openSUSE 16 Security Update : distribution (openSUSE-SU-2026:22010-1)

The remote openSUSE 16 host has a package installed that is affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:22010-1 advisory. - CVE-2026-81871: go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc: OpenTelemetry-Go: TLS certificate bypass allows log telemetry...

CVE-2026-105216: Improper Certificate Validation

go-micro before 6.0.0 contains an improper certificate validation vulnerability that allows network attackers to impersonate services because the shared TLS helper sets InsecureSkipVerify to true by default. Man-in-the-middle attackers can present any certificate to intercept or modify gRPC...

CVE-2018-6574

Los archivos main.go y attack.so se utilizan para explotar CVE-2018-6574; usamos github debido a TLS...

CVE-2018-6574-go-get-RCE

CVE-2018-6574-Solution gcc -shared -o attack.so -fPIC attack.c...

vt-go

vt-go Esta es la biblioteca cliente oficial de Go para VirusTotal. Con esta biblioteca puedes interactuar con la API REST v3 de VirusTotal sin tener que enviar solicitudes HTTP simples con el paquete estándar "http". Ejemplo de uso package main import "flag" "fmt" "log" "os" vt...

trustmebro

Bypass llm guardrails by confusing it with fabricated tool output. Results · Installation · Quick start · Rules · Architecture TrustMeBro intercepts command-line tools invoked by coding agents such as Codex, Claude Code, and pi. Rules decide whether to return fabricated output, modify the real...

CVE-2018-6574-go-get-RCE

此存储库没有 README。...

CVE-2018-0114-Go

CVE-2018-0114 Prueba de concepto Referencia: CVE-2018-0114 Nota: Solo con fines educativos. Para generar un JWT con el claim "admin", ejecuta el siguiente comando en el directorio del proyecto: go run . --claim=admin /\ \ /\ /\ \ /\ \ /'\ /'\ /' \ /' \ /'\ /' \ /' \ /\ \ \ \ \ /\ \ \ \ \ \ \ ...

CVE-2018-6574-go-get-RCE

CVE-2018-6574-go-get-RCE The issue is due to the fact that when installing a package, Golang will build native extensions. This can be used to pass additional flags to the compiler to gain code execution. For example, CFLAGS can be used. You can build it using the following command: $ gcc -shared...

CVE-2023-20073

CVE-2023-20073 Basado en la investigación https://unsafe.sh/go-173464.html Agradecimientos especiales al autor de la publicación, winmt y ZIKH26 Solo con fines de investigación...

poc-cve-next

PoC para la vulnerabilidad de Next.js. Créditos a quien corresponde. Esto fue escrito en go, pero me inspiré en: github.com/namest504/CVE-2025-66478 Para más información visita ese repositorio. ¡Saludos! Descargo de responsabilidad Este código se proporciona únicamente con fines de investigación ...

CVE-2018-6574

此仓库包含CVE-2018-6574 "go get RCE"的PoC，该漏洞允许在下载第三方包时执行命令。这是因为cflags允许设置外部库。在此PoC中，外部库在构造函数上执行命令。...

CVE-2026-71557-poc

CVE-2026-71557: PoC de path traversal en el nombre de referencia de go-git Versión en inglés Resumen Este repositorio es un PoC local seguro de CVE-2026-71557 , basado en el aviso público de go-git GHSA-qgq7-7hm3-q39j. La versión anterior de storage/filesystem no validaba suficientemente el nombr...

CVE-2022-21907-RCE

CVE-2022-21907-RCE CVE-2022-21907漏洞RCE PoC 使用说明: go run ./CVE-2022-21907.go -h...

Linux Distros Unpatched Vulnerability : CVE-2026-63772

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Allocation of Resources Without Limits or Throttling vulnerability in Apache Thrift go bindings. This issue affects Apache Thrift: before 0.25.0. Users are...

Linux Distros Unpatched Vulnerability : CVE-2026-94637

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper handling of highly compressed data data amplification vulnerability in Apache Thrift Go bindings. This issue affects Apache Thrift: before 0.25.0. User...

Linux Distros Unpatched Vulnerability : CVE-2026-66055

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Allocation of Resources Without Limits or Throttling vulnerability in Apache Thrift C++, Java, Go, netstd, Python and Delphi bindings. This issue affects Apache...

Linux Distros Unpatched Vulnerability : CVE-2026-83663

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Uncontrolled Recursion vulnerability in Apache Thrift go bindings. Both Go transports satisfy a read out of a buffered frame and, when that frame yields no...

Linux Distros Unpatched Vulnerability : CVE-2026-82458

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Memory allocation with excessive size value, Allocation of resources without limits or throttling vulnerability in Apache Thrift Go, netstd, OCaml, Erlang,...

awsScrape

AWSScrape AWSScrape es una herramienta diseñada para extraer certificados SSL de todos los rangos de IP de AWS, buscando palabras clave específicas en los campos Common Name CN, Organization O y Organizational Unit OU de los certificados. Instalación 1. Clona este repositorio: git clone...