Lucene search
+L

1 matches found

Cvelist
Cvelist
added 2024/12/23 3:17 p.m.18 views

CVE-2024-53256 Rizin has a command injection via RzBinInfo bclass due legacy code

Rizin is a UNIX-like reverse engineering framework and command-line toolset. rizin.c still had an old snippet of code which suffered a command injection due the usage of rzcorecmdf to invoke the command m which was removed in v0.1.x. A malicious binary defining bclass part of RzBinInfo is execute...

7.8CVSS0.012EPSS
SaveExploits0References3
Rows per page
Query Builder