AnonHik

AnonHik Script en Python para obtener imágenes de cámaras Hikvision con la vulnerabilidad CVE-2017-7921 Demostración: Texto alternativo...

RISE-Ultimate_Project_Manager_e_CRM

CVE-2025-3855 - RISE Ultimate Project Manager - IDOR Security vulnerability: IDOR Insecure Direct Object Reference Affected Component: profile image upload endpoint, teammembers controller Software: RISE - Ultimate Project Manager & CRM Vendor: codecanyon Version: 3.8.2 CVE ORG :...

CVE-2024-22526

CVE-2024-22526 Resumen de la vulnerabilidad CVE-2024-22526 12 de abril de 2024 BandiView Vulnerabilidad del visor de imágenes Descripción de la vulnerabilidad advisories Vulnerabilidad de desbordamiento de búfer en bandisoft bandiview v7.0, permite a atacantes locales causar una denegación de...

CVE-2022-44268-automated-poc

CVE-2022-44268 ImageMagick Arbitrary File Read poc Totalmente Automatizado ⚙ Una vulnerabilidad de divulgación de información que podría ser explotada para leer archivos arbitrarios de un servidor al analizar una imagen. Versión de ImageMagick afectada Version: ImageMagick 6.9.11-60 Q16 x8664...

POC-CVE-2016-10033

POC-CVE-2016-10033 Primero, pongamos en marcha la aplicación vulnerable Paso 1: Ejecute el siguiente comando para obtener la imagen Docker vulnerable del repositorio de Docker. Comando: docker pull vulnerables/cve-2016-10033 Paso 2: Ejecutar la imagen Docker en Docker Desktop, exponiendo el puert...

LAB-DFIR-cve-2023-38831

LAB-DFIR-cve-2023-38831 This lab simulates a CVE-2023–38831 attack and must investigate diskimage and contains a variety of questions including understanding the Windows registry, NTFS files, cache browser, and a complete understanding of the functions that come out of Windows in the sequence of...

CVE-2023-50245

CVE-2023-50245 Resumen de la vulnerabilidad CVE-2023-50245 CVSS : 9.8 11 dic 2023 Vulnerabilidad del visor de imágenes Descripción de la vulnerabilidad github advisories vulnerabilidad de escritura de dirección arbitraria POC 1 1404.9264: Access violation - code c0000005 first chance First chance...

CVE-2022-30525

CVE-2022-30525 python CVE-2022-30525-POC.py -u http://sit.com Image...

CVE-2022-44268

CVE-2022-44268 🧙‍♂️ CVE-2022-44268 Lectura Arbitraria de Archivos en ImageMagick Uso 🛠 Envenenar la imagen ☣️ python3 CVE-2022-44268.py --image imagetopoison.png --file-to-read /etc/hosts --output poisoned.png Subir la imagen PNG envenenada. Verificar si el exploit fue exitoso 🗡 python3...

CLSA-2026-1791028047 TuxCare security update for probe-image-size (1 CVE)

TuxCare rebuilt probe-image-size to address 1 CVE. Fixed in 7.3.0-tuxcare.1...

CVE-2021-22204

CVE-2021-22204 - ExifTool Ejecución Arbitraria de Código Un proof-of-concept mejorado para CVE-2021-22204, una vulnerabilidad en las versiones 7.44 a 12.23 de ExifTool que permite la ejecución arbitraria de código al procesar archivos DjVu maliciosos. Créditos Este es un trabajo derivado. La...

can-ctr-escape-cve-2022-0492

A container image that tests whether a container enviroment is vulnerable to escapes via CVE-2022-0492. Best to execute under a new container running an image built with: $ cd can-ctr-escape-cve-2022-0492 $ docker build -t can-ctr-escape-cve-2022-0492:latest . A pre-built image is available at...

WordPress EWWW Image Optimizer plugin <= 8.7.7 - Reflected Cross-Site Scripting vulnerability

Reflected Cross-Site Scripting vulnerability discovered by braintx in WordPress Plugin EWWW Image Optimizer versions = 8.7.7...

CVE-2026-92767

The Twenty20 Image Before-After plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'offset' Shortcode Attribute in all versions up to, and including, 2.0.5 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...

CVE-2026-92767 Twenty20 Image Before-After <= 2.0.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'offset' Shortcode Attribute

The Twenty20 Image Before-After plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'offset' Shortcode Attribute in all versions up to, and including, 2.0.5 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...

EUVD-2026-91967

The Twenty20 Image Before-After plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'offset' Shortcode Attribute in all versions up to, and including, 2.0.5 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...

CVE-2026-92767

The Twenty20 Image Before-After plugin for WordPress is vulnerable to Stored Cross-Site Scripting (XSS) in versions up to and including 2.0.5 . The root cause is insufficient input sanitization and output escaping within the 'offset' Shortcode Attribute . This allows authenticated attackers with ...

CVE-2026-88782 Kubio AI Page Builder < 2.9.3 - Contributor+ Stored XSS via Image Gallery Item URL Attribute

The Kubio AI Page Builder WordPress plugin before 2.9.3 does not validate the URI scheme of a user-supplied value before outputting it as a link target, allowing users with the contributor role and above to store a payload which executes in the browser of anyone who follows the link, including an...

CVE-2026-88782 Kubio AI Page Builder < 2.9.3 - Contributor+ Stored XSS via Image Gallery Item URL Attribute

The Kubio AI Page Builder WordPress plugin before 2.9.3 does not validate the URI scheme of a user-supplied value before outputting it as a link target, allowing users with the contributor role and above to store a payload which executes in the browser of anyone who follows the link, including an...

Volumiser

Volumiser Introduction Volumiser is a command line tool and interactive console GUI for listing, browsing and extracting files from common virtual machine hard disk image formats. The tool was written to combat a regular problem where massive 100G+ disk images are often hard to work with or...