44 matches found
openpcc
OpenPCC OpenPCC is an open-source framework for provably private AI inference, inspired by Apple’s Private Cloud Compute but fully open, auditable, and deployable on your own infrastructure. It allows anyone to run open or custom AI models without exposing prompts, outputs, or logs - enforcing...
vt-go
vt-go 这是 VirusTotal 的官方 Go 客户端库。使用此库，您无需使用标准 "http" 包发送普通 HTTP 请求，即可与 VirusTotal REST API v3 进行交互。 使用示例 root@kitploit: package main import "flag" "fmt" "log" "os" vt "github.com/VirusTotal/vt-go" var apikey = flag.String"apikey", "", "VirusTotal API key" var sha256 = flag.String"sha256", "",...
chaos-client
Chaos Client 与 Chaos 数据集 API 通信的 Go 客户端。 安装 root@kitploit: go install -v github.com/projectdiscovery/chaos-client/cmd/chaos@latest 使用 root@kitploit: chaos -h 这将会显示工具的帮助说明。以下是它支持的所有选项。 您还可以在 bash profile 中将 API 密钥设置为环境变量。 root@kitploit: export CHAOSKEY=CHAOSAPIKEY 如何利用 APIKEY Chaos DNS API...
CVE-2023-44487-
CVE-2023-44487- 1- 安装 Go。 2- 在一台独立的机器上运行服务器（server.go 文件） 3- 在另一台独立的机器上执行 main.go 文件。注意：main.go 包含攻击代码。 4. 指定目标的 IP 地址。 5- 定义请求数量：运行 main.go -requests 5000。...
CVE-2026-79921
A flaw was found in amqp091-go, a Go AMQP 0.9.1 client. A malicious AMQP broker could exploit this by sending oversized data frames, forcing the client to allocate excessive memory. This can lead to unexpected memory consumption and potentially cause the application to become unavailable, resulti...
github.com/rabbitmq/amqp091-go: amqp091-go: Denial of Service via oversized AMQP payloads
A flaw was found in amqp091-go, a Go AMQP 0.9.1 client. A malicious AMQP broker could exploit this by sending oversized data frames, forcing the client to allocate excessive memory. This can lead to unexpected memory consumption and potentially cause the application to become unavailable, resulti...
CVE-2026-79921 amqp091-go has a Potential Memory Exhaustion/Protocol Violation via Broker-Controlled Oversized Payload
amqp091-go is a Go AMQP 0.9.1 client. Before version 1.13.0, a compromised or malicious AMQP broker can force the client to allocate resources for and process content body frames that exceed the negotiated framemax limit. This can lead to unexpected memory consumption or application-layer denial ...
CVE-2026-21697
CVE-2026-21697 affects the Go HTTP client library axios4go. Prior to version 0.6.4, a race condition mutates the shared default http.Client configuration during request execution without synchronization, directly altering Transport, Timeout, and CheckRedirect. This can enable leakage of proxy con...
CVE-2026-21697 axios4go's Race Condition in Shared HTTP Client Allows Proxy Configuration Leak
axios4go is a Go HTTP client library. Prior to version 0.6.4, a race condition vulnerability exists in the shared HTTP client configuration. The global defaultClient is mutated during request execution without synchronization, directly modifying the shared http.Client's Transport, Timeout, and...
SUSE CVE-2025-14764
Missing cryptographic key commitment in the Amazon S3 Encryption Client for Go may allow a user with write access to the S3 bucket to introduce a new EDK that decrypts to different plaintext when the encrypted data key is stored in an "instruction file" instead of S3's metadata record. To mitigat...
CVE-2025-14764
Missing cryptographic key commitment in the Amazon S3 Encryption Client for Go may allow a user with write access to the S3 bucket to introduce a new EDK that decrypts to different plaintext when the encrypted data key is stored in an "instruction file" instead of S3's metadata record. To mitigat...
编号撤回
ch is a ClickHouse open source low-level Go client for ClickHouse. This CVE number has been withdrawn...
GHSA-47M2-4CR7-MHCW quic-go: Panic occurs when queuing undecryptable packets after handshake completion
Summary A misbehaving or malicious server can trigger an assertion in a quic-go client and crash the process by sending a premature HANDSHAKEDONE frame during the handshake. Impact A misbehaving or malicious server can cause a denial-of-service DoS attack on the quic-go client by triggering an...
EUVD-2022-24990
Malicious code in bioql PyPI...
Linux Distros Unpatched Vulnerability : CVE-2016-5397
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The Apache Thrift Go client library exposed the potential during code generation for command injection due to using an external formatting tool. Affected Apache...
GO-2025-3540 Potential out of order responses when CLIENT SETINFO times out during connection establishment in github.com/redis/go-redis
Potential out of order responses when CLIENT SETINFO times out during connection establishment in github.com/redis/go-redis...
Security Bulletin: IBM Storage Fusion HCI is vulnerable to denial of service, authentication bypass, and incorrect privilege assignment due to Golang vulnerabilities.
Summary IBM Storage Fusion HCI uses Golang packages that may cause Fusion to be vulnerable to denial of service, authentication bypass, and incorrect privilege assignment. CVE-2018-20699, CVE-2023-48795, CVE-2022-21698, CVE-2021-41190, CVE-2023-39325, CVE-2022-29526, CVE-2023-45288. Vulnerability...
Security Bulletin: Netcool Operations Insights 1.6.9 addresses multiple security vulnerabilities.
Summary Netcool Operations Insight v1.6.9 addresses multiple security vulnerabilities, listed in the CVEs below. Vulnerability Details CVEID:CVE-2022-42252 DESCRIPTION: Apache Tomcat is vulnerable to HTTP request smuggling, caused by the failure to reject a request containing an invalid...
Security Bulletin: IBM Edge Application Manager 4.5 addresses multiple security vulnerabilities
Summary IBM Edge Application Manager 4.5 addresses multiple security vulnerabilities, listed in the CVEs below. Vulnerability Details CVEID:CVE-2021-41190 DESCRIPTION: Open Container Initiative Distribution Specification could allow a remote authenticated attacker to bypass security restrictions,...
