PwnedPasswordsChecker

PwnedPasswordsChecker PwnedPasswordsChecker es una herramienta que comprueba si el hash de una contraseña conocida en formato SHA1 o NTLM está presente en la lista de filtraciones de I Have Been Pwned y el número de ocurrencias. Puede descargar la versión codificada por hash para SHA1 aquí o la...

reposaur

Reposaur Reposaur is the open source compliance tool for development platforms. Audit, verify and report on your data and configurations easily with pre-defined and/or custom policies. Supports GitHub. GitLab, BitBucket and Gitea support soon. ⚠️ before 1.0.0 expect some bugs and API changes ⚠️...

Git-Secret

Git-Secret Scripts en Go para encontrar una clave API / algunas palabras clave en un repositorio Actualización V1.0.2 🚀 Eliminación de algunos verificadores Añadido archivo de ejemplo que contiene dorks de GitHub Añadido soporte para el comando go install issue 5 Captura de pantalla 📷 Cómo instal...

Mangle

THIS REPOSITORY HAS BEEN ARCHIVED To view the latest version of Mangle or to submit an issue, reference https://github.com/Tylous/Mangle. Mangle Authored By Tyl0us Featured at Source Zero Con 2022 Mangle is a tool that manipulates aspects of compiled executables .exe or DLL. Mangle can remove kno...

Kousei

Kousei こうせい Author: nu11secur1ty Years: 2023–2026 Language: Python with optional Go modules Purpose: Generate SQLi Proof-of-Concept requests, automate sqlmap attacks, and manage attack modules with ease. Description Kousei こうせい is an aggressive framework for sqlmap that can work with any web...

melody

Melody Monitorea el ruido de fondo de Internet Melody es un sensor de Internet transparente diseñado para inteligencia de amenazas y respaldado por un marco de reglas de detección que te permite etiquetar paquetes de interés para análisis y monitoreo de amenazas. Tabla de contenidos Melody Tabla ...

CLEANSTART-2026-PU41775 Go JOSE provides an implementation of the Javascript Object Signing and Encryption set of standards in Go, including support for JSON Web Encryption (JWE), JSON Web Signature (JWS), and JSON Web To...

CVE-2026-34986 affects multiple packages. Go JOSE provides an implementation of the Javascript Object Signing and Encryption set of standards in Go, including support for JSON Web Encryption JWE, JSON Web Signature JWS, and JSON Web Token JWT standards. See references for individual vulnerability...

CLEANSTART-2026-YC32527 OpenTelemetry-Go is the Go implementation of OpenTelemetry

Security vulnerability affects the consul package. OpenTelemetry-Go is the Go implementation of OpenTelemetry...

CLEANSTART-2026-TQ62696 gRPC-Go is the Go language implementation of gRPC

Security vulnerability affects the consul package. gRPC-Go is the Go language implementation of gRPC...

CLEANSTART-2026-JQ09832 gRPC-Go is the Go language implementation of gRPC

CVE-2026-84445 affects multiple packages. gRPC-Go is the Go language implementation of gRPC. See references for individual vulnerability details...

Xalgorix Autonomous AI Pentesting Agent 4.6.136

Most scanners detect. Xalgorix proves. An autonomous LLM agent works a full pentest methodology, then an independent verifier re-exploits every finding before it's reported - so you get proof, not a pile of maybes to triage. Self-hosted, private, and bring-your-own-LLM. Built in Go + TypeScript...

openSUSE 16 Security Update : rclone (openSUSE-SU-2026:21999-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21999-1 advisory. Changes in rclone: - Update to version 1.75.1: boo1279548 - Security - archive - Fix zip slip path traversal in untrusted zip files...

PT-2026-104334

Name of the Vulnerable Software and Affected Versions Apache Thrift versions prior to 0.25.0 Description An allocation of resources without limits or throttling issue exists in the C++, Java, Go, netstd, Python, and Delphi bindings. Specifically, the TJSONProtocol accepts a single JSON string or...

PT-2026-104332

Name of the Vulnerable Software and Affected Versions Apache Thrift versions prior to 0.25.0 Description An allocation of resources without limits or throttling issue exists in the Apache Thrift Go bindings. This can lead to an unauthenticated single-packet crash of Go Thrift servers through the...

CVE-2018-12018

CVE-2018-12018 Mitre https://vulners.com/cve/CVE-2018-12018 El manejador GetBlockHeadersMsg en la implementación del protocolo LES en Go Ethereum también conocido como geth anterior a 1.8.11 puede provocar una violación de acceso debido a un error de signo entero para el índice de la matriz, lo q...

encoding/xml: golang: Go: Denial of Service via XML decoding recursion depth issue

A flaw was found in the encoding/xml package of Go. The DecodeElement function failed to correctly track recursion depth, which could lead to stack exhaustion. A remote attacker could exploit this vulnerability by providing a specially crafted XML input, resulting in a Denial of Service DoS for t...

encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal

A flaw was found in the encoding/asn1 package in Go. An attacker could provide a specially crafted, deeply-nested Abstract Syntax Notation One ASN.1 structure, leading to excessive recursion during the Unmarshal operation. This could result in stack exhaustion and a Denial of Service DoS conditio...

html/template: golang: Go html/template: Cross-Site Scripting via pathological input

A flaw was found in the html/template component of Go golang. Pathological inputs could prematurely close an unescaped forward slash '/', allowing an attacker to inject arbitrary content. This could lead to Cross-Site Scripting XSS, where malicious scripts are executed in a user's browser,...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.18.56 packages and security update

Red Hat OpenShift Container Platform release 4.18.56 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.18. Red Hat Product Security has rated this update as having a...

encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal

A flaw was found in the encoding/asn1 package in Go. An attacker could provide a specially crafted, deeply-nested Abstract Syntax Notation One ASN.1 structure, leading to excessive recursion during the Unmarshal operation. This could result in stack exhaustion and a Denial of Service DoS conditio...