290 matches found
CVE-2026-3102: Improper Neutralization of Special Elements used in an OS Command
A vulnerability was determined in exiftool up to 13.49 on macOS. This issue affects the function SetMacOSTags of the file lib/Image/ExifTool/MacOS.pm of the component PNG File Parser. This manipulation of the argument DateTimeOriginal causes os command injection. The attack is possible to be...
PT-2026-21764
Name of the Vulnerable Software and Affected Versions exiftool versions prior to 13.50 Description An OS command injection issue exists in the PNG File Parser component of exiftool on macOS. The flaw is located in the SetMacOSTags function within the lib/Image/ExifTool/MacOS.pm file. A remote...
exiftool 操作系统命令注入漏洞
Exiftool is an open-source application developed by ExifTool. It makes metadata more accessible. Versions of Exiftool 13.49 and earlier had a vulnerability related to operating system command injection. This vulnerability stemmed from the SetMacOSTags function in the PNG file parser component,...
The vulnerability of the metadata processing library in multimedia files. ExifTool, a software platform based on Git, is used for collaborative code development on GitLab. This vulnerability allows a hacker to cause a service failure.
The vulnerability of the ExifTool software library for processing metadata in multimedia files is related to the unlimited distribution of resources. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...
FreeBSD : Gitlab -- vulnerabilities (c6c9306e-d645-11f0-8ce2-2cf05da270f3)
The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the c6c9306e-d645-11f0-8ce2-2cf05da270f3 advisory. Gitlab reports: Cross-site scripting issue in Wiki impacts GitLab CE/EE Improper encoding in...
Gitlab -- vulnerabilities
Gitlab reports: Cross-site scripting issue in Wiki impacts GitLab CE/EE Improper encoding in vulnerability reports impacts GitLab CE/EE Cross-site scripting issue in Swagger UI impacts GitLab CE/EE Denial of service issue in GraphQL endpoints impacts GitLab CE/EE Authentication bypass issue for...
Exploit for Code Injection in Exiftool_Project Exiftool
CVE-2021-22204 취약점 exiftool 임의 명령 실행 사용법 1. exploit...
EUVD-2018-12778
Malware in sbrugna...
Exploit for Exposure of Sensitive Information to an Unauthorized Actor in Imagemagick
CVE-2022-44268 Automation Script - Quick Guide Credits - O...
ExifTool: Multiple vulnerabilities
Background ExifTool is a platform-independent Perl library plus a command-line application for reading, writing and editing meta information in a wide variety of files. Description Multiple vulnerabilities have been discovered in ExifTool. Please review the CVE identifiers referenced below for...
GLSA-202407-27 : ExifTool: Multiple vulnerabilities
The remote host is affected by the vulnerability described in GLSA-202407-27 ExifTool: Multiple vulnerabilities Multiple vulnerabilities have been discovered in ExifTool. Please review the CVE identifiers referenced below for details. Tenable has extracted the preceding description block directly...
OPENSUSE-SU-2024:11794-1 exiftool-12.39-1.1 on GA media
These are all security issues fixed in the exiftool-12.39-1.1 package on the GA media of openSUSE Tumbleweed...
Exploit for Code Injection in Exiftool_Project Exiftool
CVE-2021-22204 Summary of the CVE Improper sanitization o...
Exploit for Code Injection in Gitlab
CVE-2021-22205 Preauth RCE via exiftool on Gitlab CE/EE...
Exploit for Exposure of Sensitive Information to an Unauthorized Actor in Imagemagick
Fixed version of CVE-2022-44268 Some PoCs don't work for spec...
FreeBSD : Security Vulnerability found in ExifTool (955f377e-7bc3-11ec-a51c-7533f219d428)
The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 955f377e-7bc3-11ec-a51c-7533f219d428 advisory. - Improper neutralization of user data in the DjVu file format in ExifTool versions 7.44 and up allows...
Ubuntu 16.04 ESM : ExifTool vulnerability (USN-4987-2)
The remote Ubuntu 16.04 ESM host has a package installed that is affected by a vulnerability as referenced in the USN-4987-2 advisory. USN-4987-1 fixed a vulnerability in ExifTool. This update provides the corresponding update for Ubuntu 16.04 ESM. Tenable has extracted the preceding description...
ChurchCRM v4.5.4 - Reflected XSS via Image (Authenticated)
Exploit Title: ChurchCRM v4.5.4 - Reflected XSS via Image Authenticated Date: 2023-04-17 Exploit Author: Rahad Chowdhury Vendor Homepage: http://churchcrm.io/ Software Link: https://github.com/ChurchCRM/CRM/releases/tag/4.5.4 Version: 4.5.4 Tested on: Windows 10, PHP 7.4.29, Apache 2.4.53 CVE:...
ChurchCRM 4.5.4 Cross Site Scripting Vulnerability
Exploit Title: ChurchCRM v4.5.4 - Reflected XSS via Image Authenticated Exploit Author: Rahad Chowdhury Vendor Homepage: http://churchcrm.io/ Software Link: https://github.com/ChurchCRM/CRM/releases/tag/4.5.4 Version: 4.5.4 Tested on: Windows 10, PHP 7.4.29, Apache 2.4.53 CVE: CVE-2023-31699 Step...