3 ms·
These are not "truly arbitrary file creation" vulnerabilities. Turning those into RCE is trivial. This is about turning an empty file creation (0 bytes) or a d
by pizzalife 3y ago
These are not "truly arbitrary file creation" vulnerabilities. Turning those into RCE is trivial.
This is about turning an empty file creation (0 bytes) or a directory creation into code execution, via buggy cron scripts etc that process filenames.