Lucene search
+L

660 matches found

Kitploit
Kitploit
added 2026/09/02 10:02 p.m.5 views

ExifSmugglingPoC

Contrabando de Exif Una evolución de prueba de concepto del Contrabando de Caché. Este ataque oculta un payload ejecutable dentro de los datos Exif de un JPG. Como resultado, el almacenamiento en caché de imágenes como el de un navegador web puede usarse para descargar pasivamente el payload. Com...

5.9AI score
SaveExploits0
Kitploit
Kitploit
added 2026/08/30 7:24 a.m.7 views

jdvrif

jdvrif jdvrif 是一款快速、易用的隐写术命令行工具,可通过 JPG 图像隐藏和提取任何文件类型。 同时还有一个 Web 版本,您可以立即使用,作为下载和编译 CLI 源代码的便捷替代方案。Web 文件上传限制为 20MB 。 对于对该语言感兴趣的用户,还有一个实验性的 Rust 移植版本 jdvrif-rs 可用。 演示图片:"隐藏之处" / PIN:2190398302048725932 与常见的 LSB 隐写方法(将数据隐藏在封面图像的像素中)不同, jdvrif 主要将数据隐藏在 JPG 图像的 应用程序段 (ICC、EXIF、XMP 等)中。 例外情况是 Reddit...

5.8AI score
SaveExploits0References25
Kitploit
Kitploit
added 2026/08/28 3:10 a.m.99 views

halogen

...

5.9AI score
SaveExploits0
Kitploit
Kitploit
added 2026/08/28 3:10 a.m.6 views

halogen

Halogen è uno strumento per automatizzare la creazione di regole yara basate sui file immagine incorporati in un documento malevolo. Questo può aiutare i professionisti della sicurezza informatica a scrivere regole di rilevamento per minacce informatiche, nonché assistere i responder...

5.9AI score
SaveExploits0
RedhatCVE
RedhatCVE
added 2026/06/05 7:49 p.m.15 views

CVE-2026-38427

An issue in fetchjpg in xdrv10scripter.ino in Tasmota through 15.3.0.3 allows a remote attacker to cause heap buffer overflow. The Content-Length from a JPEG stream is stored in a uint16t variable; values above 65535 wrap around, causing allocation of a smaller buffer than the data actually read...

7.3CVSS6AI score0.00458EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2026/05/28 2:15 p.m.17 views

CVE-2026-38422

Buffer Overflow vulnerability in arendst Tasmota v.15.3.0.3 and before allows a remote attacker to execute arbitrary code via the tasmota/tasmotaxdrvdriver/xdrv10scripter.ino, fetchjpg function...

7.3CVSS6.2AI score0.00813EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
added 2026/05/27 12:00 a.m.19 views

PT-2026-43709

Buffer Overflow vulnerability in arendst Tasmota v.15.3.0.3 and before allows a remote attacker to execute arbitrary code via the tasmota/tasmota xdrv driver/xdrv 10 scripter.ino, fetch jpg function...

6.2AI score0.00813EPSS
SaveExploits1References4
Cvelist
Cvelist
added 2026/05/27 12:00 a.m.53 views

CVE-2026-38427

An issue in fetchjpg in xdrv10scripter.ino in Tasmota through 15.3.0.3 allows a remote attacker to cause heap buffer overflow. The Content-Length from a JPEG stream is stored in a uint16t variable; values above 65535 wrap around, causing allocation of a smaller buffer than the data actually read...

0.00458EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
added 2026/05/27 12:00 a.m.11 views

CVE-2026-38422

Buffer Overflow vulnerability in arendst Tasmota v.15.3.0.3 and before allows a remote attacker to execute arbitrary code via the tasmota/tasmotaxdrvdriver/xdrv10scripter.ino, fetchjpg function...

6.2AI score0.00813EPSS
SaveExploits1References3
CNNVD
CNNVD
added 2026/05/27 12:00 a.m.17 views

Tasmota 安全漏洞

Tasmota is an IoT device firmware and automation control platform developed by Theo Arends. Versions of Tasmota prior to 15.3.0.3 contained security vulnerabilities. These vulnerabilities were caused by a buffer overflow in the fetchjpg function found in the...

7.3CVSS6.3AI score0.00813EPSS
SaveExploits1References3
CNNVD
CNNVD
added 2026/05/27 12:00 a.m.17 views

Tasmota 安全漏洞

Tasmota is an IoT device firmware and automation control platform developed by Theo Arends. Versions of Tasmota prior to 15.3.0.3 contained security vulnerabilities. These vulnerabilities stemmed from the fetchjpg function in xdrv10scripter.ino, which stored the Content-Length of JPEG streams in ...

7.3CVSS6AI score0.00458EPSS
SaveExploits1References2
Cvelist
Cvelist
added 2026/05/27 12:00 a.m.60 views

CVE-2026-38426

Buffer Overflow vulnerability in arendst Tasmota v.15.3.0.3 and before allows a remote attacker to execute arbitrary code via the xdrv10scripter.ino, fetchjpg, jpgtask.boundary40, strcpy function...

0.00614EPSS
SaveExploits2References2
GithubExploit
GithubExploit
added 2026/05/25 10:10 a.m.181 views

Exploit for CVE-2026-38426

CVE-2026-38426: strcpy Stack Buffer Overflow in Tasmota fetc...

5.9AI score0.00614EPSS
SaveExploits2
OSV
OSV
added 2026/04/22 5:46 p.m.42 views

CLSA-2026-1776879963 php: Fix of 9 CVEs

CVE-2019-9020: fix heap out-of-bounds read in xmlrpcdecode - CVE-2019-9021: fix heap buffer overflow in phardetectpharfnameext - CVE-2019-9023: fix heap buffer over-reads in mbstring regex functions - CVE-2019-9641: fix uninitialized read in exifprocessIFDinTIFF - CVE-2019-11034: fix...

9.8CVSS6.9AI score0.10059EPSS
SaveExploits7References1
RedhatCVE
RedhatCVE
added 2026/01/09 12:29 p.m.13 views

CVE-2023-40632

In jpg driver, there is a possible use after free due to a logic error. This could lead to remote information disclosure no additional execution privileges needed...

7.5CVSS6.8AI score0.00392EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/01/09 10:55 a.m.12 views

CVE-2022-23095

Open Design Alliance Drawings SDK before 2022.12.1 mishandles the loading of JPG files. Unchecked input data from a crafted JPG file leads to memory corruption. An attacker can leverage this vulnerability to execute code in the context of the current process...

7.8CVSS7AI score0.01127EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/01/09 8:43 a.m.21 views

CVE-2022-37355

This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

7.8CVSS6.8AI score0.00787EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/01/09 8:42 a.m.27 views

CVE-2022-37356

This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

7.8CVSS6.8AI score0.00787EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/12/10 1:35 a.m.10 views

CVE-2025-14286

A vulnerability was determined in Tenda AC9 15.03.05.14multi. Affected by this vulnerability is an unknown functionality of the file /cgi-bin/DownloadCfg.jpg of the component Configuration File Handler. This manipulation causes information disclosure. The attack may be initiated remotely. The...

7.5CVSS5.4AI score0.00659EPSS
SaveExploits1References1
OSV
OSV
added 2025/12/09 9:15 p.m.12 views

CVE-2023-53773

MiniDVBLinux 5.4 contains an unauthenticated vulnerability in the tvaction.sh script that allows remote attackers to generate live stream snapshots through the Simple VDR Protocol. Attackers can request /tpl/tvaction.sh to create and retrieve a live TV screenshot stored in /var/www/images/tv.jpg...

5.3CVSS5.9AI score0.00537EPSS
SaveExploits1References4
Rows per page
Query Builder