Internet Bug Bounty: RCE via ssh:// URIs in multiple VCS

🗓️ 14 Aug 2017 20:53:18Reported by joernchenType

hackerone

hackerone🔗 hackerone.com👁 79 Views

RCE via ssh:// URI in VCS, CVE-2017-9800, CVE-2017-1000116, CVE-2017-100011

Reporter	Title	Published	Views	Family All 323
0day.today	Apache Subversion Arbitrary Code Execution Vulnerability	14 Aug 201700:00	–	zdt
0day.today	Malicious GIT HTTP Server Exploit	31 Aug 201700:00	–	zdt
0day.today	Git <= 2.7.5 - Command Injection (Metasploit) Exploit	31 Aug 201700:00	–	zdt
0day.today	SourceTree Remote Code Execution Exploit	7 Sep 201700:00	–	zdt
IBM Security Bulletins	IBM Security Network Protection / IBM QRadar Network Security / XGS Technote Index	31 Jan 202100:10	–	ibm
IBM Security Bulletins	Security Bulletin: IBM QRadar Network Security is affected by vulnerability in subversion (CVE-2017-9800)	16 Jun 201822:03	–	ibm
IBM Security Bulletins	Security Bulletin: A vulnerability in subversion affects PowerKVM	18 Jun 201801:38	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in git affect PowerKVM	18 Jun 201801:38	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Security Vulnerabilities affect IBM® Cloud Private	20 Jul 201818:56	–	ibm
FreeBSD	Mercurial -- multiple vulnerabilities	10 Aug 201700:00	–	freebsd

21 Sep 2017 16:21Current

8.8High risk

Vulners AI Score8.8

EPSS0.70245

rce vulnerability ssh uri vcs cve recurity labs ibb bounty charity brain aneurysm cvss score bug bounty