EIP-2026-100569

This is a writeup describing a remote file upload vulnerability in SOOP Portal Raven 1.0b, allowing attackers to upload a malicious shell disguised as an avatar image. The exploit involves registering on the site, uploading a shell renamed to .asp.jpg, and accessing it through the avatar listing page.