384 matches found
CVE-2018-6574
CVE-2018-6574 Passos para reproduzir: 1. Crie um arquivo .c contendo o comando malicioso revshell: root@kitploit: include include static void malicious attributeconstructor; void malicious system""; 2. Compile-o usando GCC. Você deve compilá-lo exatamente na mesma arquitetura e SO do alvo por...
Go-Get-RCE-CVE-2018-6574-POC
CVE-2018-6574 POC COLLEGAMENTI https://nvd.nist.gov/vuln/detail/CVE-2018-6574 http://blog.nsfocus.net/cve-2018-6574/ ESECUZIONE root@kitploit: go get github.com/neargle/CVE-2018-6574-POC DETTAGLI Il payload si trova in: https://github.com/neargle/CVE-2018-6574-POC/blob/master/calc.cL10 Ora, grazi...
CVE-2024-24787-PoC
CVE-2024-24787-PoC Su Darwin, la costruzione di un modulo Go che contiene CGO può innescare l'esecuzione arbitraria di codice quando si utilizza la versione Apple di ld, a causa dell'uso del flag -ltolibrary in una direttiva "cgo LDFLAGS". Non è un mio bug, ho solo creato un PoC per esso...
CVE-2018-6574
CVE-2018-6574 POC Exploit POC pour CVE-2018-6574 Compilation 1. Créez un fichier d'exploit avec le contenu suivant : root@kitploit: include include static void malicious attributeconstructor; void malicious system"COMMAND"; 2. Compilez-le : root@kitploit: gcc -shared -o exploit.so -fPIC exploit.c...
net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME
A flaw was found in the net package of Go golang, specifically when using the LookupCNAME function with the cgo DNS resolver. A remote attacker could exploit this by providing a very long Canonical Name CNAME response. This can trigger a double-free of C memory, leading to a crash and a Denial of...
net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME
A flaw was found in the net package of Go golang, specifically when using the LookupCNAME function with the cgo DNS resolver. A remote attacker could exploit this by providing a very long Canonical Name CNAME response. This can trigger a double-free of C memory, leading to a crash and a Denial of...
net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME
A flaw was found in the net package of Go golang, specifically when using the LookupCNAME function with the cgo DNS resolver. A remote attacker could exploit this by providing a very long Canonical Name CNAME response. This can trigger a double-free of C memory, leading to a crash and a Denial of...
net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME
A flaw was found in the net package of Go golang, specifically when using the LookupCNAME function with the cgo DNS resolver. A remote attacker could exploit this by providing a very long Canonical Name CNAME response. This can trigger a double-free of C memory, leading to a crash and a Denial of...
Astra Linux - Vulnerability in Golang-1.19
The go command may generate unexpected code during build time when using cgo. This can lead to unexpected behavior when running a Go program that uses cgo. This issue may occur when running a trusted module that contains directories with newline characters in their names. Modules retrieved using...
CVE-2018-6574
CVE-2018-6574 Exploit für die Remote-Ausführung von Befehlen im Golang-Befehl go get. Einleitung Wenn Sie ein Paket mit go get abrufen, ist Go so konzipiert, dass es das Paket erstellt und installiert, ohne dabei Code daraus auszuführen. Die Idee ist, dass Sie Go-Pakete sicher abrufen, erstellen...
net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME
A flaw was found in the net package of Go golang, specifically when using the LookupCNAME function with the cgo DNS resolver. A remote attacker could exploit this by providing a very long Canonical Name CNAME response. This can trigger a double-free of C memory, leading to a crash and a Denial of...
net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME
A flaw was found in the net package of Go golang, specifically when using the LookupCNAME function with the cgo DNS resolver. A remote attacker could exploit this by providing a very long Canonical Name CNAME response. This can trigger a double-free of C memory, leading to a crash and a Denial of...
GO-2024-2901 vulnerabilities
Vulnerabilities for packages: ollama...
GO-2026-4312 vulnerabilities
Vulnerabilities for packages: datadog-agent...
GO-2026-4775 vulnerabilities
Vulnerabilities for packages: caddy...
GO-2026-4338 vulnerabilities
Vulnerabilities for packages: external-dns, crossplane-provider-aws-s3, kubernetes-dashboard-metrics-scraper, kbld, go-jsonnet, nri-f5, spire-server, kubernetes-csi-driver-nfs, cosign, falcosidekick, nginx-prometheus-exporter, dask-gateway, crossplane-provider-aws-ec2, dockerize,...
net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME
A flaw was found in the net package of Go golang, specifically when using the LookupCNAME function with the cgo DNS resolver. A remote attacker could exploit this by providing a very long Canonical Name CNAME response. This can trigger a double-free of C memory, leading to a crash and a Denial of...
net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME
A flaw was found in the net package of Go golang, specifically when using the LookupCNAME function with the cgo DNS resolver. A remote attacker could exploit this by providing a very long Canonical Name CNAME response. This can trigger a double-free of C memory, leading to a crash and a Denial of...
net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME
A flaw was found in the net package of Go golang, specifically when using the LookupCNAME function with the cgo DNS resolver. A remote attacker could exploit this by providing a very long Canonical Name CNAME response. This can trigger a double-free of C memory, leading to a crash and a Denial of...
net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME
A flaw was found in the net package of Go golang, specifically when using the LookupCNAME function with the cgo DNS resolver. A remote attacker could exploit this by providing a very long Canonical Name CNAME response. This can trigger a double-free of C memory, leading to a crash and a Denial of...