pipe_finder

Pipe Finder 1.0 Automated script to search in SMB protocol for availables pipe names Screenshots Requirements metasploit-framework wget locate pipeauditv2.rb module https://github.com/peterpt/pipeauditorfb - It will be installed on first run Install Requirements apt-get install metasploit-framewo...

burp-exporter

Exporter Extension for Burp Suite Community and Pro Follow us to know more about tips and others extensions Description Exporter is a Burp Suite extension to copy a request to a file or the clipboard as multiple programming languages functions. It also adds a tab called Exporter where you can...

CVE-2023-30854

WWBN Avideo Authenticated RCE - OS Command Injection CVE-2023-30854 WWBN Avideo sqlFile $objClone-cloneSiteURLvideos/cache/clones/$json-sqlFile"; $log-add"Clone 2 of $totalSteps: Geting MySQL Dump file"; exec$cmd . " 2&1", $output, $returnval; We can control $objClone-cloneSiteURL through the adm...

CVE-2016-4971

CVE-2016-4971 CVE-2016-4971 Wget 1.18/1.14-13.el7 Client Exploit Wget 1.18 Arbitrary File Upload Exploit AND Wget 1.14-13.el7 Arbitrary File Upload Exploit Modifications by: mbadanoiu Original Exploit Dawid Golunski dawid at legalhackers.com...

CVE-2017-5638_struts

I extended Scott Campbell's script further, made it more complicated : While "HTTPStrutsAttack" will stop 100% of the recon, there was still miniscule chance that if a scanner hits a vulnerable system, even though we'd block the scanner, vulnerable system might still do the wget included in the...

SUSE CVE-2026-124747

A flaw was found in BusyBox. When resuming a download over File Transfer Protocol FTP, the wget utility fails to verify that the resume offset does not exceed the file size reported by the server, resulting in an integer calculation error. A malicious FTP server or an on-path network attacker can...

geoexplorer

GeoExplorer Client This is the client component of the GeoExplorer project, designed to send requests to GeoServer instances and test for potential vulnerabilities. Requirements Python 3.x Required Python packages install using pip install -r requirements.txt: requests argparse urllib3 Usage Run...

CVE-2017-13089

CVE-2017-13089 wget v1.19.1 for exploit dev. NOTE This is not a working exploit - under development. Usage Build the container docker build -t cve201713089 . OR ... docker pull robertcolejensen/cve201713089 Play around in the container, src will be mounted at /opt/CVE-2017-13089/src ./run.sh...

CVE-2026-29954

KubePlus ResourceComposition ChartURL SSRF + Header Injection This vulnerability exists in the ResourceComposition resource handling component of KubePlus, allowing an attacker with Provider privileges to access internal services via SSRF by crafting a malicious chartURL parameter, and inject...

CVE-2026-124747

A flaw was found in BusyBox. When resuming a download over File Transfer Protocol FTP, the wget utility fails to verify that the resume offset does not exceed the file size reported by the server, resulting in an integer calculation error. A malicious FTP server or an on-path network attacker can...

CVE-2026-124747

A flaw was found in BusyBox. When resuming a download over File Transfer Protocol FTP, the wget utility fails to verify that the resume offset does not exceed the file size reported by the server, resulting in an integer calculation error. A malicious FTP server or an on-path network attacker can...

EUVD-2026-121042

A flaw was found in BusyBox. When resuming a download over File Transfer Protocol FTP, the wget utility fails to verify that the resume offset does not exceed the file size reported by the server, resulting in an integer calculation error. A malicious FTP server or an on-path network attacker can...

CVE-2026-124747 Busybox: heap buffer overflow in wget ftp resume when the resume offset exceeds the reported file size

A flaw was found in BusyBox. When resuming a download over File Transfer Protocol FTP, the wget utility fails to verify that the resume offset does not exceed the file size reported by the server, resulting in an integer calculation error. A malicious FTP server or an on-path network attacker can...

CVE-2026-124747

A flaw exists in BusyBox where the wget utility fails to validate that a resume offset does not exceed the file size reported by an FTP server. This oversight leads to an integer calculation error when resuming downloads over File Transfer Protocol (FTP) . A malicious FTP server or an on-path net...

CVE-2026-124747

A flaw was found in BusyBox. When resuming a download over File Transfer Protocol FTP, the wget utility fails to verify that the resume offset does not exceed the file size reported by the server, resulting in an integer calculation error. A malicious FTP server or an on-path network attacker can...

CVE-2016-4971

CVE-2016-4971 On a server redirect from HTTP to a FTP resource, wget would trust the HTTP server and uses the name in the redirected URL as the destination filename. See the post on my blog for some detail. Usage On your server, node wget.js On your test computer, wget http://url.to.your/server...

CVE-2024-26581-Checker

CVE-2024-26581 Vulnerability Checker for BGN Internal Requirements Bash. Wget. Installation Make sure to download and place the tool in the /opt/ directory. Download the tool source code by running the command: sudo wget...

PT-2026-141614

A flaw was found in BusyBox. When resuming a download over File Transfer Protocol FTP, the wget utility fails to verify that the resume offset does not exceed the file size reported by the server, resulting in an integer calculation error. A malicious FTP server or an on-path network attacker can...

CVE-2026-124747: Red Hat: A flaw was found in BusyBox

A flaw was found in BusyBox. When resuming a download over File Transfer Protocol FTP, the wget utility fails to verify that the resume offset does not exceed the file size reported by the server, resulting in an integer calculation error. A malicious FTP server or an on-path network attacker can...

CVE-2025-60876

CVE-2025-60876: busybox wget request-target injection fix A behavior-preserving fix for CVE-2025-60876, an HTTP header-injection vulnerability in BusyBox wget, plus the proof-of-concept that demonstrates it and the artifacts for submitting the fix upstream to BusyBox. The vulnerability BusyBox wg...