Lucene search
+L
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
Assessment
Vulnerability Intelligence
Exploits
Alerts
Datasets
MCP
White Label
Security Automation SDK
MCP for AI Agents
Plans & Pricing
API Reference
Settings
Sign in
🔥 Daily Hot!
💪🏽 CPE Enhanced Advisories
🕶 Shadow Exploits
🕵🏼 Vulners CPE
🔐 Security news
💻 Exploit updates
📑 Blogs review
🐧 Linux vulnerabilities
🐞 Bugbounty
🤖 AI High Score
📰 CVE Feed
show all

89 matches found

Kitploit
Kitploit•added 2026/10/21 10:59 p.m.•34 views

CVE-2025-66676

CVE-2025-66676 In IOBit Unlocker 1.3.0.11 and earlier, the application allows arbitrary process termination by trying to unlock a file. Background The application is used to unlock a unlocked file. By specifying the process image file of a running process as the locked file, IOBit unlocker will t...

6.2CVSS6.3AI score0.00184EPSS
SaveExploits1
osv_bit
osv_bit•added 2026/10/16 8:40 a.m.•2 views

BIT-GOLANG-2026-94444 Checksum bypass for golang.org/fips140 in cmd/go

Previously, a user operating inside of a malicious Go project that defines a bogus golang.org/fips140 and operates a malicious GOMODPROXY the user chooses to connect to can serve an arbitrary module in its place. We now unpack the trusted ziphash for the bundled golang.org/fips140 module and...

7.8CVSS6AI score0.00094EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies•added 2026/10/16 12:00 a.m.•6 views

PT-2026-115885

Previously, a user operating inside of a malicious Go project that defines a bogus golang.org/toolchain go.sum entry and operates a malicious GOMODPROXY the user chooses to use can bypass the intended checksum. We now ensure that golang.org/toolchain always goes to the network for the canonical...

7.8CVSS5.9AI score0.00103EPSS
SaveExploits0References6
Kitploit
Kitploit•added 2026/10/15 6:26 p.m.•25 views

IOBitUnlockerUnlocker

Intro 0 day Moves or Copies any file. Bypasses previous patch with a checksum trick. Writup: https://nathan2.com/files/iobit.pdf Overall info: https://nathan2.com/posts/iobit/ I discovered this without knowing that this there was another previous exploit that discovered this first. However, this...

6.1AI score
SaveExploits0
Tenable Nessus
Tenable Nessus•added 2026/10/14 12:00 a.m.•13 views

Linux Distros Unpatched Vulnerability : CVE-2026-94447

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Previously, a user operating inside of a malicious Go project that defines a bogus golang.org/toolchain go.sum entry and operates a malicious GOMODPROXY the use...

7.8CVSS5.8AI score0.00103EPSS
SaveExploits0References4
osv_suse
osv_suse•added 2026/10/13 3:22 p.m.•0 views

SUSE-SU-2026:24239-1 Security update for go1.26

This update for go1.26 fixes the following issues: Update to go 1.26.9 bsc1255111: - CVE-2026-56857: os: Root.MkdirAll can follow junctions out of the root on Windows bsc1284766. - CVE-2026-56866: net/http: HTTP/1 client connection desynchronization after CONNECT rejection bsc1284767. -...

9.8CVSS6AI score0.0057EPSS
SaveExploits0References28
osv_opensuse
osv_opensuse•added 2026/10/13 3:18 p.m.•7 views

OPENSUSE-SU-2026:22095-1 Security update for go1.26

This update for go1.26 fixes the following issues: Update to go 1.26.9 bsc1255111: - CVE-2026-56857: os: Root.MkdirAll can follow junctions out of the root on Windows bsc1284766. - CVE-2026-56866: net/http: HTTP/1 client connection desynchronization after CONNECT rejection bsc1284767. -...

9.8CVSS5.8AI score0.0057EPSS
SaveExploits0References27
osv_opensuse
osv_opensuse•added 2026/10/13 12:02 p.m.•8 views

OPENSUSE-SU-2026:22093-1 Security update for go1.27

This update for go1.27 fixes the following issues: Update to go1.27.2 bsc1272545: - CVE-2026-56857: os: Root.MkdirAll can follow junctions out of the root on Windows bsc1284766. - CVE-2026-56866: net/http: HTTP/1 client connection desynchronization after CONNECT rejection bsc1284767. -...

9.8CVSS6.2AI score0.00574EPSS
SaveExploits0References31
Tenable Nessus
Tenable Nessus•added 2026/10/13 12:00 a.m.•10 views

SUSE SLED15 / SLES15 Security Update : go1.26 (SUSE-SU-2026:4629-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4629-1 advisory. Update to go 1.26.9 bsc1255111: - CVE-2026-56857: os: Root.MkdirAll can follow junctions out of the root on...

9.8CVSS6.1AI score0.0057EPSS
SaveExploits0References41
SUSE Linux
SUSE Linux•added 2026/10/12 3:15 p.m.•8 views

Security update for go1.26

This update for go1.26 fixes the following issues: Update to go 1.26.9 bsc1255111: CVE-2026-56857: os: Root.MkdirAll can follow junctions out of the root on Windows bsc1284766. CVE-2026-56866: net/http: HTTP/1 client connection desynchronization after CONNECT rejection bsc1284767. CVE-2026-78659:...

8.7CVSS5.9AI score0.0057EPSS
SaveExploits0References54
SUSE Linux
SUSE Linux•added 2026/10/12 8:25 a.m.•11 views

Security update for go1.27

This update for go1.27 fixes the following issues: Update to go1.27.2 bsc1272545: CVE-2026-56857: os: Root.MkdirAll can follow junctions out of the root on Windows bsc1284766. CVE-2026-56866: net/http: HTTP/1 client connection desynchronization after CONNECT rejection bsc1284767. CVE-2026-78659:...

8.7CVSS6.3AI score0.00574EPSS
SaveExploits0References62
osv_suse
osv_suse•added 2026/10/12 8:25 a.m.•17 views

SUSE-SU-2026:4625-1 Security update for go1.27

This update for go1.27 fixes the following issues: Update to go1.27.2 bsc1272545: - CVE-2026-56857: os: Root.MkdirAll can follow junctions out of the root on Windows bsc1284766. - CVE-2026-56866: net/http: HTTP/1 client connection desynchronization after CONNECT rejection bsc1284767. -...

9.8CVSS6.2AI score0.00574EPSS
SaveExploits0References32
SUSE CVE
SUSE CVE•added 2026/10/09 5:02 p.m.•6 views

SUSE CVE-2026-94447

Previously, a user operating inside of a malicious Go project that defines a bogus golang.org/toolchain go.sum entry and operates a malicious GOMODPROXY the user chooses to use can bypass the intended checksum. We now ensure that golang.org/toolchain always goes to the network for the canonical...

7.8CVSS5.9AI score0.00103EPSS
SaveExploits0References7
EUVD
EUVD•added 2026/10/09 12:31 a.m.•15 views

EUVD-2026-95418

Previously, a user operating inside of a malicious Go project that defines a bogus golang.org/toolchain go.sum entry and operates a malicious GOMODPROXY the user chooses to use can bypass the intended checksum. We now ensure that golang.org/toolchain always goes to the network for the canonical...

5.9AI score0.00103EPSS
SaveExploits0References5
osv_debian
osv_debian•added 2026/10/08 11:17 p.m.•20 views

DEBIAN-CVE-2026-94447

Previously, a user operating inside of a malicious Go project that defines a bogus golang.org/toolchain go.sum entry and operates a malicious GOMODPROXY the user chooses to use can bypass the intended checksum. We now ensure that golang.org/toolchain always goes to the network for the canonical...

7.8CVSS5.9AI score0.00103EPSS
SaveExploits0References1
osv_azl
osv_azl•added 2026/10/08 11:17 p.m.•19 views

AZL-107483 CVE-2026-94447 affecting package golang 1.27.1-1

Previously, a user operating inside of a malicious Go project that defines a bogus golang.org/toolchain go.sum entry and operates a malicious GOMODPROXY the user chooses to use can bypass the intended checksum. We now ensure that golang.org/toolchain always goes to the network for the canonical...

7.8CVSS5.9AI score0.00103EPSS
SaveExploits0References1
osv_azl
osv_azl•added 2026/10/08 11:17 p.m.•21 views

AZL-107454 CVE-2026-94447 affecting package golang 1.26.7-1

Previously, a user operating inside of a malicious Go project that defines a bogus golang.org/toolchain go.sum entry and operates a malicious GOMODPROXY the user chooses to use can bypass the intended checksum. We now ensure that golang.org/toolchain always goes to the network for the canonical...

7.8CVSS5.9AI score0.00103EPSS
SaveExploits0References1
NVD
NVD•added 2026/10/08 11:17 p.m.•20 views

CVE-2026-94447

Previously, a user operating inside of a malicious Go project that defines a bogus golang.org/toolchain go.sum entry and operates a malicious GOMODPROXY the user chooses to use can bypass the intended checksum. We now ensure that golang.org/toolchain always goes to the network for the canonical...

7.8CVSS0.00103EPSS
SaveExploits0References4
osv_ubuntu
osv_ubuntu•added 2026/10/08 11:17 p.m.•17 views

UBUNTU-CVE-2026-94447

Previously, a user operating inside of a malicious Go project that defines a bogus golang.org/toolchain go.sum entry and operates a malicious GOMODPROXY the user chooses to use can bypass the intended checksum. We now ensure that golang.org/toolchain always goes to the network for the canonical...

7.8CVSS5.9AI score0.00103EPSS
SaveExploits0References4
UbuntuCve
UbuntuCve•added 2026/10/08 11:17 p.m.•12 views

CVE-2026-94447

Previously, a user operating inside of a malicious Go project that defines a bogus golang.org/toolchain go.sum entry and operates a malicious GOMODPROXY the user chooses to use can bypass the intended checksum. We now ensure that golang.org/toolchain always goes to the network for the canonical...

7.8CVSS5.8AI score0.00103EPSS
SaveExploits0References3
Rows per page
Query Builder