Affected: Alpaquita:23: wget, Alpaquita:stream: wget
Applications that use Wget to access a remote resource using shorthand URLs and pass arbitrary user credentials in the URL are vulnerable. In these cases attackers can enter crafted credentials which will cause Wget to access an arbitrary host.
Applications that use Wget to access a remote resource using shorthand URLs and pass arbitrary user credentials in the URL are vulnerable. In these cases attackers can enter crafted credentials which will cause Wget to access an arbitrary host.
Affected: openEuler:22.03-LTS-SP3: wget, openEuler:20.03-LTS-SP4: wget, openEuler:22.03-LTS-SP1: wget, openEuler:24.03-LTS: wget, openEuler:22.03-LTS-SP4: wget
GNU Wget is a free software package for retrieving files using HTTP, HTTPS, FTP and FTPS the most widely-used Internet protocols. It is a non-interactive commandline tool, so it may easily be called from scripts, cron jobs, terminals without X-Windows support, etc. Security Fix(es): Applications that use Wget to access a remote resource using shorthand URLs and pass arbitrary user credentials in the URL are vulnerable. In these cases attackers can enter crafted credentials which will cause Wget to access an arbitrary host.(CVE-2024-10524)
wget-1.25.0-1.1 on GA media
Security update for wget
Affected: Ubuntu:Pro:14.04:LTS: wget, Ubuntu:Pro:16.04:LTS: wget, Ubuntu:Pro:18.04:LTS: wget, Ubuntu:Pro:20.04:LTS: wget, Ubuntu:22.04:LTS: wget, Ubuntu:24.04:LTS: wget, Ubuntu:25.10: wget
Applications that use Wget to access a remote resource using shorthand URLs and pass arbitrary user credentials in the URL are vulnerable. In these cases attackers can enter crafted credentials which will cause Wget to access an arbitrary host.
Coreutils: heap overflow in split --line-bytes with very long lines Unprivileged overlay + shiftfs read access Nano: running `chmod` and `chown` on the filename allows malicious user to replace the emergency file with a malicious symlink to a root-owned file SSL_select_next_proto buffer overread Remote Code Execution in pypa/setuptools
Ein entfernter, anonymer Angreifer kann eine Schwachstelle in wget ausnutzen, um Sicherheitsvorkehrungen zu umgehen und Informationen offenzulegen.