EUVD-2026-94534

Excelize ANCHORARRAY: mutually-referencing array formulas recurse unboundedly via re-entrant CalcCellValue, causing a fatal stack overflow...

CVE-2026-31431

CopyFail CVE-2026-31431 in Go implementiert, Viel Spaß...

CVE-2020-10199

CVE-2020-10199 Früher, während einer PT, bin ich auf eine Zielumgebung gestoßen, in der ein Nexus Repository Manager eingerichtet war. Nach ein paar Stolpersteinen habe ich schließlich doch eine Shell bekommen. Ich halte das kurz als Notiz fest, damit ich es in Zukunft leichter nachschlagen kann...

Security Bulletin: Go-getter vulnerable to a path traversal in S3/GCS directory download handling

Summary HashiCorp go-getter versions before 1.8.10 and go-getter/v2 versions before 2.2.5 are vulnerable to path traversal during S3 and GCS directory downloads, which may allow files to be written outside the requested destination. This vulnerability CVE-2026-19585 is fixed in go-getter 1.8.10 a...

CVE-2026-19585

HashiCorp go-getter versions before 1.8.10 and go-getter/v2 versions before 2.2.5 are vulnerable to path traversal during S3 and GCS directory downloads, which may allow files to be written outside the requested destination. This vulnerability CVE-2026-19585 is fixed in go-getter 1.8.10 and...

go-zeek-broker-ws

Libreria Go per l'interfaccia websocket di Zeek Broker Questa libreria implementa l'interfaccia websocket di Zeek Broker. Vengono fornite funzioni helper con corrispondenze ragionevoli tra i tipi Zeek e Go. Utilizzo La libreria contiene due pacchetti: encoding encoding modella la struttura dati...

CVE-2026-42533-nginx

CVE-2026-42533 nginx Questo repository contiene uno scanner basato su Go per identificare pattern di configurazione nginx associati al problema di capture-clobbering in due passaggi di complexvalue descritto in CVE-2026-42533. Panoramica Lo strumento analizza file e directory di configurazione...

google.golang.org/grpc: gRPC-Go: Denial of Service via malformed RPC requests

A flaw was found in gRPC-Go. Servers created with xds.NewGRPCServer can be exploited by a remote client sending a malformed RPC request that lacks the required :authority or Host headers. This can trigger an index-out-of-bounds panic, leading to the termination of the entire server process and a...

Important: Red Hat Security Advisory: rhc security update

An update for rhc is now available for Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is availab...

google.golang.org/grpc: gRPC-Go: Denial of Service via malformed RPC requests

A flaw was found in gRPC-Go. Servers created with xds.NewGRPCServer can be exploited by a remote client sending a malformed RPC request that lacks the required :authority or Host headers. This can trigger an index-out-of-bounds panic, leading to the termination of the entire server process and a...

google.golang.org/grpc: gRPC-Go: Denial of Service via malformed RPC requests

A flaw was found in gRPC-Go. Servers created with xds.NewGRPCServer can be exploited by a remote client sending a malformed RPC request that lacks the required :authority or Host headers. This can trigger an index-out-of-bounds panic, leading to the termination of the entire server process and a...

go-cpe

go-cpe Una libreria Go per CPE Common Platform Enumeration 2.3 go-cpe è un'implementazione degli algoritmi di Naming e Matching del CPE, come descritto nei NIST IR 7695 e 7696. Per l'implementazione Java di riferimento, vedi:...

crtsh

crtsh Client API per crt.sh crtsh consente di ottenere le informazioni su un sito web HTTPS. es. Cerca sottodomini. Questo strumento utilizza i log di Certificate Transparency. Per maggiori informazioni, consulta https://crt.sh/ Esempio Sottodomini Cerca i sottodomini di example.com Organizzazion...

go-mal-pkgs

go-mal-pkgs Uno strumento di sicurezza per rilevare pacchetti Go dannosi verificando i checksum in go.sum rispetto al codice sorgente originale, bypassando la cache del Go Module Proxy. Panoramica Questo strumento aiuta a proteggere da attacchi alla supply chain che sfruttano la cache del Go Modu...

FUCKER

FUCKER Framework di penetration testing nativo Windows scritto in Go. Architettura modulare con motore decisionale basato su AI API compatibile con OpenAI. Compilazione go build -ldflags="-X main.version=$git describe --tags" -o FUCKER.exe ./cmd/fucker/ Cross-compilazione: GOOS=linux GOARCH=amd64...

chart-down

chart-down Scarica e analizza i chart Helm alla ricerca di segreti usando TruffleHog. Data l'URL di un repository Helm, chart-down recupera l'indice del repository, scarica ogni archivio chart, lo estrae ed esegue TruffleHog sul contenuto. Requisiti Go 1.19+ TruffleHog nel PATH brew install...

CVE-2026-19585 Go-getter vulnerable to a path traversal in S3/GCS directory download handling

HashiCorp go-getter versions before 1.8.10 and go-getter/v2 versions before 2.2.5 are vulnerable to path traversal during S3 and GCS directory downloads, which may allow files to be written outside the requested destination. This vulnerability CVE-2026-19585 is fixed in go-getter 1.8.10 and...

EUVD-2026-95078

HashiCorp go-getter versions before 1.8.10 and go-getter/v2 versions before 2.2.5 are vulnerable to path traversal during S3 and GCS directory downloads, which may allow files to be written outside the requested destination. This vulnerability CVE-2026-19585 is fixed in go-getter 1.8.10 and...

CVE-2026-19585 Go-getter vulnerable to a path traversal in S3/GCS directory download handling

HashiCorp go-getter versions before 1.8.10 and go-getter/v2 versions before 2.2.5 are vulnerable to path traversal during S3 and GCS directory downloads, which may allow files to be written outside the requested destination. This vulnerability CVE-2026-19585 is fixed in go-getter 1.8.10 and...

CVE-2026-19585

HashiCorp go-getter versions before 1.8.10 and go-getter/v2 versions before 2.2.5 are vulnerable to path traversal during S3 and GCS directory downloads, which may allow files to be written outside the requested destination. This vulnerability CVE-2026-19585 is fixed in go-getter 1.8.10 and...