| عنوان | BeamCtrl Airiana 11.0 Insecure Deserialization |
|---|
| الوصف | The coef script within the BeamCtrl/Airiana repository is vulnerable to insecure deserialization, leading to remote code execution (RCE). The script loads data from coeficients.dat using Python's pickle.load() without validating the contents, allowing an attacker to execute arbitrary code by replacing the .dat file with a malicious payload |
|---|
| المصدر | ⚠️ https://github.com/BeamCtrl/Airiana/issues/42 |
|---|
| المستخدم | hacker_rootki (UID 84361) |
|---|
| ارسال | 04/05/2025 09:30 AM (1 سنة منذ) |
|---|
| الاعتدال | 15/05/2025 09:59 AM (11 days later) |
|---|
| الحالة | تمت الموافقة |
|---|
| إدخال VulDB | 309040 [BeamCtrl Airiana حتى 11.0 coef تجاوز الصلاحيات] |
|---|
| النقاط | 19 |
|---|