POC_CVE-2025-69194

CVE-2025-69194: GNU Wget2 路径遍历漏洞 📝 描述 CVE-2025-69194 的 PoC，这是一个影响 GNU Wget2 = 2.2.0（已在 v1.99.1 上验证）的严重路径遍历漏洞。攻击者通过提供包含恶意 file name 属性的 Metalink 文件，可在受害者文件系统上实现任意文件写入或覆盖。 当 Wget2 使用 --force-metalink 选项处理 Metalink 文件时，未能正确清理目录遍历序列（例如 ../../）。若攻击者覆盖敏感系统文件（如...

Mageia: Security Advisory (MGASA-2026-0002)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Updated wget2 packages fix security vulnerability

Arbitrary File Write via Metalink Path Traversal in GNU Wget2. CVE-2025-69194...

MGASA-2026-0002 Updated wget2 packages fix security vulnerability

Arbitrary File Write via Metalink Path Traversal in GNU Wget2. CVE-2025-69194...

libwget4-2.2.1-1.1 on GA media (moderate)

libwget4-2.2.1-1.1 on GA media Announcement ID: openSUSE-SU-2026:10015-1 Rating: moderate Cross-References: CVE-2025-69194 CVE-2025-69195 Affected Products: openSUSE Tumbleweed An update that solves 2 vulnerabilities can now be installed. Description: These are all security issues fixed in the...

Exploit for CVE-2025-69194

CVE-2025-69194: GNU Wget2 Path Traversal Vulnerability 📝 D...

Linux Distros Unpatched Vulnerability : CVE-2025-69194

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A security issue was discovered in GNU Wget2 when handling Metalink documents. The application fails to properly validate file paths provided in Metalink...