POC_CVE-2025-69194

CVE-2025-69194: GNU Wget2 路径遍历漏洞 📝 描述 CVE-2025-69194 的 PoC，这是一个影响 GNU Wget2 = 2.2.0（已在 v1.99.1 上验证）的严重路径遍历漏洞。攻击者通过提供包含恶意 file name 属性的 Metalink 文件，可在受害者文件系统上实现任意文件写入或覆盖。 当 Wget2 使用 --force-metalink 选项处理 Metalink 文件时，未能正确清理目录遍历序列（例如 ../../）。若攻击者覆盖敏感系统文件（如...

Wget2: arbitrary file write via metalink path traversal in gnu wget2

...

MGASA-2026-0002 Updated wget2 packages fix security vulnerability

Arbitrary File Write via Metalink Path Traversal in GNU Wget2. CVE-2025-69194...

AZL-73904 CVE-2025-69195 affecting package wget for versions less than 2.1.0-7

A flaw was found in GNU Wget2. This vulnerability, a stack-based buffer overflow, occurs in the filename sanitization logic when processing attacker-controlled URL paths, particularly when filename restriction options are active. A remote attacker can exploit this by providing a specially crafted...

CVE-2025-69195

A flaw was found in GNU Wget2. This vulnerability, a stack-based buffer overflow, occurs in the filename sanitization logic when processing attacker-controlled URL paths, particularly when filename restriction options are active. A remote attacker can exploit this by providing a specially crafted...

CVE-2025-69195

A flaw was found in GNU Wget2. This vulnerability, a stack-based buffer overflow, occurs in the filename sanitization logic when processing attacker-controlled URL paths, particularly when filename restriction options are active. A remote attacker can exploit this by providing a specially crafted...

CVE-2025-69194

A security issue was discovered in GNU Wget2 when handling Metalink documents. The application fails to properly validate file paths provided in Metalink elements. An attacker can abuse this behavior to write files to unintended locations on the system. This can lead to data loss or potentially...

CVE-2025-69195: Stack-based Buffer Overflow

A flaw was found in GNU Wget2. This vulnerability, a stack-based buffer overflow, occurs in the filename sanitization logic when processing attacker-controlled URL paths, particularly when filename restriction options are active. A remote attacker can exploit this by providing a specially crafted...

CVE-2025-69194: Improper Limitation of a Pathname to a Restricted Directory

A security issue was discovered in GNU Wget2 when handling Metalink documents. The application fails to properly validate file paths provided in Metalink elements. An attacker can abuse this behavior to write files to unintended locations on the system. This can lead to data loss or potentially...

Exploit for CVE-2025-69194

CVE-2025-69194: GNU Wget2 Path Traversal Vulnerability 📝 D...

wget2: undisclosed vulnerability (ZAI-2026-CH7M65)

Not disclosed. Details are not yet publicly disclosed...

wget2/wget_options_fuzzer: Stack-buffer-overflow in _compare_tag

Project: https://gitlab.com/gnuwget/wget2.git Detailed report: https://oss-fuzz.com/testcase?key=5670699290591232 Project: wget2 Fuzzer: libFuzzerwget2wgetoptionsfuzzer Fuzz target binary: wgetoptionsfuzzer Job Type: libfuzzerasanwget2 Platform Id: linux Crash Type: Stack-buffer-overflow READ 8...