CVE-2018-6574

Ce dépôt contient une PoC de la CVE-2018-6574 "go get RCE", qui permettait d'exécuter des commandes lors du téléchargement d'un paquet tiers. Cela était possible car les cflags permettaient de définir une bibliothèque externe. Dans cette PoC, la bibliothèque externe exécute une commande dans le...

CVE-2018-6574

CVE-2018-6574 Exécution de commande à distance dans la commande Golang go get. CVE-2018-6574, cette vulnérabilité impacte la commande go get de Golang et permet à un attaquant d'exécuter du code sur un système en installant une bibliothèque malveillante. Cette vulnérabilité a été corrigée dans Go...

CVE-2018-6574

CVE-2018-6574 POC POC استغلال لـ CVE-2018-6574 التجميع 1. أنشئ ملف استغلال بالمحتوى التالي: include include static void malicious attributeconstructor; void malicious system"COMMAND"; 2. قم بتجميعه: gcc -shared -o exploit.so -fPIC exploit.c 3. أخيرًا، تحتاج إلى كود Go الذي سيخبر cgo باستخدام...

CVE-2018-6574-go-get-RCE

CVE-2018-6574-go-get-RCE Le problème vient du fait que lors de l'installation d'un package, Golang va construire des extensions natives. Cela peut être utilisé pour passer des flags supplémentaires au compilateur afin d'obtenir une exécution de code. Par exemple, CFLAGS peut être utilisé. Vous...

Oracle Linux 8 : python39:3.9 (ELSA-2025-23530)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-23530 advisory. modwsgi numpy python39 3.9.25-2 - Add explicit BR: libxcrypt-devel - Properly apply exported CFLAGS for dtrace/systemtap builds - Update to Python...

python39:3.9 security update

modwsgi numpy python39 3.9.25-2 - Add explicit BR: libxcrypt-devel - Properly apply exported CFLAGS for dtrace/systemtap builds - Update to Python 3.9.25 - Move sysconfigdatadlinux.py to the debug subpackage - Fedora contributions by: Bjorn Esser Charalampos Stratakis Karolina Surma Tomas Orsava...

Fedora 40 : man2html (2025-a778f51bce)

The remote Fedora 40 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-a778f51bce advisory. Refresh patches Add -std=gnu17 to CFLAGS to fix the build 042-man2html-CVE-2021-40647.patch Add more patches from Debian Tenable has extracted the preceding...

Fedora 41 : man2html (2025-538f2e492d)

The remote Fedora 41 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-538f2e492d advisory. Refresh patches Add -std=gnu17 to CFLAGS to fix the build 042-man2html-CVE-2021-40647.patch Add more patches from Debian Tenable has extracted the preceding...

zlog 1.2.15 - Buffer Overflow Exploit

Exploit Title: zlog 1.2.15 - Buffer Overflow Exploit Author: LIWEI Vendor Homepage: https://github.com/HardySimpson/zlog Software Link: https://github.com/HardySimpson/zlog Version: v1.2.15 Tested on: ubuntu 18.04.2 1.- compile the zlogv1.2.15 code to a library. 2.- Use the "zloginit" API to pars...

Security update for giflib (low)

openSUSE Security Update: Security update for giflib Announcement ID: openSUSE-SU-2021:0650-1 Rating: low References: 1184123 Affected Products: openSUSE Leap 15.2 An update that contains security fixes can now be installed. Description: This update for giflib fixes the following issues: - Enable...

OPENSUSE-SU-2021:0650-1 Security update for giflib

This update for giflib fixes the following issues: - Enable Position Independent Code and inherit CFLAGS from the build system bsc1184123. This update was imported from the SUSE:SLE-15:Update update project...

PT-2021-27343

Name of the Vulnerable Software and Affected Versions: giflib affected versions not specified Description: The issue with giflib involves enabling Position Independent Code and inheriting CFLAGS from the build system. Recommendations: At the moment, there is no information about a newer version...

SUSE SLED15 / SLES15 Security Update : giflib (SUSE-SU-2021:1409-1)

This update for giflib fixes the following issues : Enable Position Independent Code and inherit CFLAGS from the build system bsc1184123. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatical...

PT-2021-28421

Name of the Vulnerable Software and Affected Versions: giflib affected versions not specified Description: The issue with giflib involves enabling Position Independent Code and inheriting CFLAGS from the build system. Recommendations: At the moment, there is no information about a newer version...

OPENSUSE-SU-2020:1660-1 Security update for nodejs10

This update for nodejs10 fixes the following issues: - nodejs10 was updated to 10.22.1 LTS: - CVE-2020-8252: Fixed a buffer overflow in realpath bsc1176589. - CVE-2020-15095: Fixed an information leak through log files bsc1173937. - Explicitly add -fno-strict-aliasing to CFLAGS to fix compilation...

Security update for nodejs10 (important)

openSUSE Security Update: Security update for nodejs10 Announcement ID: openSUSE-SU-2020:1660-1 Rating: important References: 1172686 1173937 1176589 Cross-References: CVE-2020-15095 CVE-2020-8252 Affected Products: openSUSE Leap 15.2 An update that solves two vulnerabilities and has one errata i...

Security update for nodejs8 (moderate)

openSUSE Security Update: Security update for nodejs8 Announcement ID: openSUSE-SU-2020:1644-1 Rating: moderate References: 1172686 1173937 Cross-References: CVE-2020-15095 Affected Products: openSUSE Leap 15.1 An update that solves one vulnerability and has one errata is now available...

Security fix for the ALT Linux 10 package node version 10.15.3-alt1

March 9, 2019 Vitaly Lipatov 10.15.3-alt1 - new version 10.15.3 with rpmrb script - 2018-03-05, Version 10.15.3 'Dubnium' LTS, @BethGriggs - CVE-2019-5737 - fix rpm's cflags using, add -latomic on mipsel - use external gyp...

iSQL 1.0 - isql_main.c Buffer Overflow (PoC)

Exploit for linux platform in category dos / poc !/bin/ruby Exploit Title: iSQLRL 1.0 - Buffer Overflowisqlmain.c Date: 2016-06-13 Exploit Author: HaHwul Exploit Author Blog: www.hahwul.com Vendor Homepage: https://github.com/roselone/iSQL Software Link:...

Fedora 23 : ProDy-1.7.1-1.fc23 (2015-a0ac3df0f0)

ProDy-1.7.1-1.el6 - Update to 1.7.1 - Added scipy as BR package - Set CFLAGS for hardened builds ProDy-1.7.1-1.fc22 - Update to 1.7.1 - Added scipy as BR package - Set CFLAGS for hardened builds ProDy-1.7.1-1.fc21 - Update to 1.7.1 - Added scipy as BR package - Set CFLAGS for hardened builds...