Writing Sync, Popping Cron: A Novel SQLite-Injection-to-Cron RCE on Synology BeeStation (CVE-2024-50629/50630/50631)

Original text: “Writing Sync, Popping Cron: DEVCORE’s Synology BeeStation RCE & A Novel SQLite Injection RCE Technique (CVE-2024-50629~50631)” — Kiddo (handle kiddo-pwn), personal blog (November 30, 2025). Underlying vulnerability research is credited to DEVCORE’s Pwn2Own Ireland 2024 entry; the SQLite-into-cron RCE primitive is Kiddo’s N-day contribution. Code blocks, hex dumps, log fragments and figures below…

https://core-jmp.org/2026/05/kiddo-pwn-synology-beestation-sqlite-cron-rce-cve-2024-50629-50631/