The interesting part is every time we uploaded a file with a new hash containing a new payload, virustotal forwarded the payload to other hosts. The analysis of the timeline helps to identify the required approach and handling of single vulnerabilities and vulnerability collections. Hosts identified within the internal network: .cluster.local .local - 172.19.0.1 .cluster.local .cluster.local .cluster.local .cluster.local scanner-rel-typer-7b4c979bc9-bskr8 scanner-zzbm-typer-7b4c979bc9-cf5f7 .qianxin-inc.cn sandk8s23. -inc.cn -inc.cn sandk8s26. sandk8s27. -inc.cn etc. Ubuntu Security Notice USN-4987-1 Jlibimage-exiftool-perl vulnerability A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 21.04 - Ubuntu 20.10 - Ubuntu 20.04 LTS - Ubuntu 18.04 LTS Summary: libimage-exiftool-perl could be made to crash if it opened a specially crafted file.

In the tests it was possible to gain access to more than 50 internal hosts with high privileges. ExifTool is a platform-independent Perl library plus a command-line application for reading, writing and editing meta information in a wide variety of files.

Exiftool vulnerability