gogs

👉 Faça deploy no DigitalOcean e obtenha $200 em créditos gratuitos! 🔮 Visão O projeto Gogs /gɑgz/ tem como objetivo construir um serviço Git auto-hospedado simples, estável e extensível que pode ser configurado da maneira mais indolor possível. Com Go, isso pode ser feito com uma distribuição...

Routeglass

Routeglass - Strumento ad alta velocità per il fingerprinting di Router e Appliance di Rete Routeglass è uno strumento di fingerprinting dei router veloce e multi-threaded scritto in Go. L'obiettivo del progetto è semplice: identificare router, firewall, gateway e dispositivi di rete embedded...

bitbang-cli

BitBang CLI BitBang CLI è un multi-strumento di accesso remoto in un singolo binario statico: apri una shell interattiva, sfoglia e trasferisci file, e accedi alle app web sulla rete della macchina remota da qualsiasi browser, senza port forwarding, senza configurazione e senza account. Sulla...

minion-ticket-bleed-plugin

Plugin Minion Ticketbleed Questo è un plugin per Minion che esegue un controllo per la vulnerabilità Ticketbleed CVE-2016-9244 sul livello TLS F5. Il test può essere eseguito come script Go oppure come binario Linux. Lo script è un miglioramento di https://filippo.io/Ticketbleed/ Installazione...

Fudge

Fudge Ho avuto un certo successo in campagne di phishing codificando in base64 il contenuto di un file, inserendolo in un file HTML e facendo sì che venisse decodificato e rilasciato quando l'utente apriva il file HTML. Utilizzo Sono disponibili binari precompilati nella scheda releases sia per...

otto-support

Otto Support Kundensupport-MCP-Server für KI-Codierungsassistenten. Eine Go-Binary, abgestufte Authentifizierung, 19 Tools auf 4 Rollenebenen. Erstellt mit mcp-go. Schnellstart Option A: Docker-Container empfohlen Führen Sie alles in einem isolierten Container aus. Claude Code ist vorinstalliert...

MAL-2026-13366 Malicious code in @workoscalif/sudoku (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6502011179b6d16c43f982d5d7bfb08feec7470444be52a5a3547cfafe0e217 package.json declares a postinstall script that spawns vendor/gridgen-linux-x64 during npm install. The README describes this file as a 34 kB static...

Malicious code in @workoscalif/sudoku (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6502011179b6d16c43f982d5d7bfb08feec7470444be52a5a3547cfafe0e217 package.json declares a postinstall script that spawns vendor/gridgen-linux-x64 during npm install. The README describes this file as a 34 kB static...

MAL-2026-12028 Malicious code in sextant-cli-darwin-amd64 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d2e5ab6503eb2b9c12bf64e34cb2fe12227c07b179231ebe23f13b8866181f1 The tarball contains a single 13.4 MB Mach-O darwin/amd64 Go binary at bin/sxt and a package.json with no source, no main, no bin mapping, and no...

Malicious code in sextant-cli-linux-amd64 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aab426dad8f1e5722f2836debe2f93730df98b7c109865426208edb687955b30 sextant-cli-linux-amd64 ships a Linux amd64 Go binary that, on execution, connects to a hardcoded WebRTC signaling relay at wss://relay.sextant.top a...

MAL-2026-12029 Malicious code in sextant-cli-linux-amd64 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aab426dad8f1e5722f2836debe2f93730df98b7c109865426208edb687955b30 sextant-cli-linux-amd64 ships a Linux amd64 Go binary that, on execution, connects to a hardcoded WebRTC signaling relay at wss://relay.sextant.top a...

MAL-2026-10610 Malicious code in proxy-check-ii (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a736498f3f882a4ba79f793dc893883db41d8cb5a74ecfe0c66dace9cc477a20 The wheel is advertised as 'proxy-check-ii' with a one-line summary of 'packaged command for running the bundled qsshd executable' and no README,...

[SECURITY] Fedora 35 Update: golang-github-rakyll-statik-0.1.7-4.fc35

Statik allows you to embed a directory of static files into your Go binary to be later served from an http.FileSystem...

Hashicorp vagrant-vmware-fusion 4.0.24 - Local Privilege Escalation

I have previously disclosed a couple of bugs in Hashicorp's vagrant-vmware-fusion plugin for vagrant. Unfortunately the 4.0.23 release which was supposed to fix the previous bug I reported didn't address the issue, so Hashicorp quickly put out another release - 4.0.24 - after that but didn't upda...

Hashicorp vagrant-vmware-fusion 4.0.24 Local Root Privilege Escalation Exploit

Exploit for windows platform in category local exploits I have previously disclosed a couple of bugs in Hashicorp's vagrant-vmware-fusion plugin for vagrant. Unfortunately the 4.0.23 release which was supposed to fix the previous bug I reported didn't address the issue, so Hashicorp quickly put o...