29 matches found
Important: lrzsz
Issue Overview: lrzsz before 0.13.0 contains an OS command injection vulnerability in the lrz receive utility's pipe mode that allows remote senders to execute commands by supplying crafted filenames. When lrz runs under a suffixed name such as lrztar, procheader in src/lrz.c passes the unescaped...
7.7CVSS6.5AI score0.00935EPSS
SaveExploits0
20