NSA Ghidra SQL注入漏洞

NSA Ghidra is an open-source reverse-engineering tool developed by the National Security Agency National Security Agency of the United States. Prior to version 12.1 of NSA Ghidra, there was a SQL injection vulnerability. This vulnerability stemmed from the BSim filter type, which directly...

NSA Ghidra 安全漏洞

NSA Ghidra is an open-source reverse-engineering tool developed by the National Security Agency National Security Agency of the United States. Previous versions of NSA Ghidra, up to version 12.1.1, contained security vulnerabilities. These vulnerabilities stemmed from the Mach-O binary parser,...

EUVD-2026-17042

Ghidra versions prior to 12.0.3 improperly process annotation directives embedded in automatically extracted binary data, resulting in arbitrary command execution when an analyst interacts with the UI. Specifically, the @execute annotation which is intended for trusted, user-authored comments is...

NSA Ghidra 命令注入漏洞

NSA Ghidra is an open source reverse engineering tool from the National Security Agency NSA. A security vulnerability exists in NSA Ghidra versions 10.2.2 and earlier, which stems from its Ghidra/RuntimeScripts/Linux/support/launch.sh file passing user-supplied input to eval, which when called wi...

NSA Ghidra DLL Hijacking Vulnerability

NSA Ghidra is an open source reverse engineering tool from the National Security Agency NSA. A DLL hijacking vulnerability exists in NSA Ghidra versions prior to 9.0.2, which originates when Ghidra loads jansi.dll from the current working directory, which can be exploited to execute arbitrary cod...

New Bug Found in NSA’s Ghidra Tool

A medium severity bug reported on Saturday impacts Ghidra, a free, open-source software reverse-engineering tool released by the National Security Agency earlier this year. The vulnerability allows a remote attacker to compromise exposed systems, according to a NIST National Vulnerability Databas...

NSA to release its GHIDRA reverse engineering tool for free

The United States' National Security Agency NSA is planning to release its internally developed reverse engineering tool for free at the upcoming RSA security conference 2019 that will be held in March in San Francisco. The existence of the framework, dubbed GHIDRA, was first publicly revealed by...