Cross-site Scripting (XSS)

github.com/microcosm-cc/bluemonday is vulnerable to Cross-Site Scripting XSS attacks. The vulnerability exists due to the use of strings.toLower which converts the symbol \u0130 İ to i...

Privilege Escalation

github.com/juju/juju is vulnerable to privilege escalation. A malicious user with access to the terminal can gain root privileges through the command juju-run 'whoami'...

Unauthorized Access

github.com/moby/moby is vulnerable to unauthorized access. A malicious user can write scsi remove-single-device to /proc/scsi/scsi, removing a scsi device from the system...

Denial Of Service (DoS) Through Integer Overflow

github.com/tendermint/go-wire is vulnerable to denial of service DoS attacks. The library does not ensure the input to be encoded is less than the maximum integer value accepted, allowing a malicious user to cause an integer overflow that crashes the application...

Man-in-the-Middle (MitM)

github.com/golang/go is vulnerable to man-in-the-middle MitM attack. A malicious user can set up a MitM SMTP server that doesn't advertise STARTTLS and advertises that PLAIN authentication can be used. By doing this, smtp.PlainAuth will send the username and password will be sent to the server...

Untrusted Certificate Validation

crypto/x509 in github.com/golang/go uses untrusted certificates for validation. When used on Darwin, golang will use an untrusted root certificate as if it were trusted when verifying connections...

Man In The Middle (MitM)

github.com/remind101/empire is vulnerable to Man in the Middle MitM attacks. The library pulls Docker images using a tag. Pulling a Docker image doesn't guarantee the pull data hasn't been modified, the usage of the content-addressable identifier guarantees the Empire API will safely pull the...

Cleaning up my GOPATH with Homebrew

tl;dr: use the script at the bottom to go get into the Homebrew "Cellar" and keep your GOPATH clean. I personally like GOPATH and import paths, but while trying to reduce my laptop to a thin reproducible client, I felt the pain of keeping track of the hundreds of repositories that end up in there...

Missing Certificate Request Signature Validation

crypto/x509 in github.com/golang/go is missing certificate request signature validation. The library does not check the binding of the private key i.e., signature validation to its corresponding entities' certificate...

Cross-site Scripting (XSS)

github.com/gogits/gogs is vulnerable to cross-site scripting XSS attacks. The attacks can be triggered because a user can change their username to anything other than an empty string. This allows them to enter code which may be executed...

Cross-site Scripting (XSS)

github.com/gogits/gogs is vulnerable to cross-site scripting XSS attacks. The library's wiki templates do not sanitize user input, allowing a malicious user to inject and execute arbitrary code...

Cross-site Scripting (XSS)

github.com/koding/koding is vulnerable to cross-site scripting XSS attacks. The attacks exist since it does not encode the user input value in crawler to avoid the attack...

Cross-site Scripting (XSS)

github.com/koding/koding is susceptible to cross-site scripting XSS attacks. It happens because it encodes title as html in setPaneTitle of KDTabView.coffee...

Phishing Attack

github.com/microcosm-cc/bluemonday is vulnerable as a vector for phishing attacks. The library doesn't protect against the window.opener vulnerability. This allows a malicious user to redirect users to a malicious URL...

Arbitrary Log Read

github.com/kubernetes/kubernetes is vulnerable to arbitrary log reads. Using a container name, attackers are able to read the pod logs...

Insecure Cookies

github.com/sensu/uchiwa doesn't use correctly secured cookies for sensitive information. The SecureFlag is currently not being set in the AuthenticationToken and the XSRF-Token cookies. This allows attackers to observe the cookies as they are sent in plaintext...

Denial Of Service (DoS)

github.com/ugorji/go is vulnerable to denial of service DoS attacks. The vulnerability exists because it doe not limit the size of length of input when it decodes a very large or corrupted string or bytes value...

Privilege Escalation

github.com/docker/libcontainer is vulnerable to privilege escalation attacks. These attacks are possible because github.com/docker/libcontainer and docker open the file-descriptor passed to pid-1 before performing chroot actions. The attacks can be triggered through a symlink attack...

Man-in-the-middle (MitM)

github.com/golang/crypto is vulnerable to man-in-the-middle MitM attacks. The HostKeyCallback function currently interprets nil as to accept any host keys. A MitM server can allow the login to succeed and get the agemt to authenticate to the actual server...

Privilege Escalation

github.com/opencontainers/runc is vulnerable to privilege escalation attacks. These attacks are possible because github.com/opencontainers/runc treats a numeric UID as a potential username. This allows local users to gain privileges though a numeric username in the password file. This transitivel...