GOSINT

GOSINT - ओपन सोर्स थ्रेट इंटेलिजेंस संग्रह और प्रसंस्करण ढांचा GOSINT ढांचा एक परियोजना है जिसका उपयोग उच्च गुणवत्ता वाले समझौता संकेतकों IOC को एकत्र करने, संसाधित करने और निर्यात करने के लिए किया जाता है। GOSINT एक सुरक्षा विश्लेषक को संरचित और असंरचित थ्रेट इंटेलिजेंस को एकत्र करने और मानकीकृत...

threatest

Threatest Threatest é uma CLI e framework Go para testar detecção de ameaças de ponta a ponta. Threatest permite que você detone uma técnica de ataque e verifique se o alerta esperado foi gerado em sua plataforma de segurança favorita. Leia o post do blog de anúncio:...

cnitch

cnitch cnitch snitch ou container snitch é um framework simples e ferramenta de linha de comando para monitorar contêineres Docker e identificar quaisquer processos que estejam executando como root. Por que isso é ruim? Se você ainda não visitou can I haz non-privileged containers? por mhausenbla...

ehids-agent

Inglês | 中文介绍 Introdução ao eHIDS HIDS demo implementado pela tecnologia do kernel eBPF. Aviso Apenas um DEMO baseado em eBPF, por favor use Tetragon / Tracee / falco em vez disso. Implementações e Funcionalidades: 1. Captura de dados de rede TCP 2. Captura de dados de rede UDP 3. Captura de...

xray

Welcome to xray 👋 A Powerful Security Assessment Tool 🏠 Documentation • ⬇️ Download xray • ⬇️ Download xpoc • ⬇️ Download xapp • 📖 Plugin Repository 中文版 Note: xray is not open source, just download the built binary files directly. The repository mainly contains community-contributed POCs. Each xray...

xpfarm

XPFarm Um scanner de vulnerabilidades de código aberto que agrupa ferramentas de segurança conhecidas atrás de uma única interface web. Índice Seção| Descrição ---|--- Por que| Motivação e filosofia por trás do XPFarm Ferramentas Integradas| As 10 ferramentas de código aberto orquestradas pelo...

CVE-2026-44332

Fiber is an Express inspired web framework written in Go. Prior to 3.3.0, the default Authorizer function in the BasicAuth middleware in middleware/basicauth/config.go uses short-circuit evaluation that skips password hash comparison for non-existent usernames, enabling reliable remote username...

Iris 安全漏洞

Iris is a fast, simple, yet fully functional and highly efficient Go web framework developed under the DFIR-IRIS open source project. Versions of IRIS prior to 2.4.28 contained security vulnerabilities; these vulnerabilities stemmed from the use of the HTTP GET method to alter server state, makin...

PT-2026-21803

Name of the Vulnerable Software and Affected Versions Fiber versions prior to 3.1.0 Description The use of the fiber flash cookie can lead to an unbounded allocation on any server. A specially crafted 10-character cookie value triggers an attempt to allocate up to 85GB of memory through unvalidat...

EUVD-2021-1002

Malware in sbrugna...

EUVD-2023-2708

Malicious code in bioql PyPI...

SUSE CVE-2025-48075

Fiber is an Express-inspired web framework written in Go. Starting in version 2.52.6 and prior to version 2.52.7, fiber.Ctx.BodyParser can map flat data to nested slices using keyidxvalue syntax, but when idx is negative, it causes a panic instead of returning an error stating it cannot process t...

net/http: Denial of service due to improper 100-continue handling in net/http

A flaw was found in Go. The net/http module mishandles specific server responses from HTTP/1.1 client requests. This issue may render a connection invalid and cause a denial of service...

gf_cms 信任管理问题漏洞

gfcms is a GoFrameV2 based web content management system by demozx individual developer. A trust management issue vulnerability exists in gfcms version 1.0 and 1.0.1, which stems from an issue with the use of hard-coded credentials in the internal/logic/auth/auth.go page of the JWT Authentication...

Beego 路径遍历漏洞

Beego is an open source web framework based on the Go language. A security vulnerability exists in Beego v2.0.3 and earlier versions, which stems from the use of path.join by the leafInfo.match function to handle wildcardValues, which may lead to cross-directory risks...

Beego 后置链接漏洞

Beego is an open source web framework based on the Go language. A security vulnerability in the file profile.go for the function MemProf in Beego 2.0.2 allows attackers to locally launch a symbolic link attack...