PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Abusing libmagic﹕ Inconsistencies That Lead to Type Confusion

lab.ctbb.show | research | #exploitation | #type-confusion | #file-upload | #libmagic
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Exploring libmagic’s inconsistencies in JSON detection and type confusion. A research note on file uploads, misclassification, and security risks.
Published
Collected

Related coverage

research · lab.ctbb.show
Total.js RCE gadgets all around
RCEs, RCEs…they are all around and Total.js framework will be in our scope this time
research · lab.ctbb.show
Write Path Traversal to a RCE Art Department
# Write Path Traversal to a RCE Art Department ~/authors/fsi - profile fsi * * * Diyan Apostolov Nov 28, 2025 CriticalThinking Research members are treated as artists thus here is my small and...
research · lab.ctbb.show
Exploiting Web Worker XSS with Blobs
Ways to turn XSS in a Web Worker into full XSS, covering known tricks and a new generic exploit using Blob URLs with the Drag and Drop API
research · theori.io
Patch Gapping a Safari Type Confusion
A WebKit AudioWorklet type-confusion bug was fixed, yet new vulnerable iOS builds still shipped for weeks afterward; Theori details the root cause and a full exploit chain built around the patch gap.
research · aretiq.ai
CVE-2026-15748 — WPMU DEV Forminator Forms Select Field Injection Unrestricted File Upload
This research provides technical context that security teams can use for monitoring and validation.
research · bugpwn.com
CivetWeb: PUT + SSI = RCE.
How two fully legitimate CivetWeb features (authenticated PUT + SSI #exec) combine into arbitrary remote code execution, with source code analysis, live demo, and hardening recommendations.
Back