Phying News
Curated security research, vulnerabilities, advisories and tools for practitioners.

A Shell Is Worth a Thousand Images: Bing Images RCEs

Summary

See how XBOW autonomously uncovered three critical Microsoft RCEs by tracing ordinary image-processing and file-upload paths to proven code execution.

Why it matters

Three critical Microsoft image-processing RCEs show how ordinary upload and conversion paths can compose into code execution, and provide a strong case study in autonomous vulnerability research.
Published
Collected

original ↗

Related coverage

back