Lucene search
+L

77 matches found

Kitploit
Kitploit
•added 2026/10/17 12:21 p.m.•28 views

Openbsd-Privilege-Escalation

Openbsd-Privilege-Escalation A Script that automates the process of escalating privileges on openbsd system CVE-2019-19520 by exploiting the xlock binary and againing it's sgid and escalating to the root user by CVE-2019-19522 exploiting the privileges of auth group and adding keys to the Skey or...

7.8CVSS7.9AI score0.01347EPSS
SaveExploits5
osv_oesa
osv_oesa
•added 2026/09/20 1:23 p.m.•18 views

OESA-2026-3910 wget security update

GNU Wget is a free software package for retrieving files using HTTP, HTTPS, FTP and FTPS the most widely-used Internet protocols. It is a non-interactive commandline tool, so it may easily be called from scripts, cron jobs, terminals without X-Windows support, etc. Security Fixes: GNU wget is...

5.1CVSS5.7AI score0.00375EPSS
SaveExploits0References2
osv_oesa
osv_oesa
•added 2026/09/14 4:34 p.m.•24 views

OESA-2026-3768 wget security update

GNU Wget is a free software package for retrieving files using HTTP, HTTPS, FTP and FTPS the most widely-used Internet protocols. It is a non-interactive commandline tool, so it may easily be called from scripts, cron jobs, terminals without X-Windows support, etc. Security Fixes: GNU wget is...

5.1CVSS5.7AI score0.00375EPSS
SaveExploits0References2
SUSE CVE
SUSE CVE
•added 2026/08/27 12:30 a.m.•17 views

SUSE CVE-2026-16599

GNU wget is vulnerable to denial of service in its FTP OPIE/S-KEY authentication functionality. The server-supplied sequence number from the FTP challenge line is used as an iteration count for an MD5 key-derivation loop without any upper bound validation. A malicious FTP server or a network...

4.3CVSS5.8AI score0.00375EPSS
SaveExploits0References10
Tenable Nessus
Tenable Nessus
•added 2026/08/26 12:00 a.m.•18 views

Linux Distros Unpatched Vulnerability : CVE-2026-16599

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GNU wget is vulnerable to denial of service in its FTP OPIE/S-KEY authentication functionality. The server-supplied sequence number from the FTP challenge line ...

5.1CVSS5.7AI score0.00375EPSS
SaveExploits0References4
NVD
NVD
•added 2026/08/25 3:16 p.m.•18 views

CVE-2026-16599

GNU wget is vulnerable to denial of service in its FTP OPIE/S-KEY authentication functionality. The server-supplied sequence number from the FTP challenge line is used as an iteration count for an MD5 key-derivation loop without any upper bound validation. A malicious FTP server or a network...

5.1CVSS0.00375EPSS
SaveExploits0References3
osv_debian
osv_debian
•added 2026/08/25 3:16 p.m.•18 views

DEBIAN-CVE-2026-16599

GNU wget is vulnerable to denial of service in its FTP OPIE/S-KEY authentication functionality. The server-supplied sequence number from the FTP challenge line is used as an iteration count for an MD5 key-derivation loop without any upper bound validation. A malicious FTP server or a network...

5.1CVSS5.8AI score0.00375EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve
•added 2026/08/25 3:16 p.m.•44 views

CVE-2026-16599

GNU wget is vulnerable to denial of service in its FTP OPIE/S-KEY authentication functionality. The server-supplied sequence number from the FTP challenge line is used as an iteration count for an MD5 key-derivation loop without any upper bound validation. A malicious FTP server or a network...

5.1CVSS5.8AI score0.00375EPSS
SaveExploits0References2
osv_ubuntu
osv_ubuntu
•added 2026/08/25 3:16 p.m.•18 views

UBUNTU-CVE-2026-16599

GNU wget is vulnerable to denial of service in its FTP OPIE/S-KEY authentication functionality. The server-supplied sequence number from the FTP challenge line is used as an iteration count for an MD5 key-derivation loop without any upper bound validation. A malicious FTP server or a network...

5.1CVSS5.8AI score0.00375EPSS
SaveExploits0References3
osv_cve
osv_cve
•added 2026/08/25 2:17 p.m.•18 views

CVE-2026-16599 Denial of Service in GNU wget

GNU wget is vulnerable to denial of service in its FTP OPIE/S-KEY authentication functionality. The server-supplied sequence number from the FTP challenge line is used as an iteration count for an MD5 key-derivation loop without any upper bound validation. A malicious FTP server or a network...

5.1CVSS5.6AI score
SaveExploits0References6
Debian CVE
Debian CVE
•added 2026/08/25 2:17 p.m.•19 views

CVE-2026-16599

GNU wget is vulnerable to denial of service in its FTP OPIE/S-KEY authentication functionality. The server-supplied sequence number from the FTP challenge line is used as an iteration count for an MD5 key-derivation loop without any upper bound validation. A malicious FTP server or a network...

5.1CVSS5.8AI score0.00375EPSS
SaveExploits0
Mend
Mend
•added 2026/08/25 2:17 p.m.•9 views

CVE-2026-16599

GNU wget is vulnerable to denial of service in its FTP OPIE/S-KEY authentication functionality. The server-supplied sequence number from the FTP challenge line is used as an iteration count for an MD5 key-derivation loop without any upper bound validation. A malicious FTP server or a network...

5.1CVSS5.8AI score0.00375EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/25 12:00 a.m.•7 views

CVE-2026-16599: Unchecked Input for Loop Condition

GNU wget is vulnerable to denial of service in its FTP OPIE/S-KEY authentication functionality. The server-supplied sequence number from the FTP challenge line is used as an iteration count for an MD5 key-derivation loop without any upper bound validation. A malicious FTP server or a network...

5.1CVSS5.8AI score0.00375EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•18 views

EUVD-2013-4183

Malware in sbrugna...

2.1CVSS5.8AI score0.00318EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•18 views

EUVD-2001-1150

Malware in sbrugna...

7.5CVSS6.4AI score0.01191EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2025/08/24 12:00 a.m.•12 views

Linux Distros Unpatched Vulnerability : CVE-2007-2243

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - OpenSSH 4.6 and earlier, when ChallengeResponseAuthentication is enabled, allows remote attackers to determine the existence of user accounts by attempting to...

5CVSS7.3AI score0.02405EPSS
SaveExploits1References2
RedhatCVE
RedhatCVE
•added 2025/05/22 6:46 a.m.•19 views

CVE-2019-19522

OpenBSD 6.6, in a non-default configuration where S/Key or YubiKey authentication is enabled, allows local users to become root by leveraging membership in the auth group. This occurs because root's file can be written to /etc/skey or /var/db/yubikey, and need not be owned by root...

7.8CVSS6.8AI score0.00468EPSS
SaveExploits4References1
SUSE CVE
SUSE CVE
•added 2023/02/15 6:12 a.m.•15 views

SUSE CVE-2007-2243

OpenSSH 4.6 and earlier, when ChallengeResponseAuthentication is enabled, allows remote attackers to determine the existence of user accounts by attempting to authenticate via S/KEY, which displays a different response if the user account exists, a similar issue to CVE-2001-1483...

5CVSS8.2AI score0.02405EPSS
SaveExploits1References4
OpenVAS
OpenVAS
•added 2021/05/27 12:00 a.m.•64 views

OpenSSH < 4.7 Improper Authentication Vulnerabilities

OpenSSH is prone to multiple improper authentication vulnerabilities. SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

5CVSS6.6AI score0.08615EPSS
SaveExploits1References3
Tenable Nessus
Tenable Nessus
•added 2020/01/06 12:00 a.m.•50 views

OpenBSD 6.6 Multiple Authentication Bypass Vulnerabilities

Binary data openbsdauthbypass.nbin...

9.8CVSS8AI score0.02736EPSS
SaveExploits9References6
Rows per page
Query Builder