Phying News
P非影 中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Vulnerability Deep Dive: Gaining RCE Through ImageMagick With Frans Rosen

hackerone.com | vulnerability | #rce | #case-study | #hackerone | #vulnerability-analysis | #imagemagick | #file-upload

Summary

Frans Rosén's 2018 Semrush report shows how an unpatched ImageMagick in a PDF report builder turned a logo upload feature into remote code execution - a classic document-processing case study.
Published
Collected

original ↗

Related coverage

  1. CVE-2026-32475: Elementor Pro Forms Unauthenticated Arbitrary File Upload to RCE Lab & PoC (github.com)
  2. Project Glasswing: What We Learned Running a Frontier Model on Our Own Codebase (hackerone.com)
  3. Big Bugs Podcast Episode 2: ImageTragick Up Close (bugcrowd.com)
  4. ImageMagick: From Arbitrary File Read to File Write In Every Policy (pwn.ai)
  5. How an IDOR Vulnerability Led to User Profile Modification (hackerone.com)
  6. Jingle Bugs - How to Rock in a Hard Place (hackerone.com)

back