FOCA

FOCA Identificazione delle organizzazioni tramite archivi raccolti FOCA è uno strumento utilizzato principalmente per trovare metadati e informazioni nascoste nei documenti che scansiona. Questi documenti possono trovarsi su pagine web e possono essere scaricati e analizzati con FOCA. È in grado ...

basecrack

BaseCrack Decodificatore per schemi di codifica Base BaseCrack è uno strumento scritto in Python in grado di decodificare tutti gli schemi di codifica base alfanumerici. Questo strumento può accettare un singolo input utente, input multipli da un file, input da argomento, basi multi-codificate ,...

xzf

Introduzione xzf è un semplice PoC che dimostra come i dati EXIF possono essere usati per il command and control. xzf recupera un'immagine da un URL predefinito, quindi legge il tag Software per una stringa di autenticazione. Se la stringa corrisponde, xzf eseguirà qualsiasi cosa contenuta nel ta...

libexif_Android10_r33_CVE-2016-6328

libexif ------- DESCRIÇÃO libexif é uma biblioteca para análise, edição e salvamento de dados EXIF. Ela pretende substituir muitas implementações redundantes em utilitários de linha de comando e programas com interfaces gráficas. CARACTERÍSTICAS libexif suporta análise, edição e salvamento de...

Inject-PHP-to-JPG-Using-Jhead

Inject-PHP-to-JPG-Using-Jhead $ pkg install vim या apt-get install vim $ pkg install jhead या apt-get install jhead $ jhead -h मदद के लिए $ jhead -purejpg yourfiles.jpg $ jhead -ce yourfiles.jpg बचाने के लिए ESC दबाएँ और :x टाइप करें $ jhead yourfiles.jpg उदाहरण : site.com/youfiles.php?cmd=Comman...

external_libexif_AOSP10_r33_CVE-2020-0198

libexif ------- BESCHREIBUNG libexif ist eine Bibliothek zum Analysieren, Bearbeiten und Speichern von EXIF-Daten. Sie soll viele redundante Implementierungen in Kommandozeilenwerkzeugen und Programmen mit GUIs ersetzen. MERKMALE libexif unterstützt das Analysieren, Bearbeiten und Speichern von...

ExifSmugglingPoC

Exif Smuggling Eine Proof-of-Concept-Weiterentwicklung von Cache Smuggling. Dieser Angriff verbirgt eine ausführbare Nutzlast in den Exif-Daten eines JPGs. Dadurch kann das Zwischenspeichern von Bildern z. B. in einem Webbrowser genutzt werden, um die Nutzlast passiv herunterzuladen. Folglich mus...

LocalExifGeoMap

Mappa Exif Geo Locale 📍 Uno strumento potente, incentrato sulla privacy, basato su browser per visualizzare e analizzare i dati GPS delle tue foto. Basta trascinare e rilasciare le immagini per generare mappe interattive, mappe di calore, profili di elevazione e statistiche di viaggio. Perché? Ho...

EUVD-2026-54561

Imager versions from 0.4502 before 1.034 for Perl may expose adjacent heap bytes via strlen over-read from zero-count ASCII EXIF entries in copystringtags. copystringtags computes an ASCII EXIF tag's length as entry-size - 1 to strip the trailing NUL. A zero-count ASCII entry sets entry-size to 0...

CVE-2026-19082

Imager versions from 0.4502 before 1.034 for Perl may expose adjacent heap bytes via strlen over-read from zero-count ASCII EXIF entries in copystringtags. copystringtags computes an ASCII EXIF tag's length as entry-size - 1 to strip the trailing NUL. A zero-count ASCII entry sets entry-size to 0...

CVE-2026-66040

FFmpeg

CVE-2026-66040 FFmpeg Heap Out-of-Bounds Write via PNG/APNG eXIf Encoder

FFmpeg through 8.1.2, fixed in commit b506faf, contains a heap out-of-bounds write vulnerability in the native PNG and APNG encoders that allows remote attackers to corrupt heap memory by supplying a crafted PNG image with a malicious eXIf chunk. Attackers can craft an eXIf chunk where multiple I...

PT-2026-64416

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 8.1.2 Description A heap out-of-bounds write exists in the native PNG and APNG encoders. A remote attacker can corrupt heap memory by providing a crafted PNG image containing a malicious eXIf chunk. By creating an eXIf...

Linux Distros Unpatched Vulnerability : CVE-2026-14454

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Imager versions before 1.033 for Perl treat unsigned EXIF IFD entry counts as signed. Imager mishandled large EXIF IFD entry count values, treating them as...

DEBIAN-CVE-2026-14454

Imager versions before 1.033 for Perl treat unsigned EXIF IFD entry counts as signed. Imager mishandled large EXIF IFD entry count values, treating them as negative numbers. This could lead to an attempt to allocate a block nearly the size of the address space, which fails and kills the process. ...

UBUNTU-CVE-2026-14454

Imager versions before 1.033 for Perl treat unsigned EXIF IFD entry counts as signed. Imager mishandled large EXIF IFD entry count values, treating them as negative numbers. This could lead to an attempt to allocate a block nearly the size of the address space, which fails and kills the process. ...

CVE-2026-14454

Imager versions before 1.033 for Perl treat unsigned EXIF IFD entry counts as signed. Imager mishandled large EXIF IFD entry count values, treating them as negative numbers. This could lead to an attempt to allocate a block nearly the size of the address space, which fails and kills the process. ...

CVE-2026-14454 Imager versions before 1.033 for Perl treat unsigned EXIF IFD entry counts as signed

Imager versions before 1.033 for Perl treat unsigned EXIF IFD entry counts as signed. Imager mishandled large EXIF IFD entry count values, treating them as negative numbers. This could lead to an attempt to allocate a block nearly the size of the address space, which fails and kills the process. ...

CVE-2026-14454 Imager versions before 1.033 for Perl treat unsigned EXIF IFD entry counts as signed

Imager versions before 1.033 for Perl treat unsigned EXIF IFD entry counts as signed. Imager mishandled large EXIF IFD entry count values, treating them as negative numbers. This could lead to an attempt to allocate a block nearly the size of the address space, which fails and kills the process. ...

CVE-2026-56218

Capgo before 12.128.2 fails to strip EXIF metadata including GPS geolocation data from uploaded images, allowing information disclosure. Attackers can download uploaded images and extract precise latitude and longitude coordinates revealing user physical location at capture time...