CVE-2018-6574

CVE-2018-6574 POC Exploit-POC für CVE-2018-6574 Kompilieren 1. Erstelle eine Exploit-Datei mit folgendem Inhalt: root@kitploit: include include static void malicious attributeconstructor; void malicious system"COMMAND"; 2. Kompiliere sie: root@kitploit: gcc -shared -o exploit.so -fPIC exploit.c 3...

CVE-2024-24787-PoC

CVE-2024-24787-PoC Su Darwin, la costruzione di un modulo Go che contiene CGO può innescare l'esecuzione arbitraria di codice quando si utilizza la versione Apple di ld, a causa dell'uso del flag -ltolibrary in una direttiva "cgo LDFLAGS". Non è un mio bug, ho solo creato un PoC per esso...

CVE-2018-6574

CVE-2018-6574 पुनरुत्पादन के चरण: 1. एक .c फ़ाइल बनाएँ जिसमें दुर्भावनापूर्ण कमांड revshell हो: root@kitploit: include include static void malicious attributeconstructor; void malicious system""; 2. इसे GCC का उपयोग करके संकलित करें। आपको इसे लक्ष्य के समान आर्किटेक्चर और OS पर संकलित करना होगा...

Go-Get-RCE-CVE-2018-6574-POC

CVE-2018-6574 POC LINKS https://nvd.nist.gov/vuln/detail/CVE-2018-6574 http://blog.nsfocus.net/cve-2018-6574/ RUN root@kitploit: go get github.com/neargle/CVE-2018-6574-POC DETAILS Payload unter: https://github.com/neargle/CVE-2018-6574-POC/blob/master/calc.cL10 Jetzt wird durch die CGO-Funktion...

CVE-2018-6574

CVE-2018-6574 Exploit für die Remote-Ausführung von Befehlen im Golang-Befehl go get. Einleitung Wenn Sie ein Paket mit go get abrufen, ist Go so konzipiert, dass es das Paket erstellt und installiert, ohne dabei Code daraus auszuführen. Die Idee ist, dass Sie Go-Pakete sicher abrufen, erstellen...

net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME

A flaw was found in the net package of Go golang, specifically when using the LookupCNAME function with the cgo DNS resolver. A remote attacker could exploit this by providing a very long Canonical Name CNAME response. This can trigger a double-free of C memory, leading to a crash and a Denial of...

net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME

A flaw was found in the net package of Go golang, specifically when using the LookupCNAME function with the cgo DNS resolver. A remote attacker could exploit this by providing a very long Canonical Name CNAME response. This can trigger a double-free of C memory, leading to a crash and a Denial of...

GO-2024-2901 vulnerabilities

Vulnerabilities for packages: ollama...

GO-2026-4312 vulnerabilities

Vulnerabilities for packages: datadog-agent...

GO-2026-4775 vulnerabilities

Vulnerabilities for packages: caddy...

GO-2026-4338 vulnerabilities

Vulnerabilities for packages: newrelic-infra-operator, crossplane-provider-aws-dynamodb, gostatsd, rabbitmq-default-user-credential-updater, govulncheck, rancher-loglevel, protoc-gen-go, timescaledb-tune, gatekeeper, kubernetes-dns-node-cache, fluxcd-kustomize-mutating-webhook, tetragon,...

net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME

A flaw was found in the net package of Go golang, specifically when using the LookupCNAME function with the cgo DNS resolver. A remote attacker could exploit this by providing a very long Canonical Name CNAME response. This can trigger a double-free of C memory, leading to a crash and a Denial of...

net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME

A flaw was found in the net package of Go golang, specifically when using the LookupCNAME function with the cgo DNS resolver. A remote attacker could exploit this by providing a very long Canonical Name CNAME response. This can trigger a double-free of C memory, leading to a crash and a Denial of...

net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME

A flaw was found in the net package of Go golang, specifically when using the LookupCNAME function with the cgo DNS resolver. A remote attacker could exploit this by providing a very long Canonical Name CNAME response. This can trigger a double-free of C memory, leading to a crash and a Denial of...

net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME

A flaw was found in the net package of Go golang, specifically when using the LookupCNAME function with the cgo DNS resolver. A remote attacker could exploit this by providing a very long Canonical Name CNAME response. This can trigger a double-free of C memory, leading to a crash and a Denial of...

net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME

A flaw was found in the net package of Go golang, specifically when using the LookupCNAME function with the cgo DNS resolver. A remote attacker could exploit this by providing a very long Canonical Name CNAME response. This can trigger a double-free of C memory, leading to a crash and a Denial of...

net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME

A flaw was found in the net package of Go golang, specifically when using the LookupCNAME function with the cgo DNS resolver. A remote attacker could exploit this by providing a very long Canonical Name CNAME response. This can trigger a double-free of C memory, leading to a crash and a Denial of...

net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME

A flaw was found in the net package of Go golang, specifically when using the LookupCNAME function with the cgo DNS resolver. A remote attacker could exploit this by providing a very long Canonical Name CNAME response. This can trigger a double-free of C memory, leading to a crash and a Denial of...

net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME

A flaw was found in the net package of Go golang, specifically when using the LookupCNAME function with the cgo DNS resolver. A remote attacker could exploit this by providing a very long Canonical Name CNAME response. This can trigger a double-free of C memory, leading to a crash and a Denial of...

EulerOS 2.0 SP15 : golang (EulerOS-SA-2026-2885)

According to the versions of the golang packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : CVE-2026-27142 fixed a vulnerability in which URLs were not correctly escaped inside of a meta tag's content attribute. If the URL content were to...