https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 16:09:23 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-263605 EUVD-2026-263605 https://cve.radiocsirt.org/vuln/euvd-2026-263605 https://cve.radiocsirt.org/vuln/fkie_cve-2022-4510 <p>A path traversal vulnerability was identified in ReFirm Labs binwalk from version 2.1.2b through 2.3.3 included. By crafting a malicious PFS filesystem file, an attacker can get binwalk&#39;s PFS extractor to extract files at arbitrary locations when binwalk is run in extraction mode (-e option). Remote code execution can be achieved by building a PFS filesystem that, upon extraction, would extract a malicious binwalk module into the folder .config/binwalk/plugins. This vulnerability is associated with program files src/binwalk/plugins/unpfs.py.</p> <p>This issue affects binwalk from 2.1.2b through 2.3.3 included.</p> <p>A path traversal vulnerability was identified in ReFirm Labs binwalk from version 2.1.2b through 2.3.3 included. By crafting a malicious PFS filesystem file, an attacker can get binwalk&#39;s PFS extractor to extract files at arbitrary locations when binwalk is run in extraction mode (-e option). Remote code execution can be achieved by building a PFS filesystem that, upon extraction, would extract a malicious binwalk module into the folder .config/binwalk/plugins. This vulnerability is associated with program files src/binwalk/plugins/unpfs.py.</p> <p>This issue affects binwalk from 2.1.2b through 2.3.3 included.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2022-4510 https://cve.radiocsirt.org/vuln/ghsa-3cm8-v4mc-gppg <p><strong>Affected:</strong> PyPI: binwalk</p> <p>A path traversal vulnerability was identified in ReFirm Labs binwalk from version 2.1.2b through 2.3.3 inclusive. By crafting a malicious PFS filesystem file, an attacker can get binwalk&#39;s PFS extractor to extract files at arbitrary locations when binwalk is run in extraction mode (-e option). Remote code execution can be achieved by building a PFS filesystem that, upon extraction, would extract a malicious binwalk module into the folder .config/binwalk/plugins. This vulnerability is associated with program files src/binwalk/plugins/unpfs.py. This issue affects binwalk from 2.1.2b through and including 2.3.3.</p> <p><strong>Affected:</strong> PyPI: binwalk</p> <p>A path traversal vulnerability was identified in ReFirm Labs binwalk from version 2.1.2b through 2.3.3 inclusive. By crafting a malicious PFS filesystem file, an attacker can get binwalk&#39;s PFS extractor to extract files at arbitrary locations when binwalk is run in extraction mode (-e option). Remote code execution can be achieved by building a PFS filesystem that, upon extraction, would extract a malicious binwalk module into the folder .config/binwalk/plugins. This vulnerability is associated with program files src/binwalk/plugins/unpfs.py. This issue affects binwalk from 2.1.2b through and including 2.3.3.</p> https://cve.radiocsirt.org/vuln/ghsa-3cm8-v4mc-gppg https://cve.radiocsirt.org/vuln/gsd-2022-4510 gsd-2022-4510 https://cve.radiocsirt.org/vuln/gsd-2022-4510 https://cve.radiocsirt.org/vuln/opensuse-su-2024:12649-1 <p>binwalk-2.3.3-2.1 on GA media</p> <p>binwalk-2.3.3-2.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2024:12649-1 https://cve.radiocsirt.org/vuln/pysec-2026-787 <p><strong>Affected:</strong> PyPI: binwalk</p> <p>A path traversal vulnerability was identified in ReFirm Labs binwalk from version 2.1.2b through 2.3.3 inclusive. By crafting a malicious PFS filesystem file, an attacker can get binwalk&#39;s PFS extractor to extract files at arbitrary locations when binwalk is run in extraction mode (-e option). Remote code execution can be achieved by building a PFS filesystem that, upon extraction, would extract a malicious binwalk module into the folder .config/binwalk/plugins. This vulnerability is associated with program files src/binwalk/plugins/unpfs.py. This issue affects binwalk from 2.1.2b through and including 2.3.3.</p> <p><strong>Affected:</strong> PyPI: binwalk</p> <p>A path traversal vulnerability was identified in ReFirm Labs binwalk from version 2.1.2b through 2.3.3 inclusive. By crafting a malicious PFS filesystem file, an attacker can get binwalk&#39;s PFS extractor to extract files at arbitrary locations when binwalk is run in extraction mode (-e option). Remote code execution can be achieved by building a PFS filesystem that, upon extraction, would extract a malicious binwalk module into the folder .config/binwalk/plugins. This vulnerability is associated with program files src/binwalk/plugins/unpfs.py. This issue affects binwalk from 2.1.2b through and including 2.3.3.</p> https://cve.radiocsirt.org/vuln/pysec-2026-787 https://cve.radiocsirt.org/vuln/ubuntu-cve-2022-4510 <p><strong>Affected:</strong> Ubuntu:16.04:LTS: binwalk, Ubuntu:18.04:LTS: binwalk, Ubuntu:20.04:LTS: binwalk, Ubuntu:22.04:LTS: binwalk</p> <p>A path traversal vulnerability was identified in ReFirm Labs binwalk from version 2.1.2b through 2.3.3 included. By crafting a malicious PFS filesystem file, an attacker can get binwalk&#39;s PFS extractor to extract files at arbitrary locations when binwalk is run in extraction mode (-e option). Remote code execution can be achieved by building a PFS filesystem that, upon extraction, would extract a malicious binwalk module into the folder .config/binwalk/plugins. This vulnerability is associated with program files src/binwalk/plugins/unpfs.py. This issue affects binwalk from 2.1.2b through 2.3.3 included.</p> <p><strong>Affected:</strong> Ubuntu:16.04:LTS: binwalk, Ubuntu:18.04:LTS: binwalk, Ubuntu:20.04:LTS: binwalk, Ubuntu:22.04:LTS: binwalk</p> <p>A path traversal vulnerability was identified in ReFirm Labs binwalk from version 2.1.2b through 2.3.3 included. By crafting a malicious PFS filesystem file, an attacker can get binwalk&#39;s PFS extractor to extract files at arbitrary locations when binwalk is run in extraction mode (-e option). Remote code execution can be achieved by building a PFS filesystem that, upon extraction, would extract a malicious binwalk module into the folder .config/binwalk/plugins. This vulnerability is associated with program files src/binwalk/plugins/unpfs.py. This issue affects binwalk from 2.1.2b through 2.3.3 included.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2022-4510