Log4ShellAuditor

🤖 AUTO AUDIT Isolated demonstration testbed of an autonomous reflexive executor agent Go/Java Русский 🇷🇺 • English 🇬🇧 • 中文 🇨🇳 • Español 🇪🇸 • Deutsch 🇩🇪 • Italiano 🇮🇹 • العربية 🇸🇦 🧭 Overview !NOTE AUTO AUDIT is a software suite demonstrating a 100% autonomous closed loop Sense-Think-Act for...

golang-x-text

Go Text This repository holds supplementary Go packages for text processing, many involving Unicode. CLDR Versioning It is important that the Unicode version used in x/text matches the one used by your Go compiler. The x/text repository supports multiple versions of Unicode and will match the...

github-endpoints

github-endpoints Find endpoints on GitHub. Description This Go tool performs searches on GitHub and parses the results to find endpoints of a given domain. Install go install github.com/gwen001/github-endpoints@latest or git clone https://github.com/gwen001/github-endpoints cd github-endpoints go...

WP Go Maps < 10.0.10 - Unauthenticated Marker Information Disclosure

WP Go Maps WordPress plugin 10.0.10 contains an information disclosure vulnerability caused by lack of approval-state filtering on the public single-marker REST endpoint, letting unauthenticated users access unapproved marker records including PII and geographic coordinates, exploit requires no...

WP Go Maps (formerly WP Google Maps) < 9.0.29 - Cross-Site Scripting

The WP Go Maps formerly WP Google Maps plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the map id parameter in all versions up to, and including, 9.0.28 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to...

WP Go Maps <= 9.0.29 - Cross-Site Scripting

WP Go Maps formerly WP Google Maps plugin for WordPress versions before 9.0.30 is vulnerable to Reflected Cross-Site Scripting via the 'mapid' parameter in the admin map edit page. id: CVE-2024-29931 info: name: WP Go Maps = 9.0.29 - Cross-Site Scripting author: Shivam Kamboj severity: medium...

IBAX - SQL Injection

IBAX go-ibax functionality is susceptible to SQL injection via the file /api/v2/open/rowsInfo. The manipulation of the argument tablename leads to SQL injection, and the attack may be launched remotely. An attacker can potentially obtain sensitive information, modify data, and/or execute...

SIS Informatik REWE GO SP17 <7.7 - Cross-Site Scripting

SIS Informatik REWE GO SP17 before 7.7 contains a cross-site scripting vulnerability via rewe/prod/web/index.php affected parameters are config, version, win, db, pwd, and user and /rewe/prod/web/rewegocheck.php version and all other parameters. id: CVE-2021-31537 info: name: SIS Informatik REWE ...

WordPress WP Go Maps < 10.0.10 - Unauthenticated Marker Data Disclosure

WP Go Maps WordPress plugin 10.0.10 contains an information disclosure vulnerability caused by improper enforcement of marker approval filter in admin-ajax fallback for datatables route, letting unauthenticated visitors retrieve unapproved marker records. id: CVE-2026-8385 info: name: WordPress W...

struts-rce-cve-2017-9805

描述 针对 CVE 2017-9805 的 Apache Struts RCE 工具 选项 u：目标 URL； c：将在易受攻击的目标上执行的命令； f：使用目标列表自动检测 RCE（每行一个目标）； p：指定本地监听端口——与 f 选项配合使用——（默认：8080） 用法 go run main.go -u target -c command go run main.go -f filename go run main.go -f filename -p port...

CVE-2024-27316

CVE-2024-27316 I decided to call this vulnerability specifically "CVE-2024-27316" since I have tested it against this vulnerability. The underlying flaw effects other CVEs so I thought I'd mention those with the hope that others could test and modify this PoC : This PoC currently only works again...

CLEANSTART-2026-RO34985 gRPC-Go is the Go language implementation of gRPC

CVE-2026-84304 affects multiple packages. gRPC-Go is the Go language implementation of gRPC. See references for individual vulnerability details...

CLEANSTART-2026-BM76577 Loop with Unreachable Exit Condition ('Infinite Loop') vulnerability in Apache Thrift Python, Go, PHP and Java bindings

CVE-2026-43871 affects multiple packages. Loop with Unreachable Exit Condition 'Infinite Loop' vulnerability in Apache Thrift Python, Go, PHP and Java bindings. See references for individual vulnerability details...

CLEANSTART-2026-HI18999 OpenTelemetry-Go is the Go implementation of OpenTelemetry

Security vulnerability affects the temporal-server package. OpenTelemetry-Go is the Go implementation of OpenTelemetry...

CLEANSTART-2026-YK14292 OpenTelemetry-Go is the Go implementation of OpenTelemetry

Security vulnerability affects the temporal-server package. OpenTelemetry-Go is the Go implementation of OpenTelemetry...

CLEANSTART-2026-XK97843 HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023

Security vulnerability affects the go package. The HTTP/2 protocol allows a denial of service server resource consumption because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023...

CLEANSTART-2026-GU78315 OpenTelemetry-Go is the Go implementation of OpenTelemetry

Security vulnerability affects the grafana-alloy package. OpenTelemetry-Go is the Go implementation of OpenTelemetry...

CLEANSTART-2026-MX93537 OpenTelemetry-Go is the Go implementation of OpenTelemetry

Security vulnerability affects the grafana-alloy package. OpenTelemetry-Go is the Go implementation of OpenTelemetry...

httprobe

httprobe Toma una lista de dominios y prueba si hay servidores http y https funcionando. Instalación ▶ go install github.com/tomnomnom/httprobe@latest Uso Básico httprobe acepta dominios delimitados por líneas en stdin: ▶ cat recon/example/domains.txt example.com example.edu example.net ▶ cat...

capability-sdk

Capability SDK Shared Go SDK for building security capabilities for the Guard platform. Packages pkg/capability - Capability Interface Defines the standardized interface that security scanners implement. Types: // Target - what a capability scans type Target struct Type TargetType // domain, ip,...