Phying News
P非影 中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

ImageMagick: From Arbitrary File Read to File Write In Every Policy

pwn.ai | blog | #ai-security | #rce | #zero-day | #pentesting | #autonomous-agents | #imagemagick | #file-upload

Summary

pwn.ai spent five days autonomously probing ImageMagick internals, chaining file write and read flaws to reach code execution across default, production-safe and hardened security policies.
Published
Collected

original ↗

Related coverage

research · idnsec.com
Mitigating RCE Impact Like in OpenAI Hack with Defense-in-Depth
Using HacktronAI's OpenAI Discourse hack disclosure, this article covers sandboxing, runtime protection, and AI-assisted defense to shrink the blast radius of RCE across interconnected apps.
blog · xbow.com
Introducing Autonomous Exposure Management: Offensive Security at Enterprise Scale
XBOW tests your whole external application estate the way an attacker would, with no source code and no credentials, and proves what is exploitable.
vulnerability · hackerone.com
Vulnerability Deep Dive: Gaining RCE Through ImageMagick With Frans Rosen
Frans Rosén's 2018 Semrush report shows how an unpatched ImageMagick in a PDF report builder turned a logo upload feature into remote code execution - a classic document-processing case study.
tool · github.com
Comment2Shell: Zero-Click Pre-Auth RCE Exploit Kit for WordPress (CVE-2026-93485)
Affects all WordPress installations from version 4.7.0 through 7.1.0 without requiring credentials or interaction beyond opening a post. Administrators should verify upgrading to 7.1.1 or backported releases, and monitor server logs for suspicious comment payloads and unexpected plugin uploads.
research · starlabs.sg
Dirty Cert: Cisco Smart Software Manager's Silently Patched RCE
Post-auth RCE in Cisco Smart Software Manager (CSSM): command injection in nginx certificate upload, where openssl checks run via childProcess.execSync. Cisco silently patched it in 10-202608.
research · github.com
[CVE-2024-6100] CyberKimi Benchmarks: Autonomous Exploitation Traces & Evidence
Provides verifiable, transparent evidence of advanced LLMs performing complex, multi-step binary and browser exploitation autonomously under strict ASLR and memory randomization defenses.
back