244 matches found
exiftool 操作系统命令注入漏洞
Exiftool is an open-source application developed by ExifTool. It makes metadata more accessible. Versions of Exiftool 13.49 and earlier had a vulnerability related to operating system command injection. This vulnerability stemmed from the SetMacOSTags function in the PNG file parser component,...
FreeBSD : Gitlab -- vulnerabilities (c6c9306e-d645-11f0-8ce2-2cf05da270f3)
The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the c6c9306e-d645-11f0-8ce2-2cf05da270f3 advisory. Gitlab reports: Cross-site scripting issue in Wiki impacts GitLab CE/EE Improper encoding in...
Gitlab -- vulnerabilities
Gitlab reports: Cross-site scripting issue in Wiki impacts GitLab CE/EE Improper encoding in vulnerability reports impacts GitLab CE/EE Cross-site scripting issue in Swagger UI impacts GitLab CE/EE Denial of service issue in GraphQL endpoints impacts GitLab CE/EE Authentication bypass issue for...
Exploit for Code Injection in Exiftool_Project Exiftool
CVE-2021-22204 취약점 exiftool 임의 명령 실행 사용법 1. exploit...
EUVD-2018-12778
Malware in sbrugna...
Exploit for Exposure of Sensitive Information to an Unauthorized Actor in Imagemagick
CVE-2022-44268 Automation Script - Quick Guide Credits - O...
ExifTool: Multiple vulnerabilities
Background ExifTool is a platform-independent Perl library plus a command-line application for reading, writing and editing meta information in a wide variety of files. Description Multiple vulnerabilities have been discovered in ExifTool. Please review the CVE identifiers referenced below for...
GLSA-202407-27 : ExifTool: Multiple vulnerabilities
The remote host is affected by the vulnerability described in GLSA-202407-27 ExifTool: Multiple vulnerabilities Multiple vulnerabilities have been discovered in ExifTool. Please review the CVE identifiers referenced below for details. Tenable has extracted the preceding description block directly...
OPENSUSE-SU-2024:11794-1 exiftool-12.39-1.1 on GA media
These are all security issues fixed in the exiftool-12.39-1.1 package on the GA media of openSUSE Tumbleweed...
Exploit for Code Injection in Exiftool_Project Exiftool
CVE-2021-22204 Summary of the CVE Improper sanitization o...
Exploit for Code Injection in Gitlab
CVE-2021-22205 Preauth RCE via exiftool on Gitlab CE/EE...
Exploit for Exposure of Sensitive Information to an Unauthorized Actor in Imagemagick
Fixed version of CVE-2022-44268 Some PoCs don't work for spec...
FreeBSD : Security Vulnerability found in ExifTool (955f377e-7bc3-11ec-a51c-7533f219d428)
The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 955f377e-7bc3-11ec-a51c-7533f219d428 advisory. - Improper neutralization of user data in the DjVu file format in ExifTool versions 7.44 and up allows...
Ubuntu 16.04 ESM : ExifTool vulnerability (USN-4987-2)
The remote Ubuntu 16.04 ESM host has a package installed that is affected by a vulnerability as referenced in the USN-4987-2 advisory. USN-4987-1 fixed a vulnerability in ExifTool. This update provides the corresponding update for Ubuntu 16.04 ESM. Tenable has extracted the preceding description...
ChurchCRM v4.5.4 - Reflected XSS via Image (Authenticated)
Exploit Title: ChurchCRM v4.5.4 - Reflected XSS via Image Authenticated Date: 2023-04-17 Exploit Author: Rahad Chowdhury Vendor Homepage: http://churchcrm.io/ Software Link: https://github.com/ChurchCRM/CRM/releases/tag/4.5.4 Version: 4.5.4 Tested on: Windows 10, PHP 7.4.29, Apache 2.4.53 CVE:...
ChurchCRM 4.5.4 Cross Site Scripting Vulnerability
Exploit Title: ChurchCRM v4.5.4 - Reflected XSS via Image Authenticated Exploit Author: Rahad Chowdhury Vendor Homepage: http://churchcrm.io/ Software Link: https://github.com/ChurchCRM/CRM/releases/tag/4.5.4 Version: 4.5.4 Tested on: Windows 10, PHP 7.4.29, Apache 2.4.53 CVE: CVE-2023-31699 Step...
Exploit for Code Injection in Exiftool_Project Exiftool
CVE-2021-22204 Exploit for CVE-2021-22204 ExifTool - Arb...
Rukovoditel 3.3.1 - Remote Code Execution Vulnerability
Exploit Title: Rukovoditel 3.3.1 - Remote Code Execution RCE Version: 3.3.1 Bugs: rce via jpeg file upload Technology: PHP Vendor URL: https://www.rukovoditel.net/ Software Link: https://www.rukovoditel.net/download.php Date of found: 12-03-2023 Author: Mirabbas Ağalarov Tested on: Linux 2...
Rukovoditel 3.3.1 - Remote Code Execution (RCE)
Exploit Title: Rukovoditel 3.3.1 - Remote Code Execution RCE Version: 3.3.1 Bugs: rce via jpeg file upload Technology: PHP Vendor URL: https://www.rukovoditel.net/ Software Link: https://www.rukovoditel.net/download.php Date of found: 12-03-2023 Author: Mirabbas Ağalarov Tested on: Linux 2...
