writeups.xyz / Remote Command Execution in binwalk

Submitter : c2a

Date: 31 January 2023

Bounty : undisclosed

Vulnerabilities :

• RCE
• Path Traversal
• Security Code Review

Programs :

• ReFirm Labs (Binwalk)
• Ubi_reader
• Jefferson
• Yaffshiv

Authors :

• Quentin Kaiser (@QKaiser)

Link :
https://onekey.com/blog/security-advisory-remote-command-execution-in-binwalk/