Preliminary research
A Shell Is Worth a Thousand Images: Bing Images RCEs
Bing Images RCEs: How XBOW Found Three Critical Flaws
AI-collected research leads through 1 October 2026, including a bounded September review of selected social and community sources. Unranked, incomplete, not community-vetted, and subject to change.
A blind Bing image fetch is traced through renderer and pseudo-protocol probes to an SVG image reference handled by a shell-backed conversion delegate. Out-of-band callbacks confirm command execution across Linux and Windows workers and expose why validators must recognize heterogeneous proof output.
Record
- Document
- Bing Images RCEs: How XBOW Found Three Critical Flaws
- Researcher
- xbow and Nico Waisman
- Published by
- XBOW
- Date
- Topic
- Server
In the archive
Tags
This page is the archive's own catalogue record. The research is the work of xbow and Nico Waisman, first published at the original source. Preserved copies are kept so the citation survives its host; this one was last captured on .