File Upload Attacks (Part 1)

This blog post (Part-1 of a series) surveys file upload attack surfaces and testing techniques, covering risks such as remote code execution via uploaded shells, ZipSlip archive extraction, file overwrite and path traversal, large-file denial-of-service, server-side injection via filenames, EXIF/metadata leakage, and ImageMagick (ImageTragick) vulnerabilities and CVEs; it provides example test steps and references for each issue but does not describe a specific incident or active exploitation.