#Imagemagick
LightNews LightNews
bft.wtf
Why would you not have a model that can reach for imagemagick instead of re-generating (which must have happened because it’s SynthID tagged)
November 5, 2026 at 6:23 PM
mikeyass.bsky.social
as a guy who writes software for living

telling a computer "make it so" is really addictive (but also why is the LLM using its visual skills to do this? it should just call imagemagick to dial in the constrast etc)
November 5, 2026 at 6:16 PM
vulnsea.com
🌊 ABYSSAL · critical with a public exploit
CVE-2026-122006: The activestorage gem before 8.1.4.1 for Ruby on Rails, when ImageMagick attachment processing occurs, can allow server read and write …
CVSS 9.8 · EPSS 0.7%
https://vulnsea.com/cve/CVE-2026-122006

#CVE #infosec #cybersecurity #threatintel
CVE-2026-122006 — The activestorage gem before 8.1.4.1 for Ruby on Rails, when ImageMagick attachment processing occurs, can allow server read and write operations (e.g., reading secret_key_base) because the ImageMagick analyzer runs when a file is attach…
The activestorage gem before 8.1.4.1 for Ruby on Rails, when ImageMagick attachment processing occurs, can allow server read and write operations (e.g., reading secret_key_base) because the ImageMagick analyzer runs when a file is attach…
vulnsea.com
November 6, 2026 at 7:29 AM
malwarejake.bsky.social
In this episode we debate vulnerability prioritization vs moving towards vulnerability operations, then talk about two particularly interesting vulnerabilities, including from my old friend ImageMagick...
November 6, 2026 at 4:26 PM
maxxxdoubt.bsky.social
– Max's Mandalas –
#mandala #notAI #teatime #generativeart #imagemagick #kaleidoscope #kaleidoscopic #generative #digitalart #kaleidosaturday

Cilbort Tuces
October 31, 2026 at 3:28 AM
maxxxdoubt.bsky.social
– Max's Mandalas –
#mandala #notAI #kaleidoscope #generative #imagemagick #packed #generativeart #digitalart #kaleidoscopic #kaleidosaturday

Roiken Eniaf
October 31, 2026 at 2:52 AM
maxxxdoubt.bsky.social
– Max's Mandalas –
#mandala #notAI #kaleidoscopic #digitalart #imagemagick #ironore #generative #generativeart #kaleidoscope #kaleidosaturday

Keldon Deiv
October 31, 2026 at 4:12 AM
maxxxdoubt.bsky.social
– Max's Mandalas –
#mandala #notAI #imagemagick #digitalart #kaleidoscope #kaleidoscopic #generative #horsefly #generativeart #kaleidosaturday

Lezasti Qirah
October 31, 2026 at 1:39 AM
artist-known-as-v.bsky.social
🪄🙌🕴️👁️‍🗨️​#️⃣🪬
ImageMagick
November 5, 2026 at 10:00 AM
vulnerabilityinstitute.org
Rails Active Storage and ImageMagick: Your Questions Answered

#VulnerabilityManagement #infosec
Rails Active Storage and ImageMagick: Your Questions Answered
The Rails Active Storage ImageMagick vulnerability allows attackers to read/write files via image uploads, posing serious security risks and requiring urgent mitigation.
vulnerabilityinstitute.org
November 5, 2026 at 8:05 PM
infosec.skyfleet.blue
Critical Rails Flaw Lets Attackers Write Server Files via Crafted ImageMagick Uploads
Critical Rails Flaw Lets Attackers Write Server Files via Crafted ImageMagick Uploads
A critical flaw in Ruby on Rails could allow an unauthenticated attacker to write arbitrary files on an app's server by uploading a crafted file if the app processes uploads using ImageMagick. The Rails project disclosed the flaw in an advisory and fixed it in versions 8.1.4.1 and 8.0.5.2. The flaw is in Active Storage, the part of Rails that handles file uploads. Some apps store
thehackernews.com
November 4, 2026 at 12:44 PM
punkreport.bsky.social
Rails ImageMagick Flaw Lets Attackers Write Server Files

https://punkreport.sh/news/rails-imagemagick-flaw-lets-attackers-write-server-files/
Rails ImageMagick Flaw Lets Attackers Write Server Files
A critical unauthenticated bug in Active Storage lets crafted image uploads write arbitrary files and read secrets on Rails servers.
punkreport.sh
November 6, 2026 at 10:25 AM
patrickcmiller.bsky.social
Critical Rails Flaw Lets Attackers Write Server Files via Crafted ImageMagick Uploads thehackernews.com/2026/11/crit...
Critical Rails Flaw Lets Attackers Write Server Files via Crafted ImageMagick Uploads
Rails fixes a critical Active Storage flaw that enables arbitrary file writes through ImageMagick uploads and file reads in Disk service apps.
thehackernews.com
November 6, 2026 at 4:42 PM
reconbee.bsky.social
Critical Rails Flaw Lets Attackers Write Server Files via Crafted ImageMagick Uploads reconbee.com/critical-rai...

#Rails #servers #imagemick #cybersecurity #cyberattack
Critical Rails Flaw Lets Attackers Write Server Files via Crafted ImageMagick Uploads
referenced within the image read more about Critical Rails Flaw Lets Attackers Write Server Files via Crafted ImageMagick Uploads
reconbee.com
November 5, 2026 at 11:39 AM
0daynews.bsky.social
rails active storage fixed in versions 8.1.4.1 and 8.0.5.2. apps using imagemagick on untrusted uploads allowed attackers to write server files. patch now available. #infosec https://0daynews.com/articles/2026-11-04-rails-active-storage-imagemagick-file-write-patch/
Rails Active Storage ImageMagick Flaw Allows File Writes
November 4, 2026 at 7:30 PM
breachplease-fm.bsky.social
Richy fills in for Jess again — OpenSSH's "Starshole" Alpine sshd bypass, a 9.8 Rails+ImageMagick SVG upload RCE, and Jake's push for "vulnerability ops" over "management." w/ @malwarejake.bsky.social @secitup.bsky.social @maplespock.bsky.social youtu.be/SJICfTVtn6c
November 6, 2026 at 2:47 PM
thedailytechfeed.com
Severe Rails flaw via ImageMagick lets attackers write server files—patch now. #Rails #ImageMagick #Security #WebSecurity #ActiveStorage #Vulnerability https://thedailytechfeed.com/critical-rails-vulnerability-lets-attackers-write-server-files/
November 4, 2026 at 12:22 PM
secquill.com
Rails patches Active Storage flaw that could let image uploads write files on servers

Rails has fixed an Active Storage weakness in ImageMagick image analysis that could let unauthenticated uploaders write server files and, in some setups, read secrets.

#cybersecurity
Rails patches Active Storage flaw that could let image uploads write files on servers
Rails has fixed an Active Storage weakness in ImageMagick image analysis that could let unauthenticated uploaders write server files and, in some setups, read secrets.
secquill.com
November 6, 2026 at 11:07 AM
stackflag.bsky.social
CVE-2026-122006 - active storage
The ActiveStorage component in Ruby on Rails versions before 8.1.4.1 runs ImageMagick when a file is attached. Because ImageMagick has no restrictive policy, an…

Too many irrelevant or confusing CVEs? Use stackflag.com

#activestorage #rubyonrails #CVE #infosec
CVE-2026-122006: Rails ActiveStorage lets attackers read secret key via ImageMagick
The ActiveStorage component in Ruby on Rails versions before 8.1.4.1 runs ImageMagick when a file is attached.
stackflag.com
November 4, 2026 at 3:20 PM
intcyberdigest.bsky.social
‼️ Ruby on Rails apps using ImageMagick can be made to write attacker-chosen files by one crafted image upload, no login needed.

Rated 9.8/10, it can also leak secrets like secret_key_base if uploads sit on disk.
November 5, 2026 at 6:56 AM
postac001.bsky.social
Ruby on RailsのActive Storageに脆弱性。ImageMagick使用時、細工された画像アップロードでサーバに任意ファイル書き込み可能。バージョン8.1.4.1、8.0.5.2…
Critical Rails Flaw Lets Attackers Write Server Files via Crafted ImageMagick Uploads
Rails fixes a critical Active Storage flaw that enables arbitrary file writes through ImageMagick uploads and file reads in Disk service apps.
thehackernews.com
November 4, 2026 at 2:19 PM
kitafox.bsky.social
Critical Rails Flaw Lets Attackers Write Server Files via Crafted ImageMagick Uploads（Ruby on Railsのファイル処理で重大な任意ファイル書き込みの脆弱性） #TheHackerNews (Nov 4)
thehackernews.com/2026/11/crit...
Critical Rails Flaw Lets Attackers Write Server Files via Crafted ImageMagick Uploads
Rails fixes a critical Active Storage flaw that enables arbitrary file writes through ImageMagick uploads and file reads in Disk service apps.
thehackernews.com
November 5, 2026 at 3:00 AM
kitafox.bsky.social
Critical Rails Flaw Lets Attackers Write Server Files via Crafted ImageMagick Uploads（Railsの画像アップロード機能で任意ファイルを書き込まれる欠陥） #TheHackerNews (Nov 4)
thehackernews.com/2026/11/crit...
Critical Rails Flaw Lets Attackers Write Server Files via Crafted ImageMagick Uploads
Rails fixes a critical Active Storage flaw that enables arbitrary file writes through ImageMagick uploads and file reads in Disk service apps.
thehackernews.com
November 5, 2026 at 1:50 AM
tierrasapiens.bsky.social
🖲️ #Noticia #CiberSeguridad #Cybersecurity #CiberNoticia

Critical Rails Flaw Lets Attackers Write Server Files via Crafted ImageMagick Uploads

Leer Más / Read More...
Critical Rails Flaw Lets Attackers Write Server Files via Crafted ImageMagick Uploads
Haz clic para acceder al contenido completo.
thehackernews.com
November 4, 2026 at 2:20 PM