smb

SMB Пакет Go для взаимодействия по протоколу SMB. В настоящее время реализован лишь минимальный набор функций для клиентской стороны. Вот пример клиента, который устанавливает сеанс с сервером: root@kitploit: package main import "log" "github.com/stacktitan/smb/smb" func main host :=...

go-pkcs12

패키지 pkcs12 root@kitploit: import "software.sslmate.com/src/go-pkcs12" pkcs12 패키지는 PKCS12P12 또는 PFX라고도 함의 일부를 구현합니다. 이 패키지는 crypto/tls 패키지에서 사용할 DER 인코딩 P12/PFX 파일을 디코딩하고, 새로운 형식을 지원하지 않는 레거시 애플리케이션에서 사용할 P12/PFX 파일을 인코딩하기 위한 것입니다. PKCS12는 취약한 암호화 기본 요소를 사용하므로 새 애플리케이션에는 사용해서는 안 됩니다SHOULD NOT...

PoC-CVE-2019-10743

Zip Slip Демо Этот проект демонстрирует уязвимость Zip Slip CVE-2019-10743 с использованием уязвимой версии пакета mholt/archiver. Что такое Zip Slip? Zip Slip — уязвимость, обнаруженная исследователями безопасности из Snyk. Было выявлено, что уязвимость затрагивает множество пакетов, используемы...

jsteg

jsteg root@kitploit: go get lukechampine.com/jsteg jsteg — это пакет для сокрытия данных внутри jpeg-файлов, метод, известный как стеганография. Это достигается копированием каждого бита данных в наименее значимые биты изображения. Объем скрываемых данных зависит от размера файла jpeg; на каждый...

sploit

sploit Sploit is a Go package that aids in binary analysis and exploitation. The motivating factor behind the development of sploit is to be able to have a well designed API with functionality that rivals some of the more common Python exploit development frameworks while taking advantage of the ...

sploit

sploit Sploit — это Go-пакет, помогающий в бинарном анализе и эксплуатации. Основной движущей силой разработки sploit является создание хорошо спроектированного API с функциональностью, сопоставимой с некоторыми распространёнными фреймворками для разработки эксплойтов на Python, но с использовани...

GHSA-7VC5-9278-236P vulnerabilities

Vulnerabilities for packages: grafana...

Photon OS 5.0: Go PHSA-2026-5.0-91-0960

An update of the go package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-91-0960. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Linux Distros Unpatched Vulnerability : CVE-2025-30153

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - kin-openapi is a Go project for handling OpenAPI files. Prior to 0.131.0, when validating a request with a multipart/form-data schema, if the OpenAPI schema...

GO-2022-0619 vulnerabilities

Vulnerabilities for packages: kubeflow...

GO-2022-0784 vulnerabilities

Vulnerabilities for packages: ctop...

OPENSUSE-SU-2026:21432-1 Security update for gh

This update for gh fixes the following issues: Changes in gh: - CVE-2026-39821: reject all-ASCII xn-- Punycode labels in the vendored golang.org/x/net/idna package regardless of Go's unicode.Version boo1266618...

Photon OS 5.0: Go PHSA-2026-5.0-0855

An update of the go package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-0855. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid328957...

golang.org/x/crypto is vulnerable to invoking server panic during CheckHostKey/Authenticate flow

SSH servers which use CertChecker as a public key callback without setting IsUserAuthority or IsHostAuthority could be caused to panic by a client presenting a certificate. CertChecker now returns an error instead of panicking when these callbacks are nil...

GO-2026-5259 Ech0 has Server-Side Request Forgery (SSRF) via Connect Handler fetchPeerConnectInfo in github.com/lin-snow/ech0

Ech0 has Server-Side Request Forgery SSRF via Connect Handler fetchPeerConnectInfo in github.com/lin-snow/ech0...

ROOT-APP-GOBINARY-CVE-2026-33246 CVE-2026-33246 in rootio-github.com/nats-io/nats-server/v2 - Patched by Root

Root has patched CVE-2026-33246 in the rootio-github.com/nats-io/nats-server/v2 package for Root:Go. Multiple fixed versions available...

ROOT-APP-GOBINARY-CVE-2026-33248 CVE-2026-33248 in rootio-github.com/nats-io/nats-server/v2 - Patched by Root

Root has patched CVE-2026-33248 in the rootio-github.com/nats-io/nats-server/v2 package for Root:Go. Multiple fixed versions available...

ROOT-APP-GOBINARY-CVE-2026-42294 CVE-2026-42294 in rootio-github.com/argoproj/argo-workflows/v3 - Patched by Root

Root has patched CVE-2026-42294 in the rootio-github.com/argoproj/argo-workflows/v3 package for Root:Go. Multiple fixed versions available...

MAL-2026-3629 Malicious code in github.com/BufferZoneCorp/net-helper (Go)

--- -= Per source details. Do not edit below this line.=- Source: google-open-source-security a4e4f74e90479d472a307d311d48214827e21cf93ecf9b0b62ff2cb72adb2c9e This package is a malicious packages part of the Go BufferZoneCorp and RubyGems knot-theory clusters. The packages in this cluster steal...

MAL-2026-3625 Malicious code in github.com/BufferZoneCorp/go-stdlog (Go)

--- -= Per source details. Do not edit below this line.=- Source: google-open-source-security a4e4f74e90479d472a307d311d48214827e21cf93ecf9b0b62ff2cb72adb2c9e This package is a malicious packages part of the Go BufferZoneCorp and RubyGems knot-theory clusters. The packages in this cluster steal...