GOSINT

GOSINT - Framework Open Source per la Raccolta e l'Elaborazione di Threat Intelligence Il framework GOSINT è un progetto utilizzato per raccogliere, elaborare ed esportare indicatori di compromissione IOC di alta qualità. GOSINT consente a un analista della sicurezza di raccogliere e standardizza...

threatest

Threatest Threatest è un CLI e un framework Go per testare end-to-end il rilevamento delle minacce. Threatest ti permette di detonare una tecnica di attacco e verificare che sia stato generato l'avviso previsto nella tua piattaforma di sicurezza preferita. Leggi l'articolo di annuncio sul blog:...

cnitch

cnitch cnitch snitch o container snitch è un semplice framework e strumento a riga di comando per monitorare i container Docker e identificare eventuali processi in esecuzione come root. Perché è una cosa negativa? Se non sei ancora stato su can I haz non-privileged containers? di mhausenblas ti...

ehids-agent

Englisch | 中文介绍 Einführung in eHIDS HIDS-Demo implementiert mit eBPF-Kernel-Technologie. Warnung Nur eine eBPF-basierte DEMO, bitte verwenden Sie stattdessen Tetragon / Tracee / falco. Implementierungen und Funktionen: 1. Erfassung von TCP-Netzwerkdaten 2. Erfassung von UDP-Netzwerkdaten 3...

xray

Welcome to xray 👋 A Powerful Security Assessment Tool 🏠 Documentation • ⬇️ Download xray • ⬇️ Download xpoc • ⬇️ Download xapp • 📖 Plugin Repository 中文版 Note: xray is not open source, just download the built binary files directly. The repository mainly contains community-contributed POCs. Each xray...

xpfarm

XPFarm Ein Open-Source-Schwachstellenscanner, der bekannte Open-Source-Sicherheitstools hinter einer einheitlichen Web-Benutzeroberfläche bündelt. Index Abschnitt| Beschreibung ---|--- Warum| Motivation und Philosophie hinter XPFarm Eingebundene Tools| Die 10 Open-Source-Tools, die von XPFarm...

CVE-2026-44332

Fiber is an Express inspired web framework written in Go. Prior to 3.3.0, the default Authorizer function in the BasicAuth middleware in middleware/basicauth/config.go uses short-circuit evaluation that skips password hash comparison for non-existent usernames, enabling reliable remote username...

Iris 安全漏洞

Iris is a fast, simple, yet fully functional and highly efficient Go web framework developed under the DFIR-IRIS open source project. Versions of IRIS prior to 2.4.28 contained security vulnerabilities; these vulnerabilities stemmed from the use of the HTTP GET method to alter server state, makin...

PT-2026-21803

Name of the Vulnerable Software and Affected Versions Fiber versions prior to 3.1.0 Description The use of the fiber flash cookie can lead to an unbounded allocation on any server. A specially crafted 10-character cookie value triggers an attempt to allocate up to 85GB of memory through unvalidat...

EUVD-2021-1002

Malware in sbrugna...

EUVD-2023-2708

Malicious code in bioql PyPI...

SUSE CVE-2025-48075

Fiber is an Express-inspired web framework written in Go. Starting in version 2.52.6 and prior to version 2.52.7, fiber.Ctx.BodyParser can map flat data to nested slices using keyidxvalue syntax, but when idx is negative, it causes a panic instead of returning an error stating it cannot process t...

net/http: Denial of service due to improper 100-continue handling in net/http

A flaw was found in Go. The net/http module mishandles specific server responses from HTTP/1.1 client requests. This issue may render a connection invalid and cause a denial of service...

gf_cms 信任管理问题漏洞

gfcms is a GoFrameV2 based web content management system by demozx individual developer. A trust management issue vulnerability exists in gfcms version 1.0 and 1.0.1, which stems from an issue with the use of hard-coded credentials in the internal/logic/auth/auth.go page of the JWT Authentication...

Beego 路径遍历漏洞

Beego is an open source web framework based on the Go language. A security vulnerability exists in Beego v2.0.3 and earlier versions, which stems from the use of path.join by the leafInfo.match function to handle wildcardValues, which may lead to cross-directory risks...

Beego 后置链接漏洞

Beego is an open source web framework based on the Go language. A security vulnerability in the file profile.go for the function MemProf in Beego 2.0.2 allows attackers to locally launch a symbolic link attack...