witchcraft

🎉 Your OPSEC companion. Run witchcraft help or witchcraft manual for the complete manual 🎉 What it does? WITCHCRAFT Are much more than a simple alias, it's a init system that can works with busybox, a shell and automation's and automation's engine for hacking, osint, forensics, etc. NAME witchcra...

CVE-2014-0196

See https://vulners.com/cve/CVE-2014-0196...

CVE-2025-60876

CVE-2025-60876: busybox wget request-target injection fix A behavior-preserving fix for CVE-2025-60876, an HTTP header-injection vulnerability in BusyBox wget, plus the proof-of-concept that demonstrates it and the artifacts for submitting the fix upstream to BusyBox. The vulnerability BusyBox wg...

OESA-2026-3763 busybox security update

The Swiss Army Knife of Embedded Linux Security Fixes: A vulnerability has been found in BusyBox up to 1.30.1. This vulnerability affects unknown code of the file networking/wget.c of the component FEATUREWGETTIMEOUT Handler. Such manipulation of the argument -T leads to null pointer dereference...

Astra Linux – Vulnerability in busybox

A use-after-free in Busybox’s awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the getvars function...

research

安全研究 本仓库专门用于记录我所发现的安全漏洞（CVE）。该仓库包含所发现漏洞的详细技术文档、概念验证（PoC）漏洞利用代码与分析。 关于 本仓库汇总了我发现并研究的所有 CVE，包括： 每个漏洞的详细技术分析 用于教育目的的概念验证（PoC）漏洞利用代码 攻击场景与影响评估 修复状态与补丁信息 官方 CVE 记录的相关引用 已发现的 CVE CVE-2026-26158 - BusyBox 硬链接绕过（9.3 严重） CVE-2026-26157 - BusyBox 路径遍历（7.8 高危） 警告 警告： 本仓库中的漏洞利用代码仅供教育与研究目的使用 。...

CVE-2026-76014

A flaw was found in BusyBox. A local attacker can exploit a null pointer dereference vulnerability in the FEATUREWGETTIMEOUT handler within the networking/wget.c component. This occurs when the attacker manipulates the -T argument, leading to a denial of service. Mitigation Mitigation for this...

OESA-2026-3686 busybox security update

The Swiss Army Knife of Embedded Linux Security Fixes: A vulnerability has been found in BusyBox up to 1.30.1. This vulnerability affects unknown code of the file networking/wget.c of the component FEATUREWGETTIMEOUT Handler. Such manipulation of the argument -T leads to null pointer dereference...

OESA-2026-3685 busybox security update

The Swiss Army Knife of Embedded Linux Security Fixes: A vulnerability has been found in BusyBox up to 1.30.1. This vulnerability affects unknown code of the file networking/wget.c of the component FEATUREWGETTIMEOUT Handler. Such manipulation of the argument -T leads to null pointer dereference...

OESA-2026-3684 busybox security update

The Swiss Army Knife of Embedded Linux Security Fixes: A vulnerability has been found in BusyBox up to 1.30.1. This vulnerability affects unknown code of the file networking/wget.c of the component FEATUREWGETTIMEOUT Handler. Such manipulation of the argument -T leads to null pointer dereference...

OESA-2026-3683 busybox security update

The Swiss Army Knife of Embedded Linux Security Fixes: A vulnerability has been found in BusyBox up to 1.30.1. This vulnerability affects unknown code of the file networking/wget.c of the component FEATUREWGETTIMEOUT Handler. Such manipulation of the argument -T leads to null pointer dereference...

The vulnerability of the udhcp_getoption() function in the networking/udhcp/common.c component of the BusyBox command-line utility tools allows a attacker to gain access to confidential data.

The vulnerability of the udhcpgetoption function in the networking/udhcp/common.c component of the BusyBox command-line utility tools on UNIX systems is related to reading data from a buffer beyond its allowable limits. Exploiting this vulnerability could allow an attacker to gain access to...

CVE-2026-38754

A flaw was found in Busybox. This vulnerability, a heap overflow, exists within the ifsbreakup function. A remote attacker could exploit this by providing specially crafted input, leading to a Denial of Service DoS condition. This means the affected system or application could become unavailable ...

Astra Linux – Vulnerability in busybox

There is a stack overflow vulnerability in ash.c:6030 in busybox before version 1.35. In the environment of the Internet of Vehicles, this vulnerability can lead to the execution of arbitrary code from commands...

Astra Linux – Vulnerability in busybox

An out-of-bounds heap read in Busybox’s unlzma applet leads to information leakage and denial of service when LZMA-compressed input is decompressed. This can be triggered by any applet/format that…...

Astra Linux – Vulnerability in busybox

A use-after-free condition in Busybox’s awk applet leads to denial of service and potentially code execution when processing a crafted awk pattern in the nextinputfile function...

Astra Linux – Vulnerability in busybox

A use-after-free in Busybox’s awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the hashinit function...

Astra Linux – Vulnerability in busybox

Busybox contains a vulnerability related to SSL certificate validation. This vulnerability exists in the “busybox wget” applet, and it can lead to the execution of arbitrary code. This vulnerability appears to be exploitable by simply downloading any file over an HTTPS connection using “busybox...

Astra Linux – Vulnerability in busybox

A use-after-free in Busybox’s awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate function...

Astra Linux – Vulnerability in busybox

A use-after-free condition in Busybox’s awk applet leads to denial of service and potentially code execution when processing a crafted awk pattern in the getvari function...