1842 matches found
CVE-2014-0196
参见 https://vulners.com/cve/CVE-2014-0196...
witchcraft
🎉 你的OPSEC伴侣。运行witchcraft help或witchcraft manual（获取完整手册）🎉 它能做什么？ WITCHCRAFT不仅仅是一个简单的别名，它是一个初始化系统，可以与busybox、shell和自动化引擎配合使用，用于黑客、OSINT、取证等。 名称 witchcraft - 一款多功能的网络安全工具包。 概要 witchcraft MODULENAME OPTION... FILE... IP... 描述 WITCHCRAFT...
research
Investigación de Seguridad Repositorio dedicado a mis descubrimientos de vulnerabilidades de seguridad CVEs. Este repositorio contiene documentación técnica detallada, exploits de prueba de concepto y análisis de las vulnerabilidades descubiertas. Acerca de Este repositorio agrupa todos los CVEs...
CVE-2026-76014
A flaw was found in BusyBox. A local attacker can exploit a null pointer dereference vulnerability in the FEATUREWGETTIMEOUT handler within the networking/wget.c component. This occurs when the attacker manipulates the -T argument, leading to a denial of service. Mitigation Mitigation for this...
CVE-2025-60876
CVE-2025-60876：busybox wget 请求目标注入修复 针对 BusyBox wget 中 HTTP 标头注入漏洞 CVE-2025-60876 的行为保持型修复，附带演示该漏洞的概念验证（PoC），以及用于向上游 BusyBox 提交修复的工件。 漏洞详情 BusyBox wget 会将 URL 路径和查询字符串逐字复制到 HTTP 请求行中。携带原始 CR 0x0D、LF 0x0A 或其他控制字节的 URL 可以拆分请求行并注入攻击者控制的标头。空格 0x20 也有同样的效果：它会破坏 METHOD SP request-target SP HTTP/1.1 的帧结...
The vulnerability of the udhcp_getoption() function in the networking/udhcp/common.c component of the BusyBox command-line utility tools allows a attacker to gain access to confidential data.
The vulnerability of the udhcpgetoption function in the networking/udhcp/common.c component of the BusyBox command-line utility tools on UNIX systems is related to reading data from a buffer beyond its allowable limits. Exploiting this vulnerability could allow an attacker to gain access to...
CVE-2026-38754
A flaw was found in Busybox. This vulnerability, a heap overflow, exists within the ifsbreakup function. A remote attacker could exploit this by providing specially crafted input, leading to a Denial of Service DoS condition. This means the affected system or application could become unavailable ...
Astra Linux – Vulnerability in busybox
There is a stack overflow vulnerability in ash.c:6030 in busybox before version 1.35. In the environment of the Internet of Vehicles, this vulnerability can lead to the execution of arbitrary code from commands...
Astra Linux – Vulnerability in busybox
An out-of-bounds heap read in Busybox’s unlzma applet leads to information leakage and denial of service when LZMA-compressed input is decompressed. This can be triggered by any applet/format that…...
Astra Linux – Vulnerability in busybox
A use-after-free condition in Busybox’s awk applet leads to denial of service and potentially code execution when processing a crafted awk pattern in the nextinputfile function...
Astra Linux – Vulnerability in busybox
A use-after-free in Busybox’s awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the getvars function...
Astra Linux – Vulnerability in busybox
A use-after-free in Busybox’s awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the handlespecial function...
Astra Linux – Vulnerability in busybox
A use-after-free condition in Busybox’s awk applet leads to denial of service and potentially code execution when processing a crafted awk pattern in the getvari function...
Astra Linux – Vulnerability in busybox
A use-after-free in Busybox 1.35-x’s awk applet leads to denial of service and potentially code execution when processing a crafted awk pattern in the copyvar function...
Astra Linux – Vulnerability in busybox
Busybox contains a vulnerability related to SSL certificate validation. This vulnerability exists in the “busybox wget” applet, and it can lead to the execution of arbitrary code. This vulnerability appears to be exploitable by simply downloading any file over an HTTPS connection using “busybox...
Astra Linux – Vulnerability in busybox
A use-after-free in Busybox’s awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate function...
Astra Linux – Vulnerability in busybox
A use-after-free in Busybox’s awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the nvalloc function...
Astra Linux – Vulnerability in busybox
The BusyBox before commit 42202bf contains a heap buffer overflow vulnerability in the DHCPv6 client udhcpc6 DNSSERVERS option handler in the networking/udhcp/d6dhcpc.c file. This vulnerability allows network-adjacent attackers to trigger memory corruption by sending a crafted DHCPv6 response wit...
