CVE-2023-21036

Acropalypse 탐지 및 정화 도구 Python 스크립트 acropalypsedetection.py 또는 Yara 규칙 acropalypsedetection.yar을 사용하여 acropalypse에 영향을 받은 자른 이미지를 탐지할 수 있습니다: root@kitploit: $ for i in testimgs/; do python3 acropalypsedetection.py $i; done testimgs/windows10snippingtool1cropped.png...

fuzzer-testing

fuzzer-testing Standardized Docker images for evaluating open-source fuzzers, fully integrated with the corpora for easy experimentation. Supported / Included Fuzzers AFL github.com/google/AFL AFLplusplus github.com/AFLplusplus Honggfuzz github.com/google/honggfuzzz QSYM sslab-gatech/qsym Eclipse...

cve-2022-39197

cve-2022-39197 現在、リモート画像のみ読み込めます。...

cicd-goat

Deliberately vulnerable CI/CD environment. Hack CI/CD pipelines, capture the flags. 🚩 Created by Cider Security Acquired by Palo Alto Networks. Table of Contents...

WordPress Perfect Images (WP Retina 2x) < 6.4.6 - Sensitive Information Exposure

Jordy Meow Perfect Images Manage Image Sizes, Thumbnails, Replace, Retina versions up to 6.4.5 contain a vulnerability that exposes sensitive information to unauthorized actors, letting attackers access confidential data, exploit requires no specific conditions. id: CVE-2023-44982 info: name:...

WP Responsive Images <= 1.0 - Arbitrary File Read

WP Responsive Images plugin for WordPress = 1.0 contains a path traversal caused by improper sanitization of the 'src' parameter, letting unauthenticated attackers read arbitrary files on the server. id: CVE-2026-1557 info: name: WP Responsive Images = 1.0 - Arbitrary File Read author: Shivam...

Astro - Unauthorized Third-Party Image Access

Astro 5.13.2 and 4.16.18 contains an information disclosure vulnerability caused by improper validation of protocol-relative URLs in the image optimization endpoint, letting attackers serve images from unauthorized third-party domains, exploit requires on-demand rendering deployment. id:...

ShortPixel Adaptive Images < 3.6.3 - Cross Site Scripting

The plugin does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against any high privilege users such as admin id: CVE-2023-0334 info: name: ShortPixel Adaptive Images 3.6.3 - Cross Site Scripting author:...

Images to WebP < 1.9 - Authenticated Local File Inclusion

The Images to WebP WordPress plugin before version 1.9 did not validate or sanitize the tab parameter before using it in the include function. id: CVE-2021-24644 info: name: Images to WebP 1.9 - Authenticated Local File Inclusion author: Sourabh-Sahu severity: high description: | The Images to We...

cve-2018-16509

CVE-2018-16509 これはCvedの一部です： 脆弱なDockerコンテナを管理するツール。 Cved: https://github.com/git-rep-src/cved イメージソース: https://github.com/cved-sources/cve-2018-16509 イメージ作成者: https://github.com/knqyf263/CVE-2018-16509...

rpef

Router Post-Exploitation Framework Currently, the framework includes a number of firmware image modules: root@kitploit: 'Verified' - This module is confirmed to work and is stable. 'Unverified' - This module is believed to work or should work with little additional effort, but awaits being tested...

CVE-2019-16097

CVE-2019-16097 본 프로그램은 보안 연구용으로만 사용하십시오. 불법 용도로 사용하지 마십시오! 취약점 위험 공격자가 관리자 계정을 생성할 수 있으며, 이를 통해 악성 이미지를 업로드하여 해당 저장소를 사용하는 클라이언트가 감염될 수 있습니다. 취약점 구성 요소 Harbor 영향 받는 버전 1.7.0-1.8.2 수정 권장 사항 가능한 한 빨리 1.7.6 또는 1.8.3으로 업그레이드하십시오...

CVE-2023-36884

CVE-2023-36884 これは、Microsoftが脆弱性に対処する間の緊急対策です。 CVE-2023-36884 が画像に含まれています 参照Docx: a61b2eafcf39715031357df6b01e85e0d1ea2e8ee1dfec241b114e18f7a1163f pic.twitter.com/CxBYlWyvlB — Kimberly @StopMalvertisin 2023年7月12日...

cve-2018-9208

CVE-2018-9208 이것은 Cved의 일부입니다: 취약한 Docker 컨테이너를 관리하는 도구입니다. Cved: https://github.com/git-rep-src/cved 이미지 소스: https://github.com/cved-sources/cve-2018-9208 이미지 작성자: https://github.com/lcashdol/Exploits/tree/master/CVE-2018-9208...

CVE-2022-46463

CVE-2022-46463 Harbor public 이미지 다운로드 Harbor는 오픈 소스 이미지 호스팅 플랫폼입니다. 이 스크립트는 모든 public 이미지를 열거하여 dump 작업docker pull 유사을 지원하며, 공개적으로 노출된 이미지에서 민감한 정보 유출을 쉽게 찾을 수 있습니다. Usage root@kitploit: $ python3 harbor.py https://192.168.11.11 + grafana/grafana + library/openjdk $ python3 harbor.py...

Nevma Adaptive Images - Arbitrary File Deletion

Nevma Adaptive Images plugin before 0.6.67 for WordPress contains an arbitrary file deletion caused by unsanitized input in adaptive-images-script.php, letting remote attackers delete arbitrary files, exploit requires sending specific request parameters. id: CVE-2019-14206 info: name: Nevma...

Gitea Container Registry - Unauthorized Private Image Access

Gitea = 1.26.2. As a temporary workaround, set REQUIRESIGNINVIEW=true in gitea app.ini, though this blocks all anonymous access including public repos. reference: - https://blog.gitea.com/release-of-1.26.2/ - https://github.com/go-gitea/gitea/pull/37290 -...

Tautulli <= 2.16.1 - Path Traversal

Tautulli is a monitoring and tracking tool for Plex Media Server. Prior to version 2.17.0, the /newsletter/image/images endpoint joins user-controlled path segments onto the newsletter image directory without containment validation. Authentication is not required for this endpoint, allowing...

vLLM 0.8.3 - 0.14.0 - Information Disclosure

vLLM 0.8.3 to - 0.14.1 contains an information disclosure caused by leaking a heap address in error messages from the multimodal endpoint when processing invalid images, letting remote attackers reduce ASLR entropy, exploit requires sending invalid images. id: CVE-2026-22778 info: name: vLLM 0.8....

Kimai <= 2.57.0 - Default APP_SECRET Authentication Bypass

Kimai Docker images = 2.58.0 which generates a random APPSECRET on first boot. Alternatively, manually set a unique APPSECRET in your .env.local file. reference: - https://github.com/advisories/GHSA-jr9p-4h4j-6c58 - https://github.com/kimai/kimai/releases/tag/2.58.0 classification: cve-id:...