CVE-2018-6574

CVE-2018-6574 Golang go get 명령에서의 원격 명령 실행 익스플로잇. 소개 Go 패키지를 go get으로 가져올 때, Go는 패키지의 어떤 코드도 실행하지 않고 빌드 및 설치하도록 설계되어 있습니다. 의도는 패키지를 전혀 신뢰하지 않고도 안전하게 get, 빌드, 설치할 수 있다는 것입니다. 이론적으로는 Go 툴체인에게 쉬운 작업처럼 보이지만, 실제로는 상당한 도전 과제입니다. go get은 내부적으로 많은 작업을 수행하며, 패키지 설정에 크게 영향을 받는 방식으로 git 및 clang과 같은 서드파티 도구를...

WordPress WP Compiler Plugin <= 1.0.0 - Cross Site Request Forgery (CSRF) Vulnerability

Cross Site Request Forgery CSRF Vulnerability discovered by Nabil Irawan in WordPress Plugin WP Compiler versions = 1.0.0...

CVE-2025-58032

CVE-2025-58032 describes a Cross-Site Request Forgery (CSRF) vulnerability in the WordPress plugin WP Compiler. Affected: WP Compiler versions from 1.0.0 and earlier (n/a through 1.0.0). CVSS 3.1/3.1 shows base score 4.3 (Medium) with network attack vector, low attack complexity, no confidentiali...

CVE-2025-58032 WordPress WP Compiler Plugin <= 1.0.0 - Cross Site Request Forgery (CSRF) Vulnerability

Cross-Site Request Forgery CSRF vulnerability in Bytes.co WP Compiler wp-compiler allows Cross Site Request Forgery.This issue affects WP Compiler: from n/a through = 1.0.0...

Linux Distros Unpatched Vulnerability : CVE-2018-6574

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Go before 1.8.7, Go 1.9.x before 1.9.4, and Go 1.10 pre-releases before Go 1.10rc2 allow go get remote command execution during source code build, by leveraging...

Fedora: Security Advisory for maven-compiler-plugin (FEDORA-2024-129d8ca6fc)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 40 Update: maven-compiler-plugin-3.12.1-3.fc40

The Compiler Plugin is used to compile the sources of your project...

Malicious code in maven-compiler-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 314e6207e1eff2d0ffa8de2edb81458a38f4cb93c6326291fe91105e46f67adf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Moderate: Red Hat Security Advisory: devtoolset-11-annobin security update

An update for devtoolset-11-annobin is now available for Red Hat Software Collections. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

Moderate: Red Hat Security Advisory: annobin security update

An update for annobin is now available for Red Hat Enterprise Linux 8.4 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

Moderate: Red Hat Security Advisory: gcc-toolset-11-annobin security update

An update for gcc-toolset-11-annobin is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

Moderate: Red Hat Security Advisory: gcc-toolset-10-annobin security update

An update for gcc-toolset-10-annobin is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

Moderate: Red Hat Security Advisory: annobin security update

An update for annobin is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...

RLSA-2021:4593 Moderate: annobin security update

Annobin provides a compiler plugin to annotate and tools to examine compiled binary files. Security Fixes: Developer environment: Unicode's bidirectional BiDi override characters can cause trojan source attacks CVE-2021-42574 The following changes were introduced in annobin in order to facilitate...

annobin security update

An update is available for annobin. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Annobin provides a compiler plugin to annotate and tools to examine compiled...

Moderate: annobin security update

Annobin provides a compiler plugin to annotate and tools to examine compiled binary files. Security Fixes: Developer environment: Unicode's bidirectional BiDi override characters can cause trojan source attacks CVE-2021-42574 The following changes were introduced in annobin in order to facilitate...

ALSA-2021:4592 Moderate: gcc-toolset-10-annobin security update

Annobin provides a compiler plugin to annotate and tools to examine compiled binary files. Security Fixes: Developer environment: Unicode's bidirectional BiDi override characters can cause trojan source attacks CVE-2021-42574 The following changes were introduced in annobin in order to facilitate...

Moderate: gcc-toolset-10-annobin security update

Annobin provides a compiler plugin to annotate and tools to examine compiled binary files. Security Fixes: Developer environment: Unicode's bidirectional BiDi override characters can cause trojan source attacks CVE-2021-42574 The following changes were introduced in annobin in order to facilitate...

gcc-toolset-11-annobin security update

An update is available for gcc-toolset-11-annobin. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Annobin provides a compiler plugin to annotate and tools to...

CVE-2016-10635

broccoli-closure is a Closure compiler plugin for Broccoli. broccoli-closure before 1.3.1 downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution RCE by swapping out the requested binary with an attacker controlled binary...