pipe_finder

Pipe Finder 1.0 Automated script to search in SMB protocol for availables pipe names Screenshots Requirements metasploit-framework wget locate pipeauditv2.rb module https://github.com/peterpt/pipeauditorfb - It will be installed on first run Install Requirements apt-get install metasploit-framewo...

geoexplorer

GeoExplorer Client This is the client component of the GeoExplorer project, designed to send requests to GeoServer instances and test for potential vulnerabilities. Requirements Python 3.x Required Python packages install using pip install -r requirements.txt: requests argparse urllib3 Usage Run...

burp-exporter

Exporter Extension for Burp Suite Community and Pro Follow us to know more about tips and others extensions Description Exporter is a Burp Suite extension to copy a request to a file or the clipboard as multiple programming languages functions. It also adds a tab called Exporter where you can...

CVE-2025-60876

CVE-2025-60876: busybox wget request-target injection fix A behavior-preserving fix for CVE-2025-60876, an HTTP header-injection vulnerability in BusyBox wget, plus the proof-of-concept that demonstrates it and the artifacts for submitting the fix upstream to BusyBox. The vulnerability BusyBox wg...

CVE-2017-5638_struts

I extended Scott Campbell's script further, made it more complicated : While "HTTPStrutsAttack" will stop 100% of the recon, there was still miniscule chance that if a scanner hits a vulnerable system, even though we'd block the scanner, vulnerable system might still do the wget included in the...

CVE-2024-26581-Checker

CVE-2024-26581 Vulnerability Checker for BGN Internal Requirements Bash. Wget. Installation Make sure to download and place the tool in the /opt/ directory. Download the tool source code by running the command: sudo wget...

CVE-2023-30854

WWBN Avideo Authenticated RCE - OS Command Injection CVE-2023-30854 WWBN Avideo sqlFile $objClone-cloneSiteURLvideos/cache/clones/$json-sqlFile"; $log-add"Clone 2 of $totalSteps: Geting MySQL Dump file"; exec$cmd . " 2&1", $output, $returnval; We can control $objClone-cloneSiteURL through the adm...

CVE-2017-13089

CVE-2017-13089 wget v1.19.1 for exploit dev. NOTE This is not a working exploit - under development. Usage Build the container docker build -t cve201713089 . OR ... docker pull robertcolejensen/cve201713089 Play around in the container, src will be mounted at /opt/CVE-2017-13089/src ./run.sh...

CVE-2016-4971

CVE-2016-4971 On a server redirect from HTTP to a FTP resource, wget would trust the HTTP server and uses the name in the redirected URL as the destination filename. See the post on my blog for some detail. Usage On your server, node wget.js On your test computer, wget http://url.to.your/server...

CVE-2016-4971

CVE-2016-4971 CVE-2016-4971 Wget 1.18/1.14-13.el7 Client Exploit Wget 1.18 Arbitrary File Upload Exploit AND Wget 1.14-13.el7 Arbitrary File Upload Exploit Modifications by: mbadanoiu Original Exploit Dawid Golunski dawid at legalhackers.com...

openSUSE 16 Security Update : wget (openSUSE-SU-2026:22011-1)

The remote openSUSE 16 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2026:22011-1 advisory. This update for wget fixes the following issue: - CVE-2026-16599: server-controlled unbounded MD5 loop in FTP OPIE bsc1276962. Tenable has extracted the...

CVE-2026-29954

KubePlus ResourceComposition ChartURL SSRF + 헤더 주입 이 취약점은 KubePlus의 ResourceComposition 리소스 처리 구성 요소에 존재하며, Provider 권한을 가진 공격자가 악의적인 chartURL 매개변수를 조작하여 SSRF를 통해 내부 서비스를 접근하고, wget 명령어 주입을 통해 임의의 HTTP 요청 헤더를 주입할 수 있습니다. 이를 통해 공격자는 특정 헤더를 요구하는 클라우드 메타데이터 서비스예: GCP는 Metadata-Flavor: Google 헤더 필요에...

CLEANSTART-2026-PC86081 GNU Wget before 1

Security vulnerability affects the wget package. GNU Wget before 1...

CLEANSTART-2026-RQ35898 set_file_metadata in xattr

Security vulnerability affects the wget package. setfilemetadata in xattr...

Rocky Linux 10.2 [CIQ] Security Update: wget / wget-debuginfo / wget-debugsource Multiple Vulnerabilities (crlsa-2026_62142)

The Rocky Linux 10.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202662142 advisory. wget: GNU Wget: Heap buffer overflow via server-supplied filename leads to memory corruption CVE-2026-58471 wget: GNU Wget: Arbitrary code execution or...

Rocky Linux 8 [CIQ] Security Update: wget / wget-debuginfo / wget-debugsource Multiple Vulnerabilities (crlsa-2026_62144)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202662144 advisory. wget: GNU Wget: Memory corruption via crafted Metalink URL CVE-2026-58469 wget: GNU Wget: Heap buffer overflow via server-supplied filename leads to memor...

CentOS Linux 8.4 [TuxCare] Security Update: wget Multiple Vulnerabilities (CENTOS8.4:CLSA-2026:1784035618)

The CentOS Linux 8.4 host has a package installed that is affected by multiple vulnerabilities as referenced in the TuxCare CENTOS8.4:CLSA-2026:1784035618 advisory. - GNU Wget through 1.25.0, fixed in commit 37a40fc, contains a heap buffer underread vulnerability in the cleanmetalinkstring functi...

Linux Distros Unpatched Vulnerability : CVE-2026-74222

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - U-Boot before 2026.10-rc5 contains a use-after-free vulnerability in the httpcrecvcb function within the lwIP wget implementation. When HTTP data storage fails,...

Rocky Linux 8 [CIQ] Security Update: wget / wget-debuginfo / wget-debugsource (crlsa-2024_5299)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20245299 advisory. wget: Misinterpretation of input may lead to improper behavior CVE-2024-38428 Tenable has extracted the preceding description block directly from the CIQ security...

AlmaLinux 9.2 [TuxCare] Security Update: wget (ALMALINUX9.2:CLSA-2026:1786488345)

The AlmaLinux 9.2 host has a package installed that is affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1786488345 advisory. - GNU Wget does not validate the IP address provided by an FTP PASV response while operating in FTP passive mode. A malicious FTP server, or ...