Lucene search
+L

533 matches found

Kitploit
Kitploit
•added 2026/09/24 11:23 a.m.•8 views

exploit-CVE-2021-22204

Exploit for CVE-2021-22204 ExifTool - Arbitrary Code Execution Like this repo? Give us a ⭐! For educational and authorized security research purposes only. Exploit Author @UNICORDev by @NicPWNs and @Dev-Yeoj Vulnerability Description Improper neutralization of user data in the DjVu file format in...

7.8CVSS8.3AI score0.99981EPSS
SaveExploits39References2
Kitploit
Kitploit
•added 2026/09/23 5:11 p.m.•12 views

Samsung-CVE-2025-21042

🔐 CVE-2025-21042 — Samsung Image Codec Remote Code Execution ⚙️ What it is A critical vulnerability in Samsung’s image-processing library libimagecodec.quram.so — used on Galaxy Android devices. 🧩 It’s an out-of-bounds write flaw triggered when parsing malicious image files like DNG. 📸 A crafted...

9.8CVSS8.6AI score0.3317EPSS
SaveExploits1
Kitploit
Kitploit
•added 2026/09/22 4:56 p.m.•8 views

adiskreader-secretsdump

🚩 Sponsors If you like this project, consider purchasing licenses of OctoPwn, our full pentesting suite that runs in your browser! For notifications on new builds/releases and other info, hop on to our Discord adiskreader-secretsdump Extract registry and NTDS secrets from local or remote disk...

5.9AI score
SaveExploits0References1
Kitploit
Kitploit
•added 2026/09/22 12:56 a.m.•13 views

CVE-2021-22204

CVE-2021-22204 Summary of the CVE Improper sanitization of user data in the DjVu file format in ExifTool versions 7.44 and up allows arbitrary code execution when parsing the malicious image. Affected Versions Version 7.44 - 12.23 Anomalies Dependencies: djvulibre-bin exiftool Calls these three...

7.8CVSS8AI score0.99981EPSS
SaveExploits39References1
Kitploit
Kitploit
•added 2026/09/21 12:28 p.m.•9 views

CVE-2021-22204

CVE-2021-22204 Description Improper neutralization of user data in the DjVu file format in ExifTool versions 7.44 and up allows arbitrary code execution when parsing the malicious image Script Script Link Script usage: System cmd: root@kitploit: bash CVE-2021-2204.sh "system'id'" happy.jpg Revers...

7.8CVSS8.1AI score0.99981EPSS
SaveExploits39References1
Kitploit
Kitploit
•added 2026/09/19 2:45 p.m.•8 views

CVE-2022-44268-automated-poc

CVE-2022-44268 ImageMagick Arbitrary File Read poc Fully Automated ⚙ An information disclosure vulnerability that could be exploited to read arbitrary files from a server when parsing an image. Image Magic version effected root@kitploit: Version: ImageMagick 6.9.11-60 Q16 x8664 2021-01-25...

6.5CVSS7.7AI score0.89855EPSS
SaveExploits28
AstraLinux
AstraLinux
•added 2026/09/14 12:01 p.m.•9 views

Astra Linux – Vulnerability in openimageio

A read vulnerability exists in the handling of IPTC data when parsing TIFF images in OpenImageIO v2.3.19.0. A specially crafted TIFF file can cause a read of adjacent heap memory, potentially exposing sensitive process information. An attacker can provide a malicious file to exploit this...

9.1CVSS8AI score0.0147EPSS
SaveExploits1References2
Zero Day Initiative
Zero Day Initiative
•added 2026/09/10 12:00 a.m.•9 views

Adobe Photoshop DCM JPEG-LS Image Parsing Integer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Photoshop. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of DIC...

7.8CVSS6.7AI score0.00314EPSS
SaveExploits0References1
AlmaLinux
AlmaLinux
•added 2026/09/02 12:00 a.m.•12 views

Important: gimp:2.8 security update

The GIMP GNU Image Manipulation Program is an image composition and editing program. GIMP provides a large image manipulation toolbox, including channel operations and layers, effects, sub-pixel imaging and anti-aliasing, and conversions, all with multi-level undo. Security Fixes: gimp: gimp: Sta...

7.8CVSS7.6AI score0.00423EPSS
SaveExploits2References18
CVE
CVE
•added 2026/08/24 4:28 p.m.•68 views

CVE-2026-78465

An integer overflow in the file-pcx plugin of GIMP affects 32-bit builds only . When a crafted PCX image file sets the number of color planes to 4 alongside sufficiently large dimensions, the memory allocation size calculation exceeds the 32-bit integer limit, producing an undersized heap buffer ...

7CVSS6.6AI score0.0032EPSS
SaveExploits1References3Affected Software1
UbuntuCve
UbuntuCve
•added 2026/08/20 5:17 p.m.•16 views

CVE-2026-18303

GIMP TIF File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page ...

7.8CVSS7.7AI score0.00389EPSS
SaveExploits0References1
Debian CVE
Debian CVE
•added 2026/08/20 12:42 p.m.•11 views

CVE-2026-77118

A heap out-of-bounds write exists in the Photo CD PCD decoder of GraphicsMagick. In DecodeImage coders/pcd.c, the Huffman delta loop advances its output pointer with q++ after every decoded delta and never checks it against the end of the heap-allocated luma/chroma plane buffers. The pointer is...

8.4CVSS5.3AI score0.00171EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
•added 2026/08/19 12:00 a.m.•11 views

Fedora 44 : perl-Imager (2026-8a61adae6f)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-8a61adae6f advisory. Upstream changes 1.034: - Security fix: EXIF: fix decoding of ASCII fields with zero size CVE-2026-19082, GHSA-hx46-55wp-hv6m - JPEG: depend on Imager 1.034...

5.5AI score0.00508EPSS
SaveExploits0References2
Malwarebytes
Malwarebytes
•added 2026/08/18 2:55 p.m.•19 views

Apple fixes another image-processing flaw that could allow code execution

Apple has released security updates for more than two dozen security vulnerabilities across iPhone, iPad, and macOS Tahoe,including yet another image parsing vulnerability that could compromise your device. This update delivers security fixes that were first made available in the iOS 27 and iPadO...

8.8CVSS6.1AI score0.00587EPSS
SaveExploits0
OSV
OSV
•added 2026/08/15 7:30 p.m.•10 views

MINI-CV28-GHF4-WGHC

Bulletin has no description...

4.9AI score0.0031EPSS
SaveExploits0
OSV
OSV
•added 2026/08/15 1:18 p.m.•11 views

DEBIAN-CVE-2026-74552

In the Linux kernel, the following vulnerability has been resolved: hwmon: lm90 Only report alarms if driver is ready Userspace can read sysfs attributes before driver registration is complete, immediately after devmhwmondeviceregisterwithinfo has been called. At that time, data-hwmondev is not y...

5.3AI score0.00215EPSS
SaveExploits0References1
OSV
OSV
•added 2026/08/15 6:22 a.m.•9 views

DEBIAN-CVE-2026-74407

In the Linux kernel, the following vulnerability has been resolved: wifi: ath11k: cancel SSR work items during PCI shutdown A reboot can crash the kernel if it overlaps with WLAN firmware crash recovery SSR. The crash is a NULL pointer dereference in the MHI teardown path while freeing DMA-backed...

8.8CVSS5.4AI score0.00375EPSS
SaveExploits0References1
OSV
OSV
•added 2026/08/15 6:22 a.m.•8 views

DEBIAN-CVE-2026-74314

In the Linux kernel, the following vulnerability has been resolved: bpf: Cancel special fields on map value recycle Map update and delete paths currently call bpfobjfreefields when a value is being replaced or recycled. That makes field destruction depend on the context of the update/delete...

7.8CVSS5.9AI score0.00177EPSS
SaveExploits0References1
OSV
OSV
•added 2026/08/15 6:22 a.m.•13 views

DEBIAN-CVE-2026-72491

In the Linux kernel, the following vulnerability has been resolved: net/9p: fix race condition on rdma-state in transrdma.c The rdma-state field is modified without holding reqlock in both recvdone and p9cmeventhandler, while rdmarequest accesses the same field under the reqlock spinlock. This...

9.8CVSS5.5AI score0.00734EPSS
SaveExploits0References1
OSV
OSV
•added 2026/08/15 6:22 a.m.•6 views

DEBIAN-CVE-2026-72405

In the Linux kernel, the following vulnerability has been resolved: net: udptunnel: prevent double queueing in udptunnelnicdevicesync Yue Sun reported a use-after-free and debugobjects warning in udptunnelnicdevicesyncwork during concurrent device operations. The workqueue core clears the interna...

7.8CVSS5.5AI score0.0017EPSS
SaveExploits0References1
Rows per page
Query Builder