CVE-2026-107213 Excelize: Nil-pointer dereference in GetSlicers when a worksheet has extLst present but no drawing element

Excelize is a Go language library for reading and writing Microsoft Excel spreadsheets. From 2.9.0 to 2.11.0, GetSlicers checks for ExtLst but dereferences ws.Drawing without checking whether the independently optional drawing element exists. File.GetSlicers reads ws.Drawing.RID after seeing a...

CVE-2026-107213 Excelize: Nil-pointer dereference in GetSlicers when a worksheet has extLst present but no drawing element

Excelize is a Go language library for reading and writing Microsoft Excel spreadsheets. From 2.9.0 to 2.11.0, GetSlicers checks for ExtLst but dereferences ws.Drawing without checking whether the independently optional drawing element exists. File.GetSlicers reads ws.Drawing.RID after seeing a...

CVE-2026-107212 Excelize: Unbounded row number in Rows.Columns makes GetRows and the Rows iterator loop for days

Excelize is a Go language library for reading and writing Microsoft Excel spreadsheets. From 2.1.0 to 2.11.0, Rows.Columns accepts a look-ahead row number above TotalRows without applying the limit enforced by Rows.Next. File.GetRows relies on Rows.Next and Rows.Columns, but Rows.Columns consumes...

CVE-2026-107212 Excelize: Unbounded row number in Rows.Columns makes GetRows and the Rows iterator loop for days

Excelize is a Go language library for reading and writing Microsoft Excel spreadsheets. From 2.1.0 to 2.11.0, Rows.Columns accepts a look-ahead row number above TotalRows without applying the limit enforced by Rows.Next. File.GetRows relies on Rows.Next and Rows.Columns, but Rows.Columns consumes...

CVE-2026-107212 Excelize: Unbounded row number in Rows.Columns makes GetRows and the Rows iterator loop for days

Excelize is a Go language library for reading and writing Microsoft Excel spreadsheets. From 2.1.0 to 2.11.0, Rows.Columns accepts a look-ahead row number above TotalRows without applying the limit enforced by Rows.Next. File.GetRows relies on Rows.Next and Rows.Columns, but Rows.Columns consumes...

CVE-2026-107211 Excelize: Unchecked pivot-cache field index in extractPivotTableFields causes unrecoverable panic

Excelize is a Go language library for reading and writing Microsoft Excel spreadsheets. From 2.8.1 to 2.11.0, separately parsed pivot-table field indices are used to index the pivot-cache field-name slice without bounds checks. extractPivotTableFields uses getPivotCacheFieldsName output while...

CVE-2026-107211 Excelize: Unchecked pivot-cache field index in extractPivotTableFields causes unrecoverable panic

Excelize is a Go language library for reading and writing Microsoft Excel spreadsheets. From 2.8.1 to 2.11.0, separately parsed pivot-table field indices are used to index the pivot-cache field-name slice without bounds checks. extractPivotTableFields uses getPivotCacheFieldsName output while...

CVE-2026-107211 Excelize: Unchecked pivot-cache field index in extractPivotTableFields causes unrecoverable panic

Excelize is a Go language library for reading and writing Microsoft Excel spreadsheets. From 2.8.1 to 2.11.0, separately parsed pivot-table field indices are used to index the pivot-cache field-name slice without bounds checks. extractPivotTableFields uses getPivotCacheFieldsName output while...

koyane-framework

Koyane-Framework :: kit de forja y análisis de listas de palabras Etapa temprana | | / /| |\ \ / / / \ | \ | || | | || \ / \ | / || || | | || || | | / / | |/ / | | | | \ V / / /\ | | || | | | | |/ // /\ | . . || | | | | || | | || |/ /| |/ / | \ | | | | \ / | || . || | ||| | | / | || |/| || |...

PT-2026-107643

Name of the Vulnerable Software and Affected Versions Excelize versions 2.1.0 through 2.11.0 Description This issue occurs when the library processes a crafted worksheet containing an oversized row number following a valid row. The Rows.Columns function accepts a look-ahead row number that exceed...

PT-2026-107647

Name of the Vulnerable Software and Affected Versions Excelize versions 2.8.1 through 2.11.0 Description In the Excelize Go library, the ANCHORARRAY function recursively calls the exported CalcCellValue function. This process creates a new calculation context at each cycle, which bypasses iterati...

PT-2026-107642

Name of the Vulnerable Software and Affected Versions Excelize versions 2.8.1 through 2.11.0 Description This issue occurs when separately parsed pivot-table field indices are used to index the pivot-cache field-name slice without bounds checks. The extractPivotTableFields function uses the outpu...

PT-2026-107646

Name of the Vulnerable Software and Affected Versions Excelize versions 2.3.1 through 2.11.0 Description The extractPart function allocates a byte slice using a CFB directory-entry size provided by the user before validating the sector chain or size domain. Specifically, the function trusts the...

CLEANSTART-2026-UP81071 Integer Overflow or Wraparound vulnerability in Apache Thrift TFramedTransport Go language implementation This issue affects Apache Thrift: before 0

Security vulnerability affects the temporal-server package. Integer Overflow or Wraparound vulnerability in Apache Thrift TFramedTransport Go language implementation This issue affects Apache Thrift: before 0...

CVE-2018-6574

CVE-2018-6574 CVE-2018-6574 go get RCE...

CVE-2023-4966

CVE-2023-4966 CitrixBleed Programa para explotar aplicaciones Citrix con un rango de direcciones IP Así es como lo compilas para Windows, macOS o Linux GOOS=windows GOARCH=amd64 go build -o citrix citrix.go GOOS=darwin GOARCH=amd64 go build -o citrix.exe citrix.go GOOS=linux GOARCH=amd64 go build...

Next.js-Exploit-Tool

Next.js-Exploit-Tool Herramienta integral de explotación con interfaz gráfica para Next.js. Introducción Una herramienta independiente de evaluación de seguridad para CVE-2025-55182 , desarrollada en Go, que ofrece una interfaz gráfica GUI para realizar rápidamente detección y verificación de...

Astra Linux – Vulnerability in Golang-1.19, Golang-1.23

A discrepancy in how Go and C/C++ comments are parsed allowed for code to be smuggled into the resulting cgo binary...

endsfuzzer

endsfuzzer endsfuzzer es una herramienta simple utilizada para fuzzear una lista de dominios en busca de endpoints específicos. Revisará todos los dominios de una lista para un solo endpoint, luego pasará al siguiente endpoint a revisar. Características Rápido. Hace uso de go routines. Más suave...

CVE-2023-23752

Binaries for CVE-2023-23752 For ethical and educational purposes only 😉 Usage CVE-2023-23752 -u http://someserverexample.com Build from source Go If you have Go installed, do: git clone https://github.com/gunzf0x/CVE-2023-23752.git cd CVE-2023-23752 go run main.go -u http://someserverexample.com...