Vulnerabilitycritical

Researchers Takeover Unpatched 3rd

The Hacker Newsby @TheHackersNewsApr 26, 2022 · 08:30 UTC (Apr 26, 2022)2 min read1

Read at thehackernews.com

Analyze CVE-2021-22204 with Vani AIImpact, affected versions, exploitation, mitigations and detection

CVEs: CVE-2021-22204 CVE-2021-22205

Tags: cve-2021-22204 cve-2021-22205 vulnerability

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2021-22204	Eval Injection in ExifTool DjVu Parsing Enables Remote Code Execution	7.8	100%	KEVPoC ×5	Apr 23, 2021 KEV Nov 17, 2021
CVE-2021-22205	Unauthenticated RCE in GitLab CE/EE via ExifTool Image Parsing (CVE-2021-22205)	10.0	100%	KEVRansomwarePoC ×2	Apr 23, 2021 KEV Nov 3, 2021

From the original article

2 min read at thehackernews.com

Security researchers have disclosed a security issue that could have allowed attackers to weaponize the VirusTotal platform as a conduit to achieve remote code execution (RCE) on unpatched third-party sandboxing machines employed antivirus engines.

The Hacker News

By @TheHackersNews · thehackernews.com

Read the full article at The Hacker News

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.