PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

libmagic: The Blathering

blog.trailofbits.com | blog | #reverse-engineering | #cve | #libmagic | #polyfile | #file-formats | #cleanroom-implementation
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Trail of Bits documents the quirks uncovered while building a pure-Python cleanroom implementation of libmagic for PolyFile, from its arcane magic-file DSL to memory safety bugs behind numerous CVEs.
Published
Collected

Related coverage

blog · blog.trailofbits.com
Two New Tools that Tame the Treachery of Files
Under DARPA SafeDocs, Trail of Bits released PolyFile and PolyTracker: ground-truth labeling of file format semantics and LLVM-based instrumentation for universal taint tracking of parsers.
research · github.com
php2shell: Pure HTTP Full-Chain RCE and ASLR Bypass on Stock PHP 8.4 Configurations
Overcomes historical constraints where PHP heap exploitation required display_errors=On, restricted memory limits, or target application vulnerabilities, demonstrating reliable pure-HTTP RCE and ASLR defeat against standard production ini configurations.
blog · blog.trailofbits.com
Graphtage: A New Semantic Diffing Tool
Graphtage is a semantic diff tool for tree-structured files such as JSON, XML, and YAML: unlike line-oriented diff, it matches unordered structures and even compares across formats.
blog · portswigger.net
PHP2Shell x Burp Suite: Detection in your hands within a day of disclosure
PHP2Shell (CVE-2026-109618 and CVE-2026-109619) became the latest vulnerability to grab headlines around the globe. By some estimates, up to 70% of websites run at least some PHP. So if you're respons
blog · about.gitlab.com
PHP2Shell: GitLab helps find and remediate critical PHP flaws
CVE-2026-109618 and CVE-2026-109619 allow unauthenticated code execution. Learn which PHP versions fix them and how to check your projects.
blog · aikido.dev
How to patch PHP2Shell with free Aikido Images
PHP2Shell is a pair of critical remote code execution (RCE) vulnerabilities in PHP, CVE-2026-109618 and CVE-2026-109619. Both score 9.2 on CVSS v4.0, and either one can let an unauthenticated attacker run code on a server that handles PHP requests. Cloudflare reports that exploitation has started.
Back