PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Vulnerability Deep Dive: Gaining RCE Through ImageMagick With Frans Rosen

hackerone.com | vulnerability | #rce | #case-study | #hackerone | #vulnerability-analysis | #imagemagick | #file-upload
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Frans Rosén's 2018 Semrush report shows how an unpatched ImageMagick in a PDF report builder turned a logo upload feature into remote code execution - a classic document-processing case study.
Published
Collected

Related coverage

blog · bugcrowd.com
Big Bugs Podcast Episode 2: ImageTragick Up Close
Big Bugs Episode 2 examines ImageTragick, the notorious ImageMagick vulnerability. Jason Haddix traces its disclosure and patch timeline, implications for developers, and image processing alternatives.
blog · pwn.ai
ImageMagick: From Arbitrary File Read to File Write In Every Policy
pwn.ai spent five days autonomously probing ImageMagick internals, chaining file write and read flaws to reach code execution across default, production-safe and hardened security policies.
vulnerability · bishopfox.com
Signature Optional - Analysis of CVE-2026-28323
CVE-2026-28323 is a CVSS 9.8 SAML auth bypass in SolarWinds Web Help Desk. A single forged POST request grants unauthenticated access to any valid account.
Critical · vulnerability · depthfirst.com
Anatomy of an Automated Patch: Fixing a File Upload RCE CVE-2025-59304
The anatomy of an automated patch: a path traversal in Swetrix's CDN file upload allowed overwriting server files to achieve RCE; depthfirst's platform generated and merged the fix.
vulnerability · yeswehack.com
Log4Shell, Ten Days On: YesWeHack’s Hunters Are at the Forefront of Securing Organisations
Ten days after Log4Shell, YesWeHack explains why the ubiquitous Log4j library became the internet's Achilles' heel and how its hunter community helped organisations respond to the fallout.
vulnerability · bugcrowd.com
Big Bugs | Episode 5: Big XSS–Not an Oxymoron
Big Bugs Episode 5 argues that 'big XSS' is not an oxymoron: though XSS is often dismissed as low-hanging fruit, exploit chains show it can drive ransomware and full account takeover.
Back