CVE-2026-88360

A flaw was found in libvips, an image processing library. When handling specially crafted little-endian PFM Portable Float Map images, an attacker could trigger an unaligned memory access. This occurs if the image's text header length is not a multiple of four bytes, causing the loader to expose...

WordPress-RCE-CVE-2019-8942

WordPress Crop Image RCE — CVE-2019-8942 / CVE-2019-8943 인증된 WordPress 크롭 이미지crop-image 익스플로잇 체인의 Python3 구현입니다. 이 저장소는 두 가지 독립적인 워크플로우로 구성되어 있습니다: 수동 OSCP 스타일 스크립트와 통합 리버스 셸 핸들러가 포함된 완전 자동화 스크립트입니다. 승인된 랩, CTF, 교육 플랫폼 또는 명시적 테스트 권한이 있는 시스템에서만 사용하세요. 영향을 받는 WordPress 버전 이 익스플로잇 체인은 다음 취약점을 대상으로...

CVE-2021-22204

CVE-2021-22204 - ExifTool 임의 코드 실행 CVE-2021-22204에 대한 개선된 개념 증명PoC입니다. 이 취약점은 ExifTool 7.4412.23 버전에 존재하며, 악성 DjVu 파일을 처리할 때 임의 코드 실행을 허용합니다. 크레딧 본 자료는 파생 작업입니다. 취약점과 원본 익스플로잇은 제가 만든 것이 아닙니다. 역할| 작성자 ---|--- 취약점 발견자| William Bowling @wcbowling, GitLab 버그 바운티 프로그램을 통해 보고 — 2021년 4월 원본 PoC 작성자|...

WordPress Modula Image Gallery – Photo Grid & Video Gallery plugin <= 3.0.2 - Missing Authorization to Authenticated (Author+) Arbitrary File Deletion (Non-PHP) vulnerability

Missing Authorization to Authenticated Author+ Arbitrary File Deletion Non-PHP vulnerability discovered by pbsec in WordPress Plugin Modula Image Gallery versions = 3.0.2...

CVE-2026-92713

The Modula Image Gallery – Photo Grid & Video Gallery plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the uploadimage function in all versions up to, and including, 3.0.2. This makes it possible for authenticated attackers, with author-lev...

CVE-2026-89406

The Modula Image Gallery – Photo Grid & Video Gallery plugin for WordPress is vulnerable to unauthorized disclosure of private gallery contents in versions up to, and including, 3.0.1. This is due to the ModulaMeta::addmetas function being hooked to wphead on every frontend request and looking up...

shining-mask

Shining Mask Hacks 이 저장소는 Shining LED 마스크용 맞춤형 Bluetooth Low EnergyBLE 컨트롤러를 만드는 코드와 지침을 포함하며, BLE 범위 내에 있는 모든 마스크의 얼굴 이미지를 자동으로 변경합니다. 이 저장소는 Invasion of the Facechangers: Halloween Hijinks with Bluetooth LED Masks의 동반 자료입니다. 기능 BLE 범위 내의 모든 Shining LED 마스크에 자동으로 연결하여 여우 얼굴을 업로드합니다. 스크립트가 실행되면 사...

CVE-2026-89406

The Modula Image Gallery – Photo Grid & Video Gallery plugin for WordPress is vulnerable to unauthorized disclosure of private gallery contents in versions up to and including 3.0.1 . The root cause is located in the Modula_Meta::add_metas() function, which is hooked to wp_head and fetches posts ...

CVE-2026-89406 Modula Image Gallery <= 3.0.1 - Missing Authorization to Unauthenticated Private Gallery Image Disclosure via 'modula_gallery_id' and 'modula_image_id' Parameters

The Modula Image Gallery – Photo Grid & Video Gallery plugin for WordPress is vulnerable to unauthorized disclosure of private gallery contents in versions up to, and including, 3.0.1. This is due to the ModulaMeta::addmetas function being hooked to wphead on every frontend request and looking up...

EUVD-2026-86602

The Modula Image Gallery – Photo Grid & Video Gallery plugin for WordPress is vulnerable to unauthorized disclosure of private gallery contents in versions up to, and including, 3.0.1. This is due to the ModulaMeta::addmetas function being hooked to wphead on every frontend request and looking up...

CVE-2026-89406 Modula Image Gallery <= 3.0.1 - Missing Authorization to Unauthenticated Private Gallery Image Disclosure via 'modula_gallery_id' and 'modula_image_id' Parameters

The Modula Image Gallery – Photo Grid & Video Gallery plugin for WordPress is vulnerable to unauthorized disclosure of private gallery contents in versions up to, and including, 3.0.1. This is due to the ModulaMeta::addmetas function being hooked to wphead on every frontend request and looking up...

CVE-2026-92713 Modula Image Gallery <= 3.0.2 - Missing Authorization to Authenticated (Author+) Arbitrary File Deletion (Non-PHP) via 'file' Parameter

The Modula Image Gallery – Photo Grid & Video Gallery plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the uploadimage function in all versions up to, and including, 3.0.2. This makes it possible for authenticated attackers, with author-lev...

CVE-2026-92713 Modula Image Gallery <= 3.0.2 - Missing Authorization to Authenticated (Author+) Arbitrary File Deletion (Non-PHP) via 'file' Parameter

The Modula Image Gallery – Photo Grid & Video Gallery plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the uploadimage function in all versions up to, and including, 3.0.2. This makes it possible for authenticated attackers, with author-lev...

CVE-2026-92713

The Modula Image Gallery plugin for WordPress is vulnerable to arbitrary file deletion in all versions up to and including 3.0.2 . The root cause is insufficient file path validation within the upload_image function, specifically failing to adequately restrict access via the file parameter. An au...

EUVD-2026-86592

The Modula Image Gallery – Photo Grid & Video Gallery plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the uploadimage function in all versions up to, and including, 3.0.2. This makes it possible for authenticated attackers, with author-lev...

S5Late

S5Late テザードiPod bootrom/DFUエクスプロイト。 現在はNano 7Gのみ対応しています。Nano 6Gに対応するにはオフセットの更新が必要です。 実行 iPodをDFUモードにします。 次に実行します: ./S5Late hax 2024-12-15T23:11:34Z INFO S5Late We found an Apple Device in DFU mode. 2024-12-15T23:11:34Z INFO S5Late Succesfully exploited the device!...

screenscrub

screenscrub 스크린샷에서 자격 증명을 찾아 비밀 관리자로 추출하고 이미지에서 복구 불가능하게 삭제하여 비밀번호가 노트, 스크린샷, /Desktop에 방치되지 않도록 합니다. 로컬. 오프라인. 조용히. 기본적으로 네트워크 없음, 텔레메트리 없음. screenscrub는 두 가지 기존 도구 카테고리를 연결합니다: GUI 리뷰어Xnapper, Shhshot, macshot는 수동으로 PII를 흐리게 하지만 비밀과 주소를 구분하지 못하거나 숨기는 내용을 캡처하지 못합니다; 비밀 스캐너gitleaks, TruffleHog는 실...

img-payloads

⚠️ 고지 사항 : 이 저장소의 콘텐츠는 교육 및 정보 제공 목적으로만 제공되며, 작성자는 오용에 대해 어떠한 책임도 지지 않습니다. 사용 전에 반드시 적절한 승인을 받고, 자신의 책임 하에 책임감 있게 행동하며, 모든 법적 및 윤리적 지침을 준수하시기 바랍니다. 🚀...

CVE-2026-21005-Docker-Registry-V2-Schema-1-Image-Poisoning

CVE-2026-21005 – Docker Registry V2 Schema 1 이미지 포이즈닝 프로그램 코드 Python Flask + Shell dockerregistrysim.py - Simulated registry that serves schema1 manifests from flask import Flask, request, jsonify app = Flaskname images = 'myapp': 'v1': 'layers': 'sha256:abc', 'sha256:def', 'config': ,...

base-joomla

BASE-JOOMLA 이것은 Cved의 일부입니다: 취약한 Docker 컨테이너를 관리하는 도구입니다. Cved: https://github.com/git-rep-src/cved 이미지 소스: https://github.com/cved-sources/base-joomla 이미지 기반: https://github.com/Medicean/VulApps/tree/master/base/joomla/3.7...