Web Hack List

Preliminary research

A Shell Is Worth a Thousand Images: Bing Images RCEs

AI-collected research leads through 6 October 2026, including bounded month-by-month reviews of selected social and community sources from January through September. Unranked, incomplete, not community-vetted, and subject to change.

A blind Bing image fetch is traced through renderer and pseudo-protocol probes to an SVG image reference handled by a shell-backed conversion delegate. Out-of-band callbacks confirm command execution across Linux and Windows workers and expose why validators must recognize heterogeneous proof output.

Record

Researcher
xbow and Nico Waisman
Published by
XBOW
Date

In the archive

Tags

This page is the archive's own catalogue record. The research is the work of xbow and Nico Waisman, first published at the original source. Preserved copies are kept so the citation survives its host.