OESA-2026-3763 busybox security update

The Swiss Army Knife of Embedded Linux Security Fixes: A vulnerability has been found in BusyBox up to 1.30.1. This vulnerability affects unknown code of the file networking/wget.c of the component FEATUREWGETTIMEOUT Handler. Such manipulation of the argument -T leads to null pointer dereference...

geoexplorer

GeoExplorer Client This is the client component of the GeoExplorer project, designed to send requests to GeoServer instances and test for potential vulnerabilities. Requirements Python 3.x Required Python packages install using pip install -r requirements.txt: requests argparse urllib3 Usage Run...

CVE-2016-4971

CVE-2016-4971 On a server redirect from HTTP to a FTP resource, wget would trust the HTTP server and uses the name in the redirected URL as the destination filename. See the post on my blog for some detail. Usage On your server, node wget.js On your test computer, wget http://url.to.your/server...

CVE-2023-30854

WWBN Avideo Authenticated RCE - OS Command Injection CVE-2023-30854 WWBN Avideo sqlFile $objClone-cloneSiteURLvideos/cache/clones/$json-sqlFile"; $log-add"Clone 2 of $totalSteps: Geting MySQL Dump file"; exec$cmd . " 2&1", $output, $returnval; We can control $objClone-cloneSiteURL through the adm...

burp-exporter

Exporter Extension for Burp Suite Community and Pro Follow us to know more about tips and others extensions Description Exporter is a Burp Suite extension to copy a request to a file or the clipboard as multiple programming languages functions. It also adds a tab called Exporter where you can...

CVE-2017-5638_struts

I extended Scott Campbell's script further, made it more complicated : While "HTTPStrutsAttack" will stop 100% of the recon, there was still miniscule chance that if a scanner hits a vulnerable system, even though we'd block the scanner, vulnerable system might still do the wget included in the...

pipe_finder

Pipe Finder 1.0 Automated script to search in SMB protocol for availables pipe names Screenshots Requirements metasploit-framework wget locate pipeauditv2.rb module https://github.com/peterpt/pipeauditorfb - It will be installed on first run Install Requirements apt-get install metasploit-framewo...

CVE-2016-4971

CVE-2016-4971 CVE-2016-4971 Wget 1.18/1.14-13.el7 Client Exploit Wget 1.18 Arbitrary File Upload Exploit AND Wget 1.14-13.el7 Arbitrary File Upload Exploit Modifications by: mbadanoiu Original Exploit Dawid Golunski dawid at legalhackers.com...

Emat

Emat Emat is an advanced scraping tool designed to collect email accounts from platforms like Gmail, Yahoo, Hotmail, and government email services. However, it's crucial to emphasize that the script should only be used for educational purposes and not for any abusive or unethical activities. To...

CVE-2026-29954

KubePlus ResourceComposition ChartURL SSRF + Header Injection This vulnerability exists in the ResourceComposition resource handling component of KubePlus, allowing an attacker with Provider privileges to access internal services via SSRF by crafting a malicious chartURL parameter, and inject...

Updated wget packages fix a security vulnerability

Denial of Service in GNU wget. CVE-2026-16599...

MGASA-2026-0386 Updated wget packages fix a security vulnerability

Denial of Service in GNU wget. CVE-2026-16599...

ManageEngine Desktop Central Java Deserialization

Zoho ManageEngine Desktop Central before 10.0.474 is vulnerable to a deserialization of untrusted data, which permits remote code execution. id: CVE-2020-10189 info: name: ManageEngine Desktop Central Java Deserialization author: king-alexander severity: critical description: | Zoho ManageEngine...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: wget (UTSA-2026-106779)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-106779 advisory. GNU Wget through 1.25.0, fixed in commit 37a40fc, contains a heap buffer underread vulnerability in the cleanmetalinkstring function within src/metalink.c that allow...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: wget (UTSA-2026-106776)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-106776 advisory. GNU Wget through 1.25.0, fixed in commit dd692d9, contains a heap buffer overflow vulnerability in the htmlquotestring function in src/convert.c that allows a remote...

CVE-2026-76014

A flaw was found in BusyBox. A local attacker can exploit a null pointer dereference vulnerability in the FEATUREWGETTIMEOUT handler within the networking/wget.c component. This occurs when the attacker manipulates the -T argument, leading to a denial of service. Mitigation Mitigation for this...

Security update for wget

This update for wget fixes the following issue: CVE-2026-16599: server-controlled unbounded MD5 loop in FTP OPIE bsc1276962. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternatively you can run the comman...

CVE-2024-26581-Checker

CVE-2024-26581 Vulnerability Checker for BGN Internal Requirements Bash. Wget. Installation Make sure to download and place the tool in the /opt/ directory. Download the tool source code by running the command: sudo wget...

EulerOS 2.0 SP12 : wget (EulerOS-SA-2026-3319)

According to the versions of the wget packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : GNU Wget through 1.25.0, fixed in commit c2640fe, contains a heap buffer overflow vulnerability in the convertfname function within src/url.c that...

CVE-2025-60876

CVE-2025-60876: busybox wget request-target injection fix A behavior-preserving fix for CVE-2025-60876, an HTTP header-injection vulnerability in BusyBox wget, plus the proof-of-concept that demonstrates it and the artifacts for submitting the fix upstream to BusyBox. The vulnerability BusyBox wg...