PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Anatomy of an Automated Patch: Fixing a File Upload RCE CVE-2025-59304

depthfirst.com | vulnerability | Critical | CVE-2025-59304 | #rce | #path-traversal | #automated-patching | #file-upload | #swetrix | #cve-2025-59304
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

The anatomy of an automated patch: a path traversal in Swetrix's CDN file upload allowed overwriting server files to achieve RCE; depthfirst's platform generated and merged the fix.
CVE
CVE-2025-59304
CVSS
9.8
Published
Collected

Related coverage

vulnerability · yokai.hakaisecurity.io
[EN] Deep Looking into Centreon
Summary In this research, three critical vulnerabilities were identified in Centreon Web and the Centreon Open Tickets module, allowing everything from full database extraction via SQL Injection to remote command execution on the server through a Path Traversal vulnerability in the file upload functionality and a Command Injection vulnerability. Exploitation requires only an authenticated session, […]
research · lab.ctbb.show
Write Path Traversal to a RCE Art Department
# Write Path Traversal to a RCE Art Department ~/authors/fsi - profile fsi * * * Diyan Apostolov Nov 28, 2025 CriticalThinking Research members are treated as artists thus here is my small and...
vulnerability · hackerone.com
Vulnerability Deep Dive: Gaining RCE Through ImageMagick With Frans Rosen
Frans Rosén's 2018 Semrush report shows how an unpatched ImageMagick in a PDF report builder turned a logo upload feature into remote code execution - a classic document-processing case study.
vulnerability · bugcrowd.com
Improvements to File Attachments
Bugcrowd upgrades Crowdcontrol with file attachments of any size or format including video, letting researchers add screenshots and PoC clips to reports so customers can validate bugs faster.
Critical · vulnerability · aikido.dev
Node2Shell Evolves to HTTP2Shell: Google Brotli Flaw (CVE-2026-111497) Affects HTTP Ecosystem
Brotli is ubiquitous across the modern HTTP ecosystem for web asset compression. Because the flaw allows unauthenticated remote code execution in both directions, any service or client automatically decompressing untrusted Brotli payloads is at critical risk until patched.
vulnerability · aikido.dev
Node2Shell: Node.js Brotli vulnerability allows remote code execution (CVE-2026-111497)
Node.js shipped a security update on Wednesday for a flaw in how it decompresses Brotli data, a bug people are already calling Node2Shell (CVE-2026-111497). If an attacker can get a malicious payload in front of your app, the flaw can crash the process, leak part of its memory, or potentially let them run their own code.
Back