cve/2018/CVE-2018-6574.md

CVE-2018-6574

Description

Go before 1.8.7, Go 1.9.x before 1.9.4, and Go 1.10 pre-releases before Go 1.10rc2 allow "go get" remote command execution during source code build, by leveraging the gcc or clang plugin feature, because -fplugin= and -plugin= arguments were not blocked.

POC

Reference

• https://github.com/KINGSABRI/CVE-in-Ruby/tree/master/CVE-2018-6574
• https://github.com/KINGSABRI/CVE-in-Ruby/tree/master/CVE-2018-6574

Github

• https://github.com/0xT11/CVE-POC
• https://github.com/20matan/CVE-2018-6574-POC
• https://github.com/ARPSyndicate/cvemon
• https://github.com/AdriVillaB/CVE-2018-6574
• https://github.com/AnKItdo/CVE_2018-6574
• https://github.com/Cypheer/exploit_CVE-2018-6574
• https://github.com/Dannners/CVE-2018-6574-go-get-RCE
• https://github.com/Devang-Solanki/CVE-2018-6574
• https://github.com/Eugene24/CVE-2018-6574
• https://github.com/FilipeFraqueiro/CVE-2018-6574
• https://github.com/InfoSecJack/CVE-2018-6574
• https://github.com/ItsFadinG/CVE-2018-6574
• https://github.com/Malone5923/CVE-2018-6574-go-get-RCE
• https://github.com/MohamedTarekq/test-CVE-2018-6574-
• https://github.com/NikolaT3sla/cve-2018-6574
• https://github.com/No1zy/CVE-2018-6574-PoC
• https://github.com/NsByte/CVE-2018-6574
• https://github.com/OLAOLAOLA789/CVE-2018-6574
• https://github.com/PLP-Orange/cve-2018-6574-exercise
• https://github.com/R3dAlch3mist/cve-2018-6574
• https://github.com/TakuCoder/CVE-2018-6574
• https://github.com/ThaFWord/pentesterlab
• https://github.com/VikasVarshney/CVE_2018_6574
• https://github.com/Xifeng2009/go_get_cve_2018_6574
• https://github.com/Yashrk078/Test_CVE-2018-6574
• https://github.com/Yealid/CVE-2018-6574
• https://github.com/Zeeshan12340/CVE-2018-6574
• https://github.com/acole76/cve-2018-6574
• https://github.com/ahmetmanga/cve-2018-6574
• https://github.com/ahmetmanga/go-get-rce
• https://github.com/amil-ptl-test/ptl_cve_2018_6574
• https://github.com/antunesmpedro/CVE-2018-6574
• https://github.com/asavior2/CVE-2018-6574
• https://github.com/chaosura/CVE-2018-6574
• https://github.com/chr1sM/CVE-2018-6574
• https://github.com/coblax/CVE-2018-6574
• https://github.com/cristiandrami/pentesterlab_CVE-2018-6574
• https://github.com/d4rkshell/go-get-rce
• https://github.com/darthvader-htb/CVE-2018-6574
• https://github.com/doantung99/pentesterlab
• https://github.com/drset/golang
• https://github.com/duckzsc2/CVE-2018-6574-POC
• https://github.com/faiqu3/cve-2018-6574
• https://github.com/french560/ptl6574
• https://github.com/frozenkp/CVE-2018-6574
• https://github.com/frozenkp/gdoor
• https://github.com/hasharmujahid/CVE-2018-6574-go-get-RCE
• https://github.com/hectorgie/PoC-in-GitHub
• https://github.com/illnino/CVE-2018-6574
• https://github.com/imojne/CVE-2018-6574-POC
• https://github.com/it3x55/CVE-2018-6574
• https://github.com/j4k0m/CVE-2018-6574
• https://github.com/jahwni/CVE-2018-6574
• https://github.com/jaya522/CVE-2018-6574-go-get-RCE
• https://github.com/jeyaseelans86/CVE-2018-6574
• https://github.com/jeyaseelans86/new-CVE-2018-6574
• https://github.com/jftierno/-CVE-2018-6574
• https://github.com/jftierno/CVE-2018-6574
• https://github.com/jftierno/CVE-2018-6574-2
• https://github.com/jongmartinez/CVE-2018-6574-POC
• https://github.com/k3nundrum/demo
• https://github.com/kawkab101/cve-2018-6574
• https://github.com/kenprice/cve-2018-6574
• https://github.com/kev-ho/cve-2018-6574-payload
• https://github.com/killtr0/POC-CVE-2018-6574
• https://github.com/l3ouu4n9/CVE-2018-6574-POC
• https://github.com/lsnakazone/cve-2018-6574
• https://github.com/markisback/CVE-2018-6574
• https://github.com/mekhalleh/cve-2018-6574
• https://github.com/mhamed366/CVE-2018-6574
• https://github.com/mux0x/CVE-2018-6574
• https://github.com/neargle/CVE-2018-6574-POC
• https://github.com/neargle/Go-Get-RCE-CVE-2018-6574-POC
• https://github.com/neargle/my-re0-k8s-security
• https://github.com/noname-nohost/CVE-2018-6574
• https://github.com/noobTest1122/CVE-2018-6574
• https://github.com/nthuong95/CVE-2018-6574
• https://github.com/orgTestCodacy11KRepos110MB/repo-3574-my-re0-k8s-security
• https://github.com/pswalia2u/CVE-2018-6574
• https://github.com/purgedemo/CVE-2018-6574
• https://github.com/purgedemo/CVE-2018-6574_2
• https://github.com/qweraqq/CVE-2018-6574
• https://github.com/redirected/cve-2018-6574
• https://github.com/repos13579/labCVE-2018-6574
• https://github.com/sdosis/cve-2018-6574
• https://github.com/sec000/cve-2018-6574
• https://github.com/seoqqq/cve2018
• https://github.com/shadofren/CVE-2018-6574
• https://github.com/the-valluvarsploit/CVE-2018-6574
• https://github.com/theJuan1112/pentesterlab-cve-2018-6574
• https://github.com/tjcim/cve-2018-6574
• https://github.com/twseptian/cve-2018-6574
• https://github.com/veter069/go-get-rce
• https://github.com/vishack/CVE-2018-6574
• https://github.com/wb4r/go-get-rce
• https://github.com/yashanand/cve-2018-6574
• https://github.com/yavolo/CVE-2018-6574
• https://github.com/yitingfan/CVE-2018-6574_demo
• https://github.com/zerbaliy3v/cve-2018-6574-exploit
• https://github.com/zur250/Zur-Go-GET-RCE-Solution