357 matches found
ExifSmugglingPoC
Exif Smuggling Une preuve de concept évoluée du Cache Smuggling. Cette attaque dissimule une charge utile exécutable dans les données Exif d'une image JPG. Ainsi, la mise en cache d'images comme celle d'un navigateur Web peut être utilisée pour télécharger passivement la charge utile. Par...
xzf
Введение xzf — это простая PoC, демонстрирующая, как данные EXIF могут использоваться для управления и контроля C2. xzf получает изображение по заданному URL, затем считывает тег Software для строки аутентификации. Если строка совпадает, xzf выполнит всё, что содержится в теге ImageDescription...
FOCA
FOCA Fingerprinting Organizations with Collected Archives FOCA est un outil utilisé principalement pour trouver des métadonnées et des informations cachées dans les documents qu'il analyse. Ces documents peuvent se trouver sur des pages web, et peuvent être téléchargés et analysés avec FOCA. Il e...
external_libexif_AOSP10_r33_CVE-2020-0198
libexif ------- DESCRIPTION libexif est une bibliothèque pour analyser, éditer et sauvegarder des données EXIF. Elle est destinée à remplacer de nombreuses implémentations redondantes dans les utilitaires en ligne de commande et les programmes avec des IHM. FONCTIONNALITÉS libexif prend en charge...
basecrack
BaseCrack Décodeur pour les schémas de codage en base BaseCrack est un outil écrit en Python qui peut décoder tous les schémas de codage en base alphanumériques. Cet outil peut accepter une entrée utilisateur unique, plusieurs entrées depuis un fichier, une entrée depuis un argument, des bases...
Inject-PHP-to-JPG-Using-Jhead
Инъекция PHP в JPG с помощью Jhead $ pkg install vim или apt-get install vim $ pkg install jhead или apt-get install jhead $ jhead -h для справки $ jhead -purejpg yourfiles.jpg $ jhead -ce yourfiles.jpg Нажмите ESC, введите :x для сохранения $ jhead yourfiles.jpg Пример:...
libexif_Android10_r33_CVE-2016-6328
libexif ОПИСАНИЕ libexif — это библиотека для разбора, редактирования и сохранения данных EXIF. Она призвана заменить множество избыточных реализаций в консольных утилитах и программах с графическим интерфейсом. ВОЗМОЖНОСТИ libexif поддерживает разбор, редактирование и сохранение данных EXIF. Кро...
LocalExifGeoMap
Local Exif Geo Map 📍 Мощный браузерный инструмент, ориентированный на конфиденциальность, для визуализации и анализа GPS-данных из ваших фотографий. Просто перетащите изображения, чтобы создавать интерактивные карты, тепловые карты, профили высот и статистику поездок. Зачем? Я всегда хотел...
Astra Linux – Vulnerability in exiv2
A flaw was discovered in Exiv2 in versions prior to and including 0.27.4-RC1. Improper input validation of the rawData.size property in the Jp2Image::readMetadata function, located in jp2image.cpp, can lead to a heap-based buffer overflow through a specially crafted JPG image containing malicious...
EUVD-2026-54561
Imager versions from 0.4502 before 1.034 for Perl may expose adjacent heap bytes via strlen over-read from zero-count ASCII EXIF entries in copystringtags. copystringtags computes an ASCII EXIF tag's length as entry-size - 1 to strip the trailing NUL. A zero-count ASCII entry sets entry-size to 0...
CVE-2026-19082
Imager versions from 0.4502 before 1.034 for Perl may expose adjacent heap bytes via strlen over-read from zero-count ASCII EXIF entries in copystringtags. copystringtags computes an ASCII EXIF tag's length as entry-size - 1 to strip the trailing NUL. A zero-count ASCII entry sets entry-size to 0...
CVE-2026-66040 FFmpeg Heap Out-of-Bounds Write via PNG/APNG eXIf Encoder
FFmpeg through 8.1.2, fixed in commit b506faf, contains a heap out-of-bounds write vulnerability in the native PNG and APNG encoders that allows remote attackers to corrupt heap memory by supplying a crafted PNG image with a malicious eXIf chunk. Attackers can craft an eXIf chunk where multiple I...
CVE-2026-66040
FFmpeg
PT-2026-64416
Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 8.1.2 Description A heap out-of-bounds write exists in the native PNG and APNG encoders. A remote attacker can corrupt heap memory by providing a crafted PNG image containing a malicious eXIf chunk. By creating an eXIf...
Linux Distros Unpatched Vulnerability : CVE-2026-14454
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Imager versions before 1.033 for Perl treat unsigned EXIF IFD entry counts as signed. Imager mishandled large EXIF IFD entry count values, treating them as...
DEBIAN-CVE-2026-14454
Imager versions before 1.033 for Perl treat unsigned EXIF IFD entry counts as signed. Imager mishandled large EXIF IFD entry count values, treating them as negative numbers. This could lead to an attempt to allocate a block nearly the size of the address space, which fails and kills the process. ...
UBUNTU-CVE-2026-14454
Imager versions before 1.033 for Perl treat unsigned EXIF IFD entry counts as signed. Imager mishandled large EXIF IFD entry count values, treating them as negative numbers. This could lead to an attempt to allocate a block nearly the size of the address space, which fails and kills the process. ...
CVE-2026-14454
Imager versions before 1.033 for Perl treat unsigned EXIF IFD entry counts as signed. Imager mishandled large EXIF IFD entry count values, treating them as negative numbers. This could lead to an attempt to allocate a block nearly the size of the address space, which fails and kills the process. ...
CVE-2026-14454 Imager versions before 1.033 for Perl treat unsigned EXIF IFD entry counts as signed
Imager versions before 1.033 for Perl treat unsigned EXIF IFD entry counts as signed. Imager mishandled large EXIF IFD entry count values, treating them as negative numbers. This could lead to an attempt to allocate a block nearly the size of the address space, which fails and kills the process. ...
CVE-2026-14454 Imager versions before 1.033 for Perl treat unsigned EXIF IFD entry counts as signed
Imager versions before 1.033 for Perl treat unsigned EXIF IFD entry counts as signed. Imager mishandled large EXIF IFD entry count values, treating them as negative numbers. This could lead to an attempt to allocate a block nearly the size of the address space, which fails and kills the process. ...