How I got RCE from a File Upload on Academico - CVE-2025-10763
Vulnerability Overview I was able to achieve Remote Code Execution (RCE) via the file upload functionality on Academico. TL;DR: Academico’s profile picture upload lacks file type validation and s...