stegano

bzt 的隐写术 在线演示 简而言之， 隐写术 是一种将信息隐藏在另一种媒介中，使之在大庭广众之下不被人察觉的艺术。此实现读取常见网页格式（WEBP、PNG、GIF、JPEG）的图像，将（可选加密的）文本隐藏其中，并将结果保存为 WEBP 图像。然后你可以将此新图像上传到任何公共网站、论坛、Instagram、Facebook 聊天、邮件附件等。没有人会察觉，没有人知道图片中实际上藏有信息，除非你明确告诉他们（并且如果使用了加密，他们还需要正确的密码）。 用法 1. 选择输入图像（通过 URL 或本地文件） 2. 可选地输入密码（如果你想要额外的军用级加密） 3/a...

CVE-2023-4863

CVE-2023-4863 签出 webp git clone https://chromium.googlesource.com/webm/libwebp/ webptest cd webptest/ 签出存在漏洞的版本 git checkout 7ba44f80f3b94fc0138db159afea770ef06532a0 启用 AddressSanitizer sed -i 's/^EXTRAFLAGS=./& -fsanitize=address/' makefile.unix 构建 webp make -f makefile.unix cd examples/ 获取...

WordPress WebP Converter for Media < 4.0.3 - Unauthenticated Open Redirect

WordPress WebP Converter for Media 4.0.3 contains a file passthru.php which does not validate the src parameter before redirecting the user to it, leading to an open redirect issue. id: CVE-2021-25074 info: name: WordPress WebP Converter for Media 4.0.3 - Unauthenticated Open Redirect author:...

Images to WebP < 1.9 - Authenticated Local File Inclusion

The Images to WebP WordPress plugin before version 1.9 did not validate or sanitize the tab parameter before using it in the include function. id: CVE-2021-24644 info: name: Images to WebP 1.9 - Authenticated Local File Inclusion author: Sourabh-Sahu severity: high description: | The Images to We...

CVE-2017-0478

CVE-2017-0478 CVE-2017-0478 的 PoC FrameSequencewebp.cpp 文件目前未在 AOSP 中编译，因此当您使用 webp 编译 libframesequence.so 时， 需要使用 FRAMESEQUENCEINCLUDEWEBP 进行编译（如下所示：FRAMESEQUENCEINCLUDEWEBP=true mm -B）...

CVE-2023-4863

第 1 级: craft.c - bad.webp exist: docker 813b6b757038 /webp cd CVE-2023-4863 make -f makefile.unix -B fatal error: jpeglib.h: No such file or directory apt-get update apt-get install libjpeg-dev fatal error: png.h: No such file or directory apt-get install libpng-dev fatal error: tiffio.h: No such...

vulnerabilidad-LibWebP-CVE-2023-41064

漏洞-LibWebP-CVE-2023-41064 用于触发此CVE-2023-41064漏洞的代码长度 这是一个Python脚本，用于创建一个具有特定头部结构的空WebP（一种图像格式）文件。此脚本的目的是生成一个可用于测试或教育目的的WebP文件。 注意：此脚本仅供教育目的使用，不得用于恶意或非法用途。 先决条件 确保你的系统满足以下先决条件： 已安装Python 3.x。 系统中已安装WebP。（此要求对于脚本正常运行是必需的。） 使用 克隆或下载此仓库到你的系统。 打开终端并导航到crafteando.py文件的位置。 运行脚本，并提供输出的WebP文件名： python...

CVE-2023-4683-Test

CVE-2023-4683 测试 此仓库包含一个易于使用的 CVE-2023-4683 的 POC。只需 git clone 此仓库，然后解压 webp-test 或运行 setup-webp-test.sh。 webp-test 已经包含了必要的文件（来自 https://chromium.googlesource.com/webm/libwebp/ 的 git commit 7ba44f80f3b94fc0138db159afea770ef06532a0），并且在 webptest/examples 文件夹中包含了特制的 bad.webp 和 bad.webp.png...

webp-CVE-2023-4863

libwebp CVE-2023-4863 一个可以黑掉全世界的漏洞 - CVE-2023-4863 8秒内发现.webp漏洞（使用AFL++进行模糊测试）...

CVE-2022-36752

CVE-2022-36752 的描述 png2webp v1.0.4 被发现在函数 w2p 中存在越界写入漏洞。在将格式反向转换回 png 时，该漏洞可通过特制的 webp 文件加以利用。 复现 要复现该漏洞，请下载存在漏洞的 png2webp（v1.0.4）版本并编译该项目： git clone https://github.com/landfillbaby/png2webp.git cd png2webp git checkout 0c7119109cde91127a263bf0af252e5e730f7fba git submodule update --init --depth ...

Rocky Linux 8 [CIQ] Security Update: thunderbird / thunderbird-debuginfo / thunderbird-debugsource (crlsa-2023_5201)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20235201 advisory. libwebp: Heap buffer overflow in WebP Codec CVE-2023-4863 Tenable has extracted the preceding description block directly from the CIQ security advisory. Note that...

Rocky Linux 8 [CIQ] Security Update: firefox / firefox-debuginfo / firefox-debugsource (crlsa-2023_5184)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20235184 advisory. libwebp: Heap buffer overflow in WebP Codec CVE-2023-4863 Tenable has extracted the preceding description block directly from the CIQ security advisory. Note that...

Rocky Linux 8 [CIQ] Security Update: libwebp / libwebp-debuginfo / libwebp-debugsource / libwebp-devel (crlsa-2023_5309)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20235309 advisory. libwebp: Heap buffer overflow in WebP Codec CVE-2023-4863 Tenable has extracted the preceding description block directly from the CIQ security advisory. Note that...

Rocky Linux 9 [CIQ] Security Update: libwebp / libwebp-debuginfo / libwebp-debugsource / libwebp-devel / etc (crlsa-2023_5214)

The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20235214 advisory. libwebp: Heap buffer overflow in WebP Codec CVE-2023-4863 Tenable has extracted the preceding description block directly from the CIQ security advisory. Note that...

CVE-2026-91072

The EWWW Image Optimizer WordPress plugin before 8.8.0 does not confine a WebP-derivative file migration routine to the current site's own uploads directory, letting an attacker with Administrator-level access rename or delete existing WebP-derivative image files outside that scope, including, on...

WordPress EWWW Image Optimizer plugin < 8.8.0 - Admin+ WebP File Rename and Deletion vulnerability

Admin+ WebP File Rename and Deletion vulnerability discovered by Karthik Ramakrishnan in WordPress Plugin EWWW Image Optimizer versions 8.8.0...

EUVD-2026-89619

The EWWW Image Optimizer WordPress plugin before 8.8.0 does not confine a WebP-derivative file migration routine to the current site's own uploads directory, letting an attacker with Administrator-level access rename or delete existing WebP-derivative image files outside that scope, including, on...

CVE-2026-91072 EWWW Image Optimizer < 8.8.0 - Admin+ WebP File Rename and Deletion via Unrestricted Path in WebP Migration Handler

The EWWW Image Optimizer WordPress plugin before 8.8.0 does not confine a WebP-derivative file migration routine to the current site's own uploads directory, letting an attacker with Administrator-level access rename or delete existing WebP-derivative image files outside that scope, including, on...

CVE-2026-91072

The EWWW Image Optimizer WordPress plugin (versions before 8.8.0 ) contains a vulnerability where a WebP-derivative file migration routine is not properly confined to the site's specific uploads directory. This flaw allows an attacker with Administrator-level access to rename or delete WebP-deriv...

CVE-2026-91072 EWWW Image Optimizer < 8.8.0 - Admin+ WebP File Rename and Deletion via Unrestricted Path in WebP Migration Handler

The EWWW Image Optimizer WordPress plugin before 8.8.0 does not confine a WebP-derivative file migration routine to the current site's own uploads directory, letting an attacker with Administrator-level access rename or delete existing WebP-derivative image files outside that scope, including, on...