exifLooter

Exif Looter ブログ投稿 » · バグを報告 · 機能をリクエスト 目次 1. はじめに インストール 2. 使用方法 特定の画像を分析 特定のディレクトリを分析 他のツールとのパイプ 画像からメタデータを削除 Open Street MapのURLを取得 3. レポート 4. ロードマップ 5. コントリビューション 6. ライセンス 7. 連絡先 はじめに Exif Looterをローカルでセットアップするための一般的な情報 インストール root@kitploit: go install github.com/aydinnyunus/exifLooter@latest...

exif-gps-tracer

exif-gps-tracer Python 스크립트로, 데이터셋에 저장된 이미지 파일에서 GeoLocation 데이터를 파싱합니다. 또한 CSV 파일과 HTML Google Maps 형태로 출력을 생성합니다. 사전 요구사항 이 스크립트를 원활하게 실행하려면, 1 Google Maps API 키가 필요합니다. 2 콘솔에서 Map JavaScript API를 활성화해야 합니다. API 키를 얻으려면 다음 문서를 참조하세요...

GitLab-preauth-RCE_CVE-2021-22205

GitLab-preauth-RCECVE-2021-22205 GitLab事前認証RCE（CVE-2021-22205）のシングルラインバッシュPoC root@kitploit: t="http://vuln.site";cmd='echo xxxbase64ofreverseshellcodexxx |base64 -d|bash';f="1.jpg";echo...

Pixel-Flood-Attack

Pixel Flood DoS - CVE-2024-22393 PoC 웹 서버용 Pixel Flood 취약점 취약한 Apache Answer 버전을 실행하는 웹 애플리케이션에서 Pixel Flood 메모리 고갈 취약점을 테스트하기 위한 경량 개념 증명PoC입니다. 목차 설명 기술 세부사항 영향 받는 버전 요구사항 사용법 PoC 단계 탐지 완화 버그 바운티 팁 참고 자료 면책 조항 설명 이 저장소는 Apache Answer버전 1.2.1까지의 심각한 취약점인 CVE-2024-22393 에 대한 개념 증명PoC을 포함합니다. 이 취약...

Exif-Remove

명령줄 도구 - Exif 데이터를 쉽게 제거하세요 이 도구는 Python 2.7로 제작되었으며 Windows OS용 pyinstaller로 컴파일되었습니다. 이 도구는 특별한 것이 없으며 단지 제 작업을 편리하게 해줍니다. 여러분에게도 유용할 수 있습니다. 어떤 이유로? Exif는 사진에 숨겨진 메타데이터입니다. 많은 선의의 사람들이 모르는 사이에 디지털 사진의 메타데이터에 포함된 개인 정보를 노출합니다. 온라인 기밀성을 더 잘 보호하려면 exif 데이터를 제거하는 것이 중요합니다. 변경 로그 v.1.0.3 도구가 exif...

imago-forensics

imago-forensics 🕵️ Imago는 이미지에서 디지털 증거를 재귀적으로 추출하는 Python 도구입니다. 이 도구는 디지털 포렌식 조사 과정에서 유용합니다. 많은 이미지에서 디지털 증거를 추출해야 할 경우, 이 도구를 통해 쉽게 비교할 수 있습니다. Imago는 추출된 증거를 CSV 파일이나 SQLite 데이터베이스로 저장할 수 있습니다. JPEG EXIF에 GPS 좌표가 포함된 경우 Imago는 위도와 경도를 추출하여 도 단위로 변환하고 도시, 국가, 우편번호 등의 관련 정보를 검색할 수 있습니다. Imago는 또한...

CVE-2026-51974

An eval injection vulnerability in the getlist function in modules/metaparser.py in lllyasviel Fooocus 2.1.854 through 2.5.5 allows remote attackers to execute arbitrary Python code via a crafted styles payload in the EXIF metadata of an uploaded image file...

EUVD-2026-69416

An eval injection vulnerability in the getlist function in modules/metaparser.py in lllyasviel Fooocus 2.1.854 through 2.5.5 allows remote attackers to execute arbitrary Python code via a crafted styles payload in the EXIF metadata of an uploaded image file...

CVE-2026-51974

An eval injection vulnerability in the getlist function in modules/metaparser.py in lllyasviel Fooocus 2.1.854 through 2.5.5 allows remote attackers to execute arbitrary Python code via a crafted styles payload in the EXIF metadata of an uploaded image file...

CVE-2026-51974

CVE-2026-51974 is an eval() injection vulnerability in the get_list function of modules/meta_parser.py in lllyasviel Fooocus versions 2.1.854 through 2.5.5 . A remote attacker with low privileges can craft a "styles" payload in the EXIF metadata of an uploaded image file, causing the application ...

CVE-2026-51974

An eval injection vulnerability in the getlist function in modules/metaparser.py in lllyasviel Fooocus 2.1.854 through 2.5.5 allows remote attackers to execute arbitrary Python code via a crafted styles payload in the EXIF metadata of an uploaded image file...

ANT-2026-JBKARRJ7 · libvips · Out-of-bounds Write

oob-write low CVE-2026-35590 GHSA-jmwm-wc68-mhwm Severity Claude low · Security research firm low · Maintainer - Discovered by Claude Mythos Preview REPORT Anthropic's analysis, sealed at approval. Disclosure to the maintainer was performed by Trail of Bits. ANT-2026-JBKARRJ7: Out-of-bounds IFD...

CVE-2026-56298 Capgo - EXIF Metadata Exposure in App Information Image Upload

Capgo before 12.128.2 fails to strip EXIF metadata from images uploaded via the app information endpoint, exposing sensitive geolocation data. Attackers can upload images containing EXIF metadata to extract geographic location information and other embedded metadata from uploaded files...

CVE-2026-56218 Capgo - EXIF Metadata Exposure via Image Upload

Capgo before 12.128.2 fails to strip EXIF metadata including GPS geolocation data from uploaded images, allowing information disclosure. Attackers can download uploaded images and extract precise latitude and longitude coordinates revealing user physical location at capture time...

CVE-2026-56218 Capgo - EXIF Metadata Exposure via Image Upload

Capgo before 12.128.2 fails to strip EXIF metadata including GPS geolocation data from uploaded images, allowing information disclosure. Attackers can download uploaded images and extract precise latitude and longitude coordinates revealing user physical location at capture time...

CVE-2025-31959

Affected product : HCL BigFix Service Management (SM). Vulnerability : The SM application fails to strip EXIF metadata from uploaded images. This metadata may include sensitive location information, leading to confidentiality/privacy risks if inadvertently shared. Impact (from sources) : Privacy/...

HCL BigFix Service Management 安全漏洞

HCL BigFix Service Management is an IT service management and asset management platform developed by the Indian company HCL. There is a security vulnerability in HCL BigFix Service Management. This vulnerability stems from the failure to remove EXIF metadata from uploaded images, which may lead t...

Kai-Tools

Kai Tools 🚀 Kai Tools adalah suite keamanan dan intelijen...

PT-2026-28384

Name of the Vulnerable Software and Affected Versions Tandoor Recipes versions prior to 2.6.0 Description The application is designed for managing recipes, planning meals, and creating shopping lists. Prior to version 2.6.0, the image processing pipeline does not remove EXIF metadata, rescale...

MiracleLinux 8 : gstreamer1-plugins-base-1.16.1-4.el8_10 (AXSA:2024-9007:03)

The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2024-9007:03 advisory. gstreamer: EXIF Metadata Parsing Integer Overflow CVE-2024-4453 Tenable has extracted the preceding description block directly from the MiracleLinux security...