Threats tagged 'ghsa-7m6w-gmv7-38xj'

Fluxion versions before 6.39 have an OS command injection vulnerability in the fluxion.sh target scanner. This vulnerability arises because the scanner decodes access point ESSIDs using eval after only escaping single quotes. An attacker within Wi-Fi range can broadcast a crafted SSID that, when scanned or selected by the operator, executes commands with root privileges.