1842 matches found
CVE-2014-0196
参照: https://vulners.com/cve/CVE-2014-0196...
witchcraft
🎉 당신의 OPSEC 동반자. witchcraft help 또는 witchcraft manual 전체 매뉴얼을 실행하세요 🎉 무엇을 하나요? WITCHCRAFT는 단순한 별칭 이상의 것입니다. busybox, 셸, 그리고 해킹, OSINT, 포렌식 등을 위한 자동화 엔진과 함께 작동하는 초기화 시스템입니다. 이름 witchcraft - 사이버 보안을 위한 다용도 툴킷. 개요 witchcraft 모듈이름 옵션... 파일... IP... 설명 WITCHCRAFT는 NET 깊숙이 들어가는 러너들을 위해 만들어진 사이버덱 툴킷입니다...
research
安全研究 本仓库专门用于记录我所发现的安全漏洞（CVE）。该仓库包含所发现漏洞的详细技术文档、概念验证（PoC）漏洞利用代码与分析。 关于 本仓库汇总了我发现并研究的所有 CVE，包括： 每个漏洞的详细技术分析 用于教育目的的概念验证（PoC）漏洞利用代码 攻击场景与影响评估 修复状态与补丁信息 官方 CVE 记录的相关引用 已发现的 CVE CVE-2026-26158 - BusyBox 硬链接绕过（9.3 严重） CVE-2026-26157 - BusyBox 路径遍历（7.8 高危） 警告 警告： 本仓库中的漏洞利用代码仅供教育与研究目的使用 。...
CVE-2026-76014
A flaw was found in BusyBox. A local attacker can exploit a null pointer dereference vulnerability in the FEATUREWGETTIMEOUT handler within the networking/wget.c component. This occurs when the attacker manipulates the -T argument, leading to a denial of service. Mitigation Mitigation for this...
CVE-2025-60876
CVE-2025-60876：busybox wget リクエストターゲットインジェクション修正 CVE-2025-60876（BusyBox wget における HTTP ヘッダインジェクション脆弱性）に対する動作を維持する修正、それを実証する概念実証、および修正を BusyBox にアップストリーム提出するための成果物です。 脆弱性 BusyBox wget は、URL のパスとクエリを HTTP リクエスト行にそのままコピーします。生の CR 0x0D、LF 0x0A、またはその他の制御バイトを含む URL...
The vulnerability of the udhcp_getoption() function in the networking/udhcp/common.c component of the BusyBox command-line utility tools allows a attacker to gain access to confidential data.
The vulnerability of the udhcpgetoption function in the networking/udhcp/common.c component of the BusyBox command-line utility tools on UNIX systems is related to reading data from a buffer beyond its allowable limits. Exploiting this vulnerability could allow an attacker to gain access to...
CVE-2026-38754
A flaw was found in Busybox. This vulnerability, a heap overflow, exists within the ifsbreakup function. A remote attacker could exploit this by providing specially crafted input, leading to a Denial of Service DoS condition. This means the affected system or application could become unavailable ...
Astra Linux – Vulnerability in busybox
An out-of-bounds heap read in Busybox’s unlzma applet leads to information leakage and denial of service when LZMA-compressed input is decompressed. This can be triggered by any applet/format that…...
Astra Linux – Vulnerability in busybox
A use-after-free condition in Busybox’s awk applet leads to denial of service and potentially code execution when processing a crafted awk pattern in the nextinputfile function...
Astra Linux – Vulnerability in busybox
There is a stack overflow vulnerability in ash.c:6030 in busybox before version 1.35. In the environment of the Internet of Vehicles, this vulnerability can lead to the execution of arbitrary code from commands...
Astra Linux – Vulnerability in busybox
A use-after-free in Busybox’s awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the getvars function...
Astra Linux – Vulnerability in busybox
A use-after-free in Busybox’s awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the handlespecial function...
Astra Linux – Vulnerability in busybox
A use-after-free condition in Busybox’s awk applet leads to denial of service and potentially code execution when processing a crafted awk pattern in the getvari function...
Astra Linux – Vulnerability in busybox
A use-after-free in Busybox 1.35-x’s awk applet leads to denial of service and potentially code execution when processing a crafted awk pattern in the copyvar function...
Astra Linux – Vulnerability in busybox
Busybox contains a vulnerability related to SSL certificate validation. This vulnerability exists in the “busybox wget” applet, and it can lead to the execution of arbitrary code. This vulnerability appears to be exploitable by simply downloading any file over an HTTPS connection using “busybox...
Astra Linux – Vulnerability in busybox
A use-after-free in Busybox’s awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate function...
Astra Linux – Vulnerability in busybox
The decompressgunzip.c file in BusyBox contains an issue where version 1.32.1 improperly handles the error bit associated with the huftbuild result pointer. This results in an invalid free operation or segmentation fault due to malformed gzip data...
Astra Linux – Vulnerability in busybox
A use-after-free in Busybox’s awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the nvalloc function...
Astra Linux – Vulnerability in busybox
The BusyBox before commit 42202bf contains a heap buffer overflow vulnerability in the DHCPv6 client udhcpc6 DNSSERVERS option handler in the networking/udhcp/d6dhcpc.c file. This vulnerability allows network-adjacent attackers to trigger memory corruption by sending a crafted DHCPv6 response wit...