2002 matches found
CVE-2026-74222
U-Boot before 2026.10-rc5 contains a use-after-free vulnerability in the httpcrecvcb function within the lwIP wget implementation. When HTTP data storage fails, the callback frees the connection PCB but returns ERRBUF instead of ERRABRT, causing the TCP input path to access released memory and...
UBUNTU-CVE-2026-74222
U-Boot before 2026.10-rc5 contains a use-after-free vulnerability in the httpcrecvcb function within the lwIP wget implementation. When HTTP data storage fails, the callback frees the connection PCB but returns ERRBUF instead of ERRABRT, causing the TCP input path to access released memory and...
CVE-2026-74222 U-Boot before 2026.10-rc5 Use-After-Free in lwIP wget Receive Callback
U-Boot before 2026.10-rc5 contains a use-after-free vulnerability in the httpcrecvcb function within the lwIP wget implementation. When HTTP data storage fails, the callback frees the connection PCB but returns ERRBUF instead of ERRABRT, causing the TCP input path to access released memory and...
CVE-2026-74222
U-Boot versions before 2026.10-rc5 are vulnerable to a use-after-free flaw in the httpc_recv_cb() function of the lwIP wget implementation. The vulnerability occurs when HTTP data storage fails: the callback frees the connection PCB but incorrectly returns ERR_BUF instead of ERR_ABRT. This error ...
CVE-2026-74222
U-Boot before 2026.10-rc5 contains a use-after-free vulnerability in the httpcrecvcb function within the lwIP wget implementation. When HTTP data storage fails, the callback frees the connection PCB but returns ERRBUF instead of ERRABRT, causing the TCP input path to access released memory and...
CVE-2026-74222 U-Boot before 2026.10-rc5 Use-After-Free in lwIP wget Receive Callback
U-Boot before 2026.10-rc5 contains a use-after-free vulnerability in the httpcrecvcb function within the lwIP wget implementation. When HTTP data storage fails, the callback frees the connection PCB but returns ERRBUF instead of ERRABRT, causing the TCP input path to access released memory and...
CVE-2026-74222 U-Boot before 2026.10-rc5 Use-After-Free in lwIP wget Receive Callback
U-Boot before 2026.10-rc5 contains a use-after-free vulnerability in the httpcrecvcb function within the lwIP wget implementation. When HTTP data storage fails, the callback frees the connection PCB but returns ERRBUF instead of ERRABRT, causing the TCP input path to access released memory and...
Netcore NR289-GE CVE-2026-101072 Detect
Detects CVE-2026-101072 in Netcore NR289-GE: unauthenticated OS command injection via POST /x.ico/apip.cgi boa .ico auth bypass. The ip parameter is embedded into a wget shell command without validation. Uses a short echo probe when activeprobe is enabled. !/usr/bin/env python3 -- coding: utf-8 -...
ROOT-OS-ALPINE-323-CVE-2026-58471 CVE-2026-58471 in wget - Patched by Root
Root has patched CVE-2026-58471 in the wget package for Root:Alpine:3.23. Multiple fixed versions available...
ROOT-OS-ALPINE-323-CVE-2026-58469 CVE-2026-58469 in wget - Patched by Root
Root has patched CVE-2026-58469 in the wget package for Root:Alpine:3.23. Multiple fixed versions available...
ROOT-OS-ALPINE-323-CVE-2026-58472 CVE-2026-58472 in wget - Patched by Root
Root has patched CVE-2026-58472 in the wget package for Root:Alpine:3.23. Multiple fixed versions available...
ROOT-OS-ALPINE-322-CVE-2026-58469 CVE-2026-58469 in wget - Patched by Root
Root has patched CVE-2026-58469 in the wget package for Root:Alpine:3.22. Multiple fixed versions available...
ROOT-OS-ALPINE-322-CVE-2026-58471 CVE-2026-58471 in wget - Patched by Root
Root has patched CVE-2026-58471 in the wget package for Root:Alpine:3.22. Multiple fixed versions available...
ROOT-OS-ALPINE-322-CVE-2026-58472 CVE-2026-58472 in wget - Patched by Root
Root has patched CVE-2026-58472 in the wget package for Root:Alpine:3.22. Multiple fixed versions available...
CVE-2026-74222: Use After Free
U-Boot before 2026.10-rc5 contains a use-after-free vulnerability in the httpcrecvcb function within the lwIP wget implementation. When HTTP data storage fails, the callback frees the connection PCB but returns ERRBUF instead of ERRABRT, causing the TCP input path to access released memory and...
MAL-2026-17214 Malicious code in git-en-boite-logging (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6ebee9f4428d7f14f6f941438064715c8bece34c5fe6bfedf32bbd8cba226c0 package.json declares a preinstall lifecycle hook that runs wget to a hardcoded webhook.site collector URL...
Malicious code in git-en-boite-logging (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6ebee9f4428d7f14f6f941438064715c8bece34c5fe6bfedf32bbd8cba226c0 package.json declares a preinstall lifecycle hook that runs wget to a hardcoded webhook.site collector URL...
SUSE CVE-2026-94574
A local cross-user code execution vulnerability exists in GNU wget Windows builds from eternallybored.org due to a hardcoded configuration file path C:\msys64 that is writable by unprivileged users, allowing for arbitrary code execution via the useaskpass directive, potentially allowing local...
Emat
Emat Emat is an advanced scraping tool designed to collect email accounts from platforms like Gmail, Yahoo, Hotmail, and government email services. However, it's crucial to emphasize that the script should only be used for educational purposes and not for any abusive or unethical activities. To...
CVE-2026-94574
A flaw was found in GNU wget Windows builds from eternallybored.org. A hardcoded configuration file path is writable by unprivileged users, allowing arbitrary code execution or local privilege escalation via the useaskpass configuration option...