

Imager versions before 1.033 for Perl treat unsigned EXIF IFD entry counts as signed. Imager mishandled large EXIF IFD entry count values, treating them as negative numbers. This could lead to an attempt to allocate a block nearly the size of the address space, which fails and kills the process. ...

CVE-2026-14454 Imager versions before 1.033 for Perl treat unsigned EXIF IFD entry counts as signed

Imager versions before 1.033 for Perl treat unsigned EXIF IFD entry counts as signed. Imager mishandled large EXIF IFD entry count values, treating them as negative numbers. This could lead to an attempt to allocate a block nearly the size of the address space, which fails and kills the process. ...