1059 matches found
CVE-2023-4683-Test
CVE-2023-4683-Test Este repositorio contiene un POC fácil de usar para CVE-2023-4683. Simplemente haz git clone de este repositorio y extrae webp-test o ejecuta setup-webp-test.sh. webp-test ya contiene los archivos necesarios git commit 7ba44f80f3b94fc0138db159afea770ef06532a0 de...
CVE-2023-4863
CVE-2023-4863 root@kitploit: checkout webp git clone https://chromium.googlesource.com/webm/libwebp/ webptest cd webptest/ checkout vulnerable version git checkout 7ba44f80f3b94fc0138db159afea770ef06532a0 enable AddressSanitizer sed -i 's/^EXTRAFLAGS=./& -fsanitize=address/' makefile.unix build...
CVE-2023-4863
nivel 1: craft.c - bad.webp root@kitploit: exist: docker 813b6b757038 /webp cd CVE-2023-4863 make -f makefile.unix -B fatal error: jpeglib.h: No such file or directory apt-get update apt-get install libjpeg-dev fatal error: png.h: No such file or directory apt-get install libpng-dev fatal error:...
webp_Android10_r33_CVE-2023-1999
root@kitploit: / \/ / / / \ \ / / \ / \//// / / / \ \ / / / / / / / \ \ / \ /////v1.0.2 Descripción: Códec WebP: biblioteca para codificar y decodificar imágenes en formato WebP. Este paquete contiene la biblioteca que se puede usar en otros programas para añadir soporte WebP, así como...
NotEnough
Huffman table hacking tool This tool calculates tricky canonical huffman histogram, which is able to trigger OOB Out Of Band write for vulnerable libwebp library i.e. libwebp = 1.3.1. This vulnerability is known as CVE-2023-4863 or CVE-2023-41064. We can overflow the pre-allocated huffman table b...
vulnerabilidad-LibWebP-CVE-2023-41064
vulnerabilidad-LibWebP-CVE-2023-41064 longitudes de código para desencadenar esta vulnerabilidad CVE-2023-41064 Este es un script de Python que crea un archivo WebP un formato de imagen vacío con una estructura de encabezado específica. El propósito de este script es generar un archivo WebP que...
webp-CVE-2023-4863
libwebp CVE-2023-4863 Una vulnerabilidad para hackear el mundo - CVE-2023-4863 Encontrando la vulnerabilidad .webp en 8s Fuzzing con AFL++...
libwebp-checker
中文 | EN CVE-2023-4863 libwebp dependency check tools This tool checks if your server's application or process that is affected by CVE-2023-4863 libwebp Heap buffer overflow Version above 0.5.0. Run this script in your production environment carefully. Result Screen Shot Scan Result Table of...
CVE-2023-41064
vulnerabilidad-LibWebP-CVE-2023-41064 longitudes de código para desencadenar esta vulnerabilidad CVE-2023-41064 Este es un script de Python que crea un archivo WebP un formato de imagen vacío con una estructura de encabezado específica. El propósito de este script es generar un archivo WebP que...
cve-2023-4863-analysis
CVE-2023-4863 libwebp Proyecto de Análisis de Formación y Defensa...
lab-cve-2023-4863
CVE-2023-4863 — Laboratorio de explotación de libwebp Reproducción de CVE-2023-4863 heap buffer overflow en libwebp en un entorno Docker completamente aislado y automatizado. Basado en la práctica del módulo de Hacking Ético de CEFIRE. Qué hace este lab Levanta ocho containers en red privada:...
Astra Linux – Vulnerability in libwebp
An use of an uninitialized value was found in libwebp in versions before 1.0.1 in the ReadSymbol function...
Astra Linux – Vulnerabilities in Firefox, Thunderbird, Chromium, and LibWebP
A heap buffer overflow in libwebp in Google Chrome prior to version 116.0.5845.187 and libwebp 1.3.2 allowed a remote attacker to perform an out-of-bounds memory write through a crafted HTML page. Chromium security severity: Critical...
Astra Linux – Vulnerability in libwebp
A flaw was discovered in libwebp in versions prior to 1.0.1. A use-after-free vulnerability was identified due to a thread being terminated prematurely. The greatest threat posed by this vulnerability is related to data confidentiality and integrity, as well as system availability...
Astra Linux – Vulnerability in libwebp
A flaw was discovered in libwebp in versions prior to 1.0.1. A heap-based buffer overflow is possible in the function WebPDecodeRGBInto due to an invalid check for buffer size. The greatest threat from this vulnerability is related to data confidentiality and integrity, as well as system...
Astra Linux – Vulnerability in libwebp
A heap-based buffer overflow was discovered in libwebp in versions prior to 1.0.1 in the GetLE16 function...
Astra Linux – Vulnerability in libwebp
A heap-based buffer overflow was discovered in libwebp in versions prior to 1.0.1, specifically in the PutLE16 function...
Astra Linux – Vulnerability in libwebp
A heap-based buffer overflow was discovered in libwebp in versions prior to 1.0.1 in the GetLE24 function...
Astra Linux – Vulnerability in libwebp
A flaw was discovered in libwebp in versions prior to 1.0.1. When reading a file, libwebp allocates an excessive amount of memory. The greatest threat posed by this vulnerability is related to service availability...