35 matches found
AperiSolve
Aperi'Solve 지금 사용해 보세요: https://www.aperisolve.com Aperi'Solve 후원하기: Aperi'Solve는 일반적인 스테가노그래피 도구와 기법을 사용하여 이미지에서 숨겨진 데이터를 탐지하고 추출하는 자동화된 분석을 수행하는 오픈소스 스테가노그래피 분석 웹 플랫폼입니다. 주요 기능 이미지 채널R/G/B/알파별로 각 비트 레이어LSB 및 기타 레이어를 시각화합니다. 색상 리매핑8가지 생성 변형이 포함된 무작위 팔레트 리매핑 16개의 분석기를 병렬로 실행하고 결과를 표시하며, 도구별 성공/결과...
steg-tools
steg-tools これは、ステガノグラフィーと情報隠蔽について学び、実験するためのツールとリソースのリストです。 ツール Exiftool は、EXIF、GPS、XMP、ID3 など、さまざまなファイルのメタデータを操作するための Perl ライブラリおよびコマンドラインアプリケーションです。 Strings は binutils の一部で、多くの Unix OS にプリインストールされています。macOS では Xcode コマンドラインツールの一部であり、xcode-select --install でインストールできます。 Strings...
StegoLab
🕵️ StegoLab – オールインワン画像ステガノグラフィツールキット StegoLab は、CTF、サイバーセキュリティチャレンジ、デジタルフォレンジック のために作られた、軽量なオールインワン画像ステガノグラフィ解析スイート です。 binwalk、steghide、stegseek、zsteg、exiftool などの一般的なツールの使用を自動化し、すべてを単一のインタラクティブなインターフェースで提供します。 ✨ 特徴 🔍 メタデータの抽出（EXIF、XMP、IPTC、ICC） 🧩 隠しデータの検出：LSBカービング、strings検索、zsteg 🛠...
CVE-2026-56781
Teable before 2026-06-15T04-43-24Z.1912 contains an improper access control vulnerability that allows anonymous attackers to access hidden field data by supplying arbitrary field IDs in the projection parameter of the share view records endpoint. Attackers can enumerate hidden field IDs from shar...
Malicious code in sea-bound-siren (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd5f2d5cc691968b1bb69f12ea7476c618f6432b42976869906df06312b912c0 On npm install, postinstall.js executes a shell pipeline that collects the output of id, os.hostname, the full process environment env | sort, the...
Authorization Bypass Through User-Controlled Key
Overview nocodb is a NocoDB Affected versions of this package are vulnerable to Authorization Bypass Through User-Controlled Key via the public shared-view endpoints, which exposed values from columns that were intended to be hidden. An attacker can access sensitive information by crafting reques...
Kernel Observability for Data Movement
Kernel-level visibility reveals hidden data movement in breaches, exposing gaps in modern security tools and improving detection, compliance, and system behavior tracking...
EUVD-2025-34794
Icinga 2 is an open source monitoring system. In Icinga 2 versions 2.4 through 2.15.0, filter expressions provided to the various /v1/objects endpoints could access variables or objects that would otherwise be inaccessible for the user. This allows authenticated API users to learn information tha...
UBUNTU-CVE-2025-27236
A regular Zabbix user can search other users in their user group via Zabbix API by select fields the user does not have access to view. This allows data-mining some field values the user does not have access to...
golang: archive/zip: Incorrect handling of certain ZIP files
A flaw was found in Golang. The ZIP implementation of the Go language archive/zip library behaves differently than the rest of the ZIP file format implementations. When handling ZIP files with a corrupted central directory record, the library skips over the invalid record and processes the next...
golang: archive/zip: Incorrect handling of certain ZIP files
A flaw was found in Golang. The ZIP implementation of the Go language archive/zip library behaves differently than the rest of the ZIP file format implementations. When handling ZIP files with a corrupted central directory record, the library skips over the invalid record and processes the next...
golang: archive/zip: Incorrect handling of certain ZIP files
A flaw was found in Golang. The ZIP implementation of the Go language archive/zip library behaves differently than the rest of the ZIP file format implementations. When handling ZIP files with a corrupted central directory record, the library skips over the invalid record and processes the next...
golang: archive/zip: Incorrect handling of certain ZIP files
A flaw was found in Golang. The ZIP implementation of the Go language archive/zip library behaves differently than the rest of the ZIP file format implementations. When handling ZIP files with a corrupted central directory record, the library skips over the invalid record and processes the next...
golang: archive/zip: Incorrect handling of certain ZIP files
A flaw was found in Golang. The ZIP implementation of the Go language archive/zip library behaves differently than the rest of the ZIP file format implementations. When handling ZIP files with a corrupted central directory record, the library skips over the invalid record and processes the next...
WordPress plugin Restrict for Elementor security vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plug-in. A security vulnerability...
PT-2024-15914 · WordPress · Elementor
Name of the Vulnerable Software and Affected Versions: Restrict for Elementor plugin for WordPress versions 1.0.0 through 1.0.6 Description: The issue concerns Sensitive Information Exposure due to improper restrictions on hidden data, making it accessible through the REST API. This allows...
Decoding UAC-0050’s Cyber Espionage Playbook
Summary: UAC-0050, a threat actor focused on Ukraine, is using new tactics to spread the Remcos RAT. In their latest move, UAC-0050 shows advanced adaptability by cleverly avoiding detection through a hidden data transfer method and outsmarting EDR systems. Threat Level - Amber | Attack Report Fo...
PT-2023-17127
Name of the Vulnerable Software and Affected Versions OpenStack heat affected versions not specified Description An information leak was discovered in OpenStack heat, allowing a remote, authenticated attacker to use the 'stack show' command to reveal parameters that are supposed to remain hidden...
SUSE CVE-2016-1000342
In the Bouncy Castle JCE Provider version 1.55 and earlier ECDSA does not fully validate ASN.1 encoding of signature on verification. It is possible to inject extra elements in the sequence making up the signature and still have it validate, which in some cases may allow the introduction of...
CVE-2021-40326
Foxit PDF Reader before 11.1 and PDF Editor before 11.1, and PhantomPDF before 10.1.6, mishandle hidden and incremental data in signed documents. An attacker can write to an arbitrary file, and display controlled contents, during signature verification...