file-upload

3 items

Everything tagged "file-upload".

3

ExifTool DjVu Injection notes 2 min 25 Jul 2026 ExifTool parses the annotation chunk of a DjVu file and passes its contents through a Perl `eval`, so metadata inside the file becomes code. File Upload notes 6 min 03 Aug 2026 An upload form is a write primitive into the target's filesystem. ImageMagick notes 4 min 07 Aug 2026 ImageMagick picks a coder from a file's contents, not its extension, and it shells out in more places than decoding pixels.