438 matches found
CVE-2024-3094-info
CVE-2024-3094-info CVE-2024-3094 PoC Exploration https://github.com/amlweems/xzbot https://github.com/lockness-Ko/xz-vulnerable-honeypot https://tukaani.org/xz-backdoor/ - Lasse Collin response https://gist.github.com/thesamesam/223949d5a074ebc3dce9ee78baad9e27...
CVE-2024-3094_xz_check
CVE-2024-3094 xz Check Script This repository contains a Bash script and a one-liner command to verify if a system is running a vulnerable version of the "xz" utility, as specified by CVE-2024-3094. See the description and impact statement below from information available via RedHat...
xzutils_backdoor_obfuscation
xzutilsbackdoorobfuscation This script recreates the obfuscation technique used for the XZ utils attack CVE-2024-3094. It has been tested for xzutils v5.6.0 only. ⚠️ This code is provided for educational purposes only and should not be used for malicious activities. Use at your own risks. ⚠️...
SUSE CVE-2026-97033
Building a malicious package that uses cgo could cause arbitrary code execution at build time through several compiler and linker flags permitted in "cgo" directives. Specifically, "--sysroot" in GCC and Clang relocates compiler subprograms, spec files, and CRT startup objects to an...
DEBIAN-CVE-2026-97033
Building a malicious package that uses cgo could cause arbitrary code execution at build time through several compiler and linker flags permitted in "cgo" directives. Specifically, "--sysroot" in GCC and Clang relocates compiler subprograms, spec files, and CRT startup objects to an...
DEBIAN-CVE-2026-97035
When using Clang or GCC, building a malicious package that uses cgo could cause unexpected code execution at build time or write files to arbitrary directories via "-gen-" or "-gnat" flags in "cgo" directives. The "-g" wildcard in the compiler and linker flag allowlists previously matched Clang's...
CVE-2026-97033
Building a malicious package that uses cgo could cause arbitrary code execution at build time through several compiler and linker flags permitted in "cgo" directives. Specifically, "--sysroot" in GCC and Clang relocates compiler subprograms, spec files, and CRT startup objects to an...
CVE-2026-97035
When using Clang or GCC, building a malicious package that uses cgo could cause unexpected code execution at build time or write files to arbitrary directories via "-gen-" or "-gnat" flags in "cgo" directives. The "-g" wildcard in the compiler and linker flag allowlists previously matched Clang's...
CVE-2026-97033
The Go toolchain (cmd/go) is vulnerable to arbitrary code execution at build time when processing malicious packages that utilize cgo . The root cause lies in the handling of several compiler and linker flags within "#cgo" directives: "--sysroot" in GCC/Clang can relocate subprograms to attacker-...
EUVD-2026-123112
Building a malicious package that uses cgo could cause arbitrary code execution at build time through several compiler and linker flags permitted in "cgo" directives. Specifically, "--sysroot" in GCC and Clang relocates compiler subprograms, spec files, and CRT startup objects to an...
CVE-2026-97033
Building a malicious package that uses cgo could cause arbitrary code execution at build time through several compiler and linker flags permitted in "cgo" directives. Specifically, "--sysroot" in GCC and Clang relocates compiler subprograms, spec files, and CRT startup objects to an...
EUVD-2026-123110
When using Clang or GCC, building a malicious package that uses cgo could cause unexpected code execution at build time or write files to arbitrary directories via "-gen-" or "-gnat" flags in "cgo" directives. The "-g" wildcard in the compiler and linker flag allowlists previously matched Clang's...
CVE-2026-97033: Go toolchain cmd/go: Building a malicious package that uses cgo could cause arbitrary code execution at build time through several compiler…
Building a malicious package that uses cgo could cause arbitrary code execution at build time through several compiler and linker flags permitted in "cgo" directives. Specifically, "--sysroot" in GCC and Clang relocates compiler subprograms, spec files, and CRT startup objects to an...
PT-2026-144956
Name of the Vulnerable Software and Affected Versions The product name cannot be determined. affected versions not specified Description Building a malicious package using cgo can lead to arbitrary code execution during the build process via specific compiler and linker flags in cgo directives. T...
CLEANSTART-2026-RI83897 SWIG file names containing 'cgo' and well-crafted payloads could lead to code smuggling and arbitrary code execution at build time due to trust layer bypass
CVE-2026-27140 affects multiple packages. SWIG file names containing 'cgo' and well-crafted payloads could lead to code smuggling and arbitrary code execution at build time due to trust layer bypass. See references for individual vulnerability details...
CLEANSTART-2024-OK96020 go command may execute arbitrary code at build time when using cgo
Security vulnerability affects the go package. The go command may execute arbitrary code at build time when using cgo...
CLEANSTART-2024-ZW44394 go command may execute arbitrary code at build time when using cgo
Security vulnerability affects the go package. The go command may execute arbitrary code at build time when using cgo...
CLEANSTART-2026-UR62545 SWIG file names containing 'cgo' and well-crafted payloads could lead to code smuggling and arbitrary code execution at build time due to trust layer bypass
CVE-2026-27140 affects multiple packages. SWIG file names containing 'cgo' and well-crafted payloads could lead to code smuggling and arbitrary code execution at build time due to trust layer bypass. See references for individual vulnerability details...
CLEANSTART-2026-YF00750 SWIG file names containing 'cgo' and well-crafted payloads could lead to code smuggling and arbitrary code execution at build time due to trust layer bypass
CVE-2026-27140 affects multiple packages. SWIG file names containing 'cgo' and well-crafted payloads could lead to code smuggling and arbitrary code execution at build time due to trust layer bypass. See references for individual vulnerability details...
