### [CVE-2018-6574](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-6574)
![](https://img.shields.io/static/v1?label=Product&message=n%2Fa&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=n%2Fa&color=blue)
![](https://img.shields.io/static/v1?label=Vulnerability&message=n%2Fa&color=brighgreen)

### Description

Go before 1.8.7, Go 1.9.x before 1.9.4, and Go 1.10 pre-releases before Go 1.10rc2 allow "go get" remote command execution during source code build, by leveraging the gcc or clang plugin feature, because -fplugin= and -plugin= arguments were not blocked.

### POC

#### Reference
- https://github.com/KINGSABRI/CVE-in-Ruby/tree/master/CVE-2018-6574

#### Github
- https://github.com/0xT11/CVE-POC
- https://github.com/20matan/CVE-2018-6574-POC
- https://github.com/ARPSyndicate/cvemon
- https://github.com/AdriVillaB/CVE-2018-6574
- https://github.com/AnKItdo/CVE_2018-6574
- https://github.com/Cypheer/exploit_CVE-2018-6574
- https://github.com/Dannners/CVE-2018-6574-go-get-RCE
- https://github.com/Devang-Solanki/CVE-2018-6574
- https://github.com/Eugene24/CVE-2018-6574
- https://github.com/FilipeFraqueiro/CVE-2018-6574
- https://github.com/InfoSecJack/CVE-2018-6574
- https://github.com/ItsFadinG/CVE-2018-6574
- https://github.com/Malone5923/CVE-2018-6574-go-get-RCE
- https://github.com/MohamedTarekq/test-CVE-2018-6574-
- https://github.com/NikolaT3sla/cve-2018-6574
- https://github.com/No1zy/CVE-2018-6574-PoC
- https://github.com/NsByte/CVE-2018-6574
- https://github.com/OLAOLAOLA789/CVE-2018-6574
- https://github.com/PLP-Orange/cve-2018-6574-exercise
- https://github.com/R3dAlch3mist/cve-2018-6574
- https://github.com/TakuCoder/CVE-2018-6574
- https://github.com/ThaFWord/pentesterlab
- https://github.com/VikasVarshney/CVE_2018_6574
- https://github.com/Xifeng2009/go_get_cve_2018_6574
- https://github.com/Yashrk078/Test_CVE-2018-6574
- https://github.com/Yealid/CVE-2018-6574
- https://github.com/Zeeshan12340/CVE-2018-6574
- https://github.com/acole76/cve-2018-6574
- https://github.com/ahmetmanga/cve-2018-6574
- https://github.com/ahmetmanga/go-get-rce
- https://github.com/amil-ptl-test/ptl_cve_2018_6574
- https://github.com/antunesmpedro/CVE-2018-6574
- https://github.com/asavior2/CVE-2018-6574
- https://github.com/chaosura/CVE-2018-6574
- https://github.com/chr1sM/CVE-2018-6574
- https://github.com/coblax/CVE-2018-6574
- https://github.com/cristiandrami/pentesterlab_CVE-2018-6574
- https://github.com/d4rkshell/go-get-rce
- https://github.com/darthvader-htb/CVE-2018-6574
- https://github.com/doantung99/pentesterlab
- https://github.com/drset/golang
- https://github.com/duckzsc2/CVE-2018-6574-POC
- https://github.com/faiqu3/cve-2018-6574
- https://github.com/french560/ptl6574
- https://github.com/frozenkp/CVE-2018-6574
- https://github.com/frozenkp/gdoor
- https://github.com/hasharmujahid/CVE-2018-6574-go-get-RCE
- https://github.com/hectorgie/PoC-in-GitHub
- https://github.com/illnino/CVE-2018-6574
- https://github.com/imojne/CVE-2018-6574-POC
- https://github.com/it3x55/CVE-2018-6574
- https://github.com/j4k0m/CVE-2018-6574
- https://github.com/jahwni/CVE-2018-6574
- https://github.com/jaya522/CVE-2018-6574-go-get-RCE
- https://github.com/jeyaseelans86/CVE-2018-6574
- https://github.com/jeyaseelans86/new-CVE-2018-6574
- https://github.com/jftierno/-CVE-2018-6574
- https://github.com/jftierno/CVE-2018-6574
- https://github.com/jftierno/CVE-2018-6574-2
- https://github.com/jongmartinez/CVE-2018-6574-POC
- https://github.com/k3nundrum/demo
- https://github.com/kawkab101/cve-2018-6574
- https://github.com/kenprice/cve-2018-6574
- https://github.com/kev-ho/cve-2018-6574-payload
- https://github.com/killtr0/POC-CVE-2018-6574
- https://github.com/l3ouu4n9/CVE-2018-6574-POC
- https://github.com/lsnakazone/cve-2018-6574
- https://github.com/markisback/CVE-2018-6574
- https://github.com/mekhalleh/cve-2018-6574
- https://github.com/mhamed366/CVE-2018-6574
- https://github.com/mux0x/CVE-2018-6574
- https://github.com/neargle/CVE-2018-6574-POC
- https://github.com/neargle/Go-Get-RCE-CVE-2018-6574-POC
- https://github.com/neargle/my-re0-k8s-security
- https://github.com/noname-nohost/CVE-2018-6574
- https://github.com/noobTest1122/CVE-2018-6574
- https://github.com/nthuong95/CVE-2018-6574
- https://github.com/orgTestCodacy11KRepos110MB/repo-3574-my-re0-k8s-security
- https://github.com/pswalia2u/CVE-2018-6574
- https://github.com/purgedemo/CVE-2018-6574
- https://github.com/purgedemo/CVE-2018-6574_2
- https://github.com/qweraqq/CVE-2018-6574
- https://github.com/redirected/cve-2018-6574
- https://github.com/repos13579/labCVE-2018-6574
- https://github.com/sdosis/cve-2018-6574
- https://github.com/sec000/cve-2018-6574
- https://github.com/seoqqq/cve2018
- https://github.com/shadofren/CVE-2018-6574
- https://github.com/the-valluvarsploit/CVE-2018-6574
- https://github.com/theJuan1112/pentesterlab-cve-2018-6574
- https://github.com/tjcim/cve-2018-6574
- https://github.com/twseptian/cve-2018-6574
- https://github.com/veter069/go-get-rce
- https://github.com/vishack/CVE-2018-6574
- https://github.com/wb4r/go-get-rce
- https://github.com/yashanand/cve-2018-6574
- https://github.com/yavolo/CVE-2018-6574
- https://github.com/yitingfan/CVE-2018-6574_demo
- https://github.com/zerbaliy3v/cve-2018-6574-exploit
- https://github.com/zur250/Zur-Go-GET-RCE-Solution