witchcraft

Your OPSEC companion. Run witchcraft help or witchcraft manual for the complete manual What it's about? WitchcraftFEX Are much more than a simple hacking script, is a cyberdeck toolkit built for runners who dive deep into the net. A shell and automation's and automation's engine for pentesting,...

busybox: Divide-by-zero in the volume_id FAT prober via a zero sectors_per_cluster value

A flaw was found in BusyBox. The volume identification component fails to properly validate cluster parameters when analyzing specially formatted FAT filesystems. An attacker able to present a crafted storage device or disk image can trigger a divide-by-zero condition when partition scanning...

busybox: busybox: udhcpc integer underflow in DHCP packet length calculation causes denial of service

A flaw was found in BusyBox's udhcpc DHCP client. When processing raw DHCP packets, the client replaces the validated packet length with an attacker-controlled value from the IP header without re-validating the minimum size. This leads to an integer underflow when subtracting header sizes, causin...

Moderate: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: busybox: busybox-1:1.37.0-9.5.hum1 aarch64, s390x, x8664 busybox-petitboot-1:1.37.0-9.5.hum1 aarch64, s390x, x8664 busybox-shared-1:1.37.0-9.5.hum1 aarch64, s390x, x8664...

research

Security Research Repository dedicated to my security vulnerability discoveries CVEs. This repository contains detailed technical documentation, proof-of-concept exploits, and analysis of discovered vulnerabilities. About This repository aggregates all CVEs I have discovered and researched,...

CVE-2026-124743

A flaw was found in BusyBox. When processing filesystem metadata, the volume identification component does not properly validate header values in HFS+ filesystems. An attacker able to attach a storage device or supply a specially crafted filesystem image can trigger an application crash, resultin...

CVE-2026-124745

A flaw was found in BusyBox. When extracting an archive, the tar utility improperly resolves deferred hardlink targets across symbolic links pointing outside the intended extraction directory. An attacker could provide a specially crafted archive that links to sensitive files outside the extracti...

UBUNTU-CVE-2026-124744

A flaw was found in BusyBox. When extracting files using the cpio utility with path traversal protection enabled, hardlink target paths are not properly sanitized. By tricking a user or automated process into extracting a crafted archive, an attacker can create hardlinks that point to files outsi...

UBUNTU-CVE-2026-124741

A flaw was found in BusyBox. The udhcpc6 DHCPv6 client does not properly validate the size of network options sent by a server before copying them into memory. A malicious DHCPv6 server on the local network can exploit this flaw by sending a crafted reply, triggering a stack-based buffer overflow...

UBUNTU-CVE-2026-124745

A flaw was found in BusyBox. When extracting an archive, the tar utility improperly resolves deferred hardlink targets across symbolic links pointing outside the intended extraction directory. An attacker could provide a specially crafted archive that links to sensitive files outside the extracti...

UBUNTU-CVE-2026-124746

A flaw was found in BusyBox. An integer overflow occurs in the volumeid component when calculating buffer boundaries while probing filesystem metadata. An attacker can exploit this vulnerability by providing a specially crafted filesystem image on an attached storage device. When probed by...

UBUNTU-CVE-2026-124737

A flaw was found in BusyBox. When the TFTP Trivial File Transfer Protocol client requests a custom small block size and receives a standard response, it falls back to the default block size without resizing the allocated memory buffer. A malicious TFTP server can exploit this issue by sending...

CVE-2026-124741

A flaw was found in BusyBox. The udhcpc6 DHCPv6 client does not properly validate the size of network options sent by a server before copying them into memory. A malicious DHCPv6 server on the local network can exploit this flaw by sending a crafted reply, triggering a stack-based buffer overflow...

CVE-2026-124746

A flaw was found in BusyBox. An integer overflow occurs in the volumeid component when calculating buffer boundaries while probing filesystem metadata. An attacker can exploit this vulnerability by providing a specially crafted filesystem image on an attached storage device. When probed by...

CVE-2026-124738

A flaw was found in BusyBox. When the HTTP daemon httpd has pre-compressed file support enabled, authentication checks are evaluated only against the requested URL path rather than the pre-compressed file being served. A remote attacker can exploit this flaw by requesting an uncompressed file pat...

CVE-2026-124747

A flaw was found in BusyBox. When resuming a download over File Transfer Protocol FTP, the wget utility fails to verify that the resume offset does not exceed the file size reported by the server, resulting in an integer calculation error. A malicious FTP server or an on-path network attacker can...

UBUNTU-CVE-2026-124739

A flaw was found in BusyBox. When the httpd web server processes subdirectory configuration files, an overly long index page name can trigger a stack-based buffer overflow. An attacker with permissions to write to a subdirectory configuration file could exploit this vulnerability to execute...

UBUNTU-CVE-2026-124742

A flaw was found in BusyBox. The volume identification component fails to properly validate cluster parameters when analyzing specially formatted FAT filesystems. An attacker able to present a crafted storage device or disk image can trigger a divide-by-zero condition when partition scanning...

UBUNTU-CVE-2026-124747

A flaw was found in BusyBox. When resuming a download over File Transfer Protocol FTP, the wget utility fails to verify that the resume offset does not exceed the file size reported by the server, resulting in an integer calculation error. A malicious FTP server or an on-path network attacker can...

UBUNTU-CVE-2026-124743

A flaw was found in BusyBox. When processing filesystem metadata, the volume identification component does not properly validate header values in HFS+ filesystems. An attacker able to attach a storage device or supply a specially crafted filesystem image can trigger an application crash, resultin...