Inject-PHP-to-JPG-Using-Jhead

Inyectar-PHP-en-JPG-usando-Jhead $ pkg install vim o apt-get install vim $ pkg install jhead o apt-get install jhead $ jhead -h para ayuda $ jhead -purejpg tusarchivos.jpg $ jhead -ce tusarchivos.jpg Pulsa ESC y escribe :x para guardar $ jhead tusarchivos.jpg Ejemplo:...

CVE-2026-43893

Aviso de seguridad: exiftool-vendored.js Vulnerabilidad de inyección de argumentos en exiftool-vendored.js Identificador: GHSA-cw26-7653-2rp5 Repositorio afectado: photostructure/exiftool-vendored.js Resumen exiftool-vendored.js es vulnerable a la inyección de argumentos cuando se pasan nombres d...

Stego-Lab

Stego-Lab 隐写术。EXIF。水印。解码。批量处理。 适用于 iPhone、iPad 和 macOS 的专业图片隐私工作流。 网站 · GitLab · 项目页面 · 隐私政策 · 媒体资料 · 支持 · 许可证 为什么选择 Stego-Lab Stego-Lab 将通常分散在多个应用中的工作流整合到一起：不可见隐写术、可见水印、EXIF 编辑、解码以及批量处理。 Stego-Lab 整合了通常分散在多个应用中的工作流：不可见隐写术、可见水印、EXIF 编辑、解码和批量处理。 它专为创作者、摄影师、注重取证的用户以及需要在 iPhone、iPad 和 Mac...

libexif_Android10_r33_CVE-2016-6328

libexif ------- 描述 libexif 是一个用于解析、编辑和保存 EXIF 数据的库。它 旨在取代命令行工具和 GUI 程序中的大量重复实现。 功能特性 libexif 支持 EXIF 数据的解析、编辑和保存。此外，它 还支持 gettext。EXIF 标准 2.1（以及 2.2 中的大多数标签）中描述的所有 EXIF 标签 均受支持。来自 Canon、Casio、Epson、 Fuji、Nikon、Olympus、Pentax 和 Sanyo 相机的许多厂商备注也受支持。 依赖要求 libexif 使用纯 C 语言编写，不需要任何额外的库。 如果可用，将使用 GNU...

LocalExifGeoMap

Local Exif Geo Map 📍 一款注重隐私、基于浏览器的强大工具，用于可视化和分析照片中的GPS数据。只需拖放图片，即可生成交互式地图、热力图、海拔剖面图和行程统计。 为什么？ 我一直想要一个自托管的工具来分析我的照片并将其变成地图。后来我去了克罗地亚度假，海风决定把我的吊床当作死敌。凌晨2点，睡眠不足且被风吹得有点狼狈的我，退回到海滩，像个彻头彻尾的疯子一样在手机上编出了这个应用的核心代码。 它仍然是个美丽的灾难——由海风、失眠和可疑的人生选择驱动。但令人震惊的是，大部分功能居然真的能用。...

Pixel-Flood-Attack

Pixel Flood DoS - CVE-2024-22393 PoC 针对Web服务器的Pixel Flood漏洞 一个轻量级的概念验证，用于测试运行受影响版本Apache Answer的Web应用程序中的Pixel Flood内存耗尽漏洞。 目录 描述 技术细节 受影响版本 环境要求 使用说明 PoC步骤 检测 缓解措施 漏洞赏金提示 参考 免责声明 描述 本仓库包含CVE-2024-22393 的概念验证，这是Apache Answer（版本至1.2.1）中的一个严重漏洞，允许经过身份验证的攻击者使用精心制作的图像文件使服务器崩溃。该攻击也被称为“Pixel...

CVE-2026-51974

An eval injection vulnerability in the getlist function in modules/metaparser.py in lllyasviel Fooocus 2.1.854 through 2.5.5 allows remote attackers to execute arbitrary Python code via a crafted styles payload in the EXIF metadata of an uploaded image file...

CVE-2026-51974

CVE-2026-51974 is an eval() injection vulnerability in the get_list function of modules/meta_parser.py in lllyasviel Fooocus versions 2.1.854 through 2.5.5 . A remote attacker with low privileges can craft a "styles" payload in the EXIF metadata of an uploaded image file, causing the application ...

EUVD-2026-69416

An eval injection vulnerability in the getlist function in modules/metaparser.py in lllyasviel Fooocus 2.1.854 through 2.5.5 allows remote attackers to execute arbitrary Python code via a crafted styles payload in the EXIF metadata of an uploaded image file...

CVE-2026-51974

An eval injection vulnerability in the getlist function in modules/metaparser.py in lllyasviel Fooocus 2.1.854 through 2.5.5 allows remote attackers to execute arbitrary Python code via a crafted styles payload in the EXIF metadata of an uploaded image file...

CVE-2026-51974

An eval injection vulnerability in the getlist function in modules/metaparser.py in lllyasviel Fooocus 2.1.854 through 2.5.5 allows remote attackers to execute arbitrary Python code via a crafted styles payload in the EXIF metadata of an uploaded image file...

Astra Linux – Vulnerability in gst-plugins-base1.0

GStreamer EXIF Metadata Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. Interaction with this library is required to exploit this vulnerability, but the attack vectors may va...

Astra Linux – Vulnerability in libimage-exiftool-perl

In ExifTool’s lib/Image/ExifTool.pm, version 12.38 incorrectly handles the $file = /|$/ check, resulting in command injection...

Astra Linux – Vulnerability in exiv2

A flaw was discovered in Exiv2 in versions prior to and including 0.27.4-RC1. Improper input validation of the rawData.size property in the Jp2Image::readMetadata function, located in jp2image.cpp, can lead to a heap-based buffer overflow through a specially crafted JPG image containing malicious...

ANT-2026-JBKARRJ7 · libvips · Out-of-bounds Write

oob-write low CVE-2026-35590 GHSA-jmwm-wc68-mhwm Severity Claude low · Security research firm low · Maintainer - Discovered by Claude Mythos Preview REPORT Anthropic's analysis, sealed at approval. Disclosure to the maintainer was performed by Trail of Bits. ANT-2026-JBKARRJ7: Out-of-bounds IFD...

CVE-2026-35590

A flaw was found in libvips. The EXIF decoder did not properly verify the range of EXIF tag groups, which could lead to a null pointer dereference. A local user could exploit this by providing specially crafted EXIF data, causing the application to crash and resulting in a denial of service...

CVE-2026-19082

Imager versions from 0.4502 before 1.034 for Perl may expose adjacent heap bytes via strlen over-read from zero-count ASCII EXIF entries in copystringtags. copystringtags computes an ASCII EXIF tag's length as entry-size - 1 to strip the trailing NUL. A zero-count ASCII entry sets entry-size to 0...

CVE-2026-19082

Imager versions from 0.4502 before 1.034 for Perl may expose adjacent heap bytes via strlen over-read from zero-count ASCII EXIF entries in copystringtags. copystringtags computes an ASCII EXIF tag's length as entry-size - 1 to strip the trailing NUL. A zero-count ASCII entry sets entry-size to 0...

UBUNTU-CVE-2026-19082

Imager versions from 0.4502 before 1.034 for Perl may expose adjacent heap bytes via strlen over-read from zero-count ASCII EXIF entries in copystringtags. copystringtags computes an ASCII EXIF tag's length as entry-size - 1 to strip the trailing NUL. A zero-count ASCII entry sets entry-size to 0...

EUVD-2026-54561

Imager versions from 0.4502 before 1.034 for Perl may expose adjacent heap bytes via strlen over-read from zero-count ASCII EXIF entries in copystringtags. copystringtags computes an ASCII EXIF tag's length as entry-size - 1 to strip the trailing NUL. A zero-count ASCII entry sets entry-size to 0...