News for hackers. Stuff that matters.

A comment on We pwned X, Vercel, Cursor, and Discord through a supply-chain attack. Parent comment

Re:We pwned X, Vercel, Cursor, and Discord through a supply-... by mikkupikku on Thursday December 18, 2025 @04:09PM (#46318774)
That's apparently how 4chan got hacked a while back. They were letting users upload PDFs and were using ghostscript to generate thumbnails. From what I understand, the hackers uploaded a PDF which contained PostScript which exploited a ghostscript bug.
[ Parent | on HN ]
Re:We pwned X, Vercel, Cursor, and Discord through a supply-... by diath on Thursday December 18, 2025 @04:28PM (#46319032)
Yes but the primary issue was that 4chan was using over a decade old version of the library that contained a vulnerability first disclosed in 2012: https://nvd.nist.gov/vuln/detail/CVE-2012-4405
[ Parent | on HN ]