QueenSono

QueenSono Exfiltración de Datos ICMP Un Paquete Golang para Exfiltración de Datos con protocolo ICMP IPv4 & IPv6. La herramienta QueenSono solo se basa en el hecho de que el protocolo ICMP no es monitoreado. Es bastante común. También podría usarse dentro de un sistema con inspección básica de IC...

ROOT-APP-GOBINARY-CVE-2025-58181 CVE-2025-58181 in golang.org/x/crypto - Patched by Root

Root has patched CVE-2025-58181 in the golang.org/x/crypto package for Root:Go. Multiple fixed versions available...

Oracle Linux 10 : ELSA-2026-60306-0: / golang (ELSA-2026-603060)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-603060 advisory. 1.26.7-1.0.1 - EXPERIMENTAL: Introduce fipsnoenforceems GODEBUG var 1.26.7-1 - Update to Go 1.26.7 fips-1 Tenable has extracted the preceding...

CVE-2026-39822 affecting package golang for versions less than 1.25.12-1

CVE-2026-39822 affecting package golang for versions less than 1.25.12-1. A patched version of the package is available...

RHEL 10 : golang (RHSA-2026:37436)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:37436 advisory. The golang packages provide the Go programming language compiler. Security Fixes: golang.org/x/net/idna: golang: golang.org/x/net/idna:...

CVE-2026-39821 affecting package golang for versions less than 1.25.11-2

CVE-2026-39821 affecting package golang for versions less than 1.25.11-2. A patched version of the package is available...

OPENSUSE-SU-2026:11012-1 golang-github-prometheus-node_exporter-1.11.1-2.1 on GA media

These are all security issues fixed in the golang-github-prometheus-nodeexporter-1.11.1-2.1 package on the GA media of openSUSE Tumbleweed...

CVE-2026-27145 affecting package golang for versions less than 1.26.4-1

CVE-2026-27145 affecting package golang for versions less than 1.26.4-1. A patched version of the package is available...

CVE-2026-42504 affecting package golang for versions less than 1.26.4-1

CVE-2026-42504 affecting package golang for versions less than 1.26.4-1. A patched version of the package is available...

CVE-2026-42504 affecting package golang for versions less than 1.25.11-1

CVE-2026-42504 affecting package golang for versions less than 1.25.11-1. A patched version of the package is available...

CVE-2026-27145 affecting package golang for versions less than 1.25.11-1

CVE-2026-27145 affecting package golang for versions less than 1.25.11-1. A patched version of the package is available...

CVE-2026-42507 affecting package golang for versions less than 1.25.11-1

CVE-2026-42507 affecting package golang for versions less than 1.25.11-1. A patched version of the package is available...

Cross-site Scripting (XSS)

Overview golang.org/x/net/html is a package that implements an HTML5-compliant tokenizer and parser. Affected versions of this package are vulnerable to Cross-site Scripting XSS in the inBodyEndTagOther function, when rendering sanitized HTML. An attacker can cause the execution of scripts in the...

CVE-2026-33814 affecting package golang for versions less than 1.26.3-1

CVE-2026-33814 affecting package golang for versions less than 1.26.3-1. An upgraded version of the package is available that resolves this issue...

Unity Linux 20.1050e / 20.1070e Security Update: golang (UTSA-2026-016809)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-016809 advisory. url.Parse insufficiently validated the host/authority component and accepted some invalid URLs. Tenable has extracted the preceding description block directly from t...

RHEL 9 : golang (RHSA-2026:7883)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:7883 advisory. The golang packages provide the Go programming language compiler. Security Fixes: cmd/go: cmd/go: Arbitrary file write via malicious...

MiracleLinux 9 : golang-1.25.8-1.el9_7 (AXSA:2026-370:03)

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-370:03 advisory. cmd/go: cmd/go: Arbitrary file write via malicious pkg-config directive CVE-2025-61731 net/url: Incorrect parsing of IPv6 host literals in net/url...

OPENSUSE-SU-2026:10432-1 golang-github-v2fly-v2ray-core-5.47.0-1.1 on GA media

These are all security issues fixed in the golang-github-v2fly-v2ray-core-5.47.0-1.1 package on the GA media of openSUSE Tumbleweed...

Huawei EulerOS: Security Advisory for golang (EulerOS-SA-2026-1310)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2026-27137 affecting package golang for versions less than 1.25.8-1

CVE-2026-27137 affecting package golang for versions less than 1.25.8-1. An upgraded version of the package is available that resolves this issue...