290 matches found
Rukovoditel 3.3.1 - Remote Code Execution Vulnerability
Exploit Title: Rukovoditel 3.3.1 - Remote Code Execution RCE Version: 3.3.1 Bugs: rce via jpeg file upload Technology: PHP Vendor URL: https://www.rukovoditel.net/ Software Link: https://www.rukovoditel.net/download.php Date of found: 12-03-2023 Author: Mirabbas Ağalarov Tested on: Linux 2...
Rukovoditel 3.3.1 - Remote Code Execution (RCE)
Exploit Title: Rukovoditel 3.3.1 - Remote Code Execution RCE Version: 3.3.1 Bugs: rce via jpeg file upload Technology: PHP Vendor URL: https://www.rukovoditel.net/ Software Link: https://www.rukovoditel.net/download.php Date of found: 12-03-2023 Author: Mirabbas Ağalarov Tested on: Linux 2...
SUSE CVE-2021-22204
Improper neutralization of user data in the DjVu file format in ExifTool versions 7.44 and up allows arbitrary code execution when parsing the malicious image...
Exploit for OS Command Injection in Exiftool_Project Exiftool
CVE-2022-23935 🐍 Python Exploit for CVE-2022-23935 Staged Rev...
Exploit for OS Command Injection in Exiftool_Project Exiftool
Introduction CVE-2022-23935 exploit PoC exiftool...
Exploit for OS Command Injection in Exiftool_Project Exiftool
Introduction CVE-2022-23935 exploit PoC exiftool...
Ubuntu: Security Advisory (USN-4987-2)
The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
ExifTool vulnerable to arbitrary code execution
Impact Arbitrary code execution can occur when running exiftool against files with hostile metadata payloads Patches ExifTool has already been patched in version 12.24. exiftoolvendored.rb, which vendors ExifTool, includes this patch in v12.25.0. Workarounds No References...
GHSA-Q95H-CQRV-8JV5 ExifTool vulnerable to arbitrary code execution
Impact Arbitrary code execution can occur when running exiftool against files with hostile metadata payloads Patches ExifTool has already been patched in version 12.24. exiftoolvendored.rb, which vendors ExifTool, includes this patch in v12.25.0. Workarounds No References...
Mageia: Security Advisory (MGASA-2022-0381)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Updated perl-Image-ExifTool packages fix security vulnerability
lib/Image/ExifTool.pm in ExifTool before 12.38 mishandles a $file = /|$/ check, leading to command injection. CVE-2022-23935...
MGASA-2022-0381 Updated perl-Image-ExifTool packages fix security vulnerability
lib/Image/ExifTool.pm in ExifTool before 12.38 mishandles a $file = /|$/ check, leading to command injection. CVE-2022-23935...
ExifTool 12.23 - Arbitrary Code Execution Exploit
Exploit Title: ExifTool 12.23 - Arbitrary Code Execution Exploit Author: UNICORD NicPWNs & Dev-Yeoj Vendor Homepage: https://exiftool.org/ Software Link: https://github.com/exiftool/exiftool/archive/refs/tags/12.23.zip Version: 7.44-12.23 Tested on: ExifTool 12.23 Debian CVE: CVE-2021-22204 Sourc...
ExifTool 12.23 Arbitrary Code Execution
Exploit Title: ExifTool 12.23 - Arbitrary Code Execution Date: 04/30/2022 Exploit Author: UNICORD NicPWNs & Dev-Yeoj Vendor Homepage: https://exiftool.org/ Software Link: https://github.com/exiftool/exiftool/archive/refs/tags/12.23.zip Version: 7.44-12.23 Tested on: ExifTool 12.23 Debian CVE:...
ExifTool 12.23 - Arbitrary Code Execution
Exploit Title: ExifTool 12.23 - Arbitrary Code Execution Date: 04/30/2022 Exploit Author: UNICORD NicPWNs & Dev-Yeoj Vendor Homepage: https://exiftool.org/ Software Link: https://github.com/exiftool/exiftool/archive/refs/tags/12.23.zip Version: 7.44-12.23 Tested on: ExifTool 12.23 Debian CVE:...
Exploit for Code Injection in Exiftool_Project Exiftool
Welcome to my Ethical Hacking Journey ==========================...
Researchers Takeover Unpatched 3rd-Party Antivirus Sandboxes via VirusTotal
Security researchers have disclosed a security issue that could have allowed attackers to weaponize the VirusTotal platform as a conduit to achieve remote code execution RCE on unpatched third-party sandboxing machines employed antivirus engines. The flaw, now patched, made it possible to "execut...
Exploit for Code Injection in Exiftool_Project Exiftool
Exploit for CVE-2021-22204 ExifTool - Arbitrary Code Executi...