Inject-PHP-to-JPG-Using-Jhead

Inject-PHP-to-JPG-Using-Jhead $ pkg install vim or apt-get install vim $ pkg install jhead or apt-get install jhead $ jhead -h （查看帮助） $ jhead -purejpg yourfiles.jpg $ jhead -ce yourfiles.jpg 按 ESC 键，输入 :x 保存 $ jhead yourfiles.jpg 示例：site.com/youfiles.php?cmd=Command Here...

CVE-2026-43893

exiftool-vendored.js 安全公告 GHSA-cw26-7653-2rp5 受影响版本： 所有版本 漏洞描述： exiftool-vendored.js 在解析恶意构造的图片文件时存在命令注入漏洞。攻击者可通过精心构造的文件内容，在目标系统上执行任意命令。 影响： 成功利用此漏洞的攻击者可以以运行该库的进程权限执行任意系统命令，可能导致数据泄露、系统被完全控制等严重后果。 修复建议： 升级到已修复该漏洞的版本 避免处理来自不可信来源的图片文件 在沙箱或受限环境中运行使用该库的应用程序 参考链接： GitHub 安全公告...

Stego-Lab

Stego-Lab ステガノグラフィ。EXIF。透かし。デコード。バッチ。 iPhone、iPad、macOS向けのプロフェッショナルな画像プライバシーワークフロー。 Webサイト · GitLab · プロジェクトページ · プライバシーポリシー · プレスキット · サポート · ライセンス Stego-Labの理由 Stego-Labは、通常複数のアプリに分散しているワークフロー（不可視ステガノグラフィ、可視透かし入れ、EXIF編集、デコード、バッチ処理）を1つにまとめます。...

libexif_Android10_r33_CVE-2016-6328

libexif ------- 描述 libexif 是一个用于解析、编辑和保存 EXIF 数据的库。它 旨在取代命令行工具和 GUI 程序中的大量重复实现。 功能特性 libexif 支持 EXIF 数据的解析、编辑和保存。此外，它 还支持 gettext。EXIF 标准 2.1（以及 2.2 中的大多数标签）中描述的所有 EXIF 标签 均受支持。来自 Canon、Casio、Epson、 Fuji、Nikon、Olympus、Pentax 和 Sanyo 相机的许多厂商备注也受支持。 依赖要求 libexif 使用纯 C 语言编写，不需要任何额外的库。 如果可用，将使用 GNU...

LocalExifGeoMap

Local Exif Geo Map 📍 A powerful, privacy-focused, browser-based tool to visualize and analyze GPS data from your photos. Simply drag and drop images to generate interactive maps, heatmaps, elevation profiles, and trip statistics. Why? I've always wanted a self-hosted tool to analyze my photos and...

Pixel-Flood-Attack

Pixel Flood DoS - CVE-2024-22393 PoC Pixel Flood Bug for Web Servers A lightweight Proof-of-Concept to test for the Pixel Flood memory exhaustion vulnerability in web applications running vulnerable versions of Apache Answer. Table of Contents Description Technical Details Affected Versions...

CVE-2026-51974

An eval injection vulnerability in the getlist function in modules/metaparser.py in lllyasviel Fooocus 2.1.854 through 2.5.5 allows remote attackers to execute arbitrary Python code via a crafted styles payload in the EXIF metadata of an uploaded image file...

CVE-2026-51974

CVE-2026-51974 is an eval() injection vulnerability in the get_list function of modules/meta_parser.py in lllyasviel Fooocus versions 2.1.854 through 2.5.5 . A remote attacker with low privileges can craft a "styles" payload in the EXIF metadata of an uploaded image file, causing the application ...

EUVD-2026-69416

An eval injection vulnerability in the getlist function in modules/metaparser.py in lllyasviel Fooocus 2.1.854 through 2.5.5 allows remote attackers to execute arbitrary Python code via a crafted styles payload in the EXIF metadata of an uploaded image file...

CVE-2026-51974

An eval injection vulnerability in the getlist function in modules/metaparser.py in lllyasviel Fooocus 2.1.854 through 2.5.5 allows remote attackers to execute arbitrary Python code via a crafted styles payload in the EXIF metadata of an uploaded image file...

CVE-2026-51974

An eval injection vulnerability in the getlist function in modules/metaparser.py in lllyasviel Fooocus 2.1.854 through 2.5.5 allows remote attackers to execute arbitrary Python code via a crafted styles payload in the EXIF metadata of an uploaded image file...

Astra Linux – Vulnerability in gst-plugins-base1.0

GStreamer EXIF Metadata Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. Interaction with this library is required to exploit this vulnerability, but the attack vectors may va...

Astra Linux – Vulnerability in libimage-exiftool-perl

In ExifTool’s lib/Image/ExifTool.pm, version 12.38 incorrectly handles the $file = /|$/ check, resulting in command injection...

Astra Linux – Vulnerability in exiv2

A flaw was discovered in Exiv2 in versions prior to and including 0.27.4-RC1. Improper input validation of the rawData.size property in the Jp2Image::readMetadata function, located in jp2image.cpp, can lead to a heap-based buffer overflow through a specially crafted JPG image containing malicious...

ANT-2026-JBKARRJ7 · libvips · Out-of-bounds Write

oob-write low CVE-2026-35590 GHSA-jmwm-wc68-mhwm Severity Claude low · Security research firm low · Maintainer - Discovered by Claude Mythos Preview REPORT Anthropic's analysis, sealed at approval. Disclosure to the maintainer was performed by Trail of Bits. ANT-2026-JBKARRJ7: Out-of-bounds IFD...

CVE-2026-35590

A flaw was found in libvips. The EXIF decoder did not properly verify the range of EXIF tag groups, which could lead to a null pointer dereference. A local user could exploit this by providing specially crafted EXIF data, causing the application to crash and resulting in a denial of service...

CVE-2026-19082

Imager versions from 0.4502 before 1.034 for Perl may expose adjacent heap bytes via strlen over-read from zero-count ASCII EXIF entries in copystringtags. copystringtags computes an ASCII EXIF tag's length as entry-size - 1 to strip the trailing NUL. A zero-count ASCII entry sets entry-size to 0...

CVE-2026-19082

Imager versions from 0.4502 before 1.034 for Perl may expose adjacent heap bytes via strlen over-read from zero-count ASCII EXIF entries in copystringtags. copystringtags computes an ASCII EXIF tag's length as entry-size - 1 to strip the trailing NUL. A zero-count ASCII entry sets entry-size to 0...

UBUNTU-CVE-2026-19082

Imager versions from 0.4502 before 1.034 for Perl may expose adjacent heap bytes via strlen over-read from zero-count ASCII EXIF entries in copystringtags. copystringtags computes an ASCII EXIF tag's length as entry-size - 1 to strip the trailing NUL. A zero-count ASCII entry sets entry-size to 0...

CVE-2026-19082 Imager versions from 0.45_02 before 1.034 for Perl may expose adjacent heap bytes via strlen() over-read from zero-count ASCII EXIF entries in copy_string_tags

Imager versions from 0.4502 before 1.034 for Perl may expose adjacent heap bytes via strlen over-read from zero-count ASCII EXIF entries in copystringtags. copystringtags computes an ASCII EXIF tag's length as entry-size - 1 to strip the trailing NUL. A zero-count ASCII entry sets entry-size to 0...