1 result · Clear filters · Feed
-
Medium —
Scapy Session Loading Vulnerable to Arbitrary Code Execution via Untrusted Pickle Deserialization
### Summary An unsafe deserialization vulnerability in Scapy <v2.7.0 allows attackers to execute arbitrary code **when a malicious session file is locally loaded via the `-s` option**. This requires convincing a user to manually load a malicious session file.…