CVE-2020-14144-GiTea-git-hooks-rce

CVE-2020-14144 - Ejecución remota de código autenticada en GiTea Un script para explotar CVE-2020-14144 - Ejecución remota de código autenticada en GiTea mediante ganchos de git Características Generación automática de payload de shell inversa desde IP y PUERTO Subir script de shell personalizado...

git-secrets

=========== git-secrets Evita que comprometas contraseñas y otra información sensible en un repositorio de git. .. contents:: :depth: 2 Sinopsis :: root@kitploit: git secrets --scan -r|--recursive --cached --no-index --untracked ... git secrets --scan-history git secrets --install -f|--force git...

CVE-2021-21300

CVE-2021-21300 En múltiples versiones de git, el manejo de los enlaces simbólicos no es estricto. Después de subir archivos a git en un sistema de archivos sensible a mayúsculas por ejemplo, Linux, clonar un repositorio malicioso en un host que utilice un sistema de archivos insensible a mayúscul...

GitBackdorizer

GitBackdorizer BETA GitBackdorizer es una prueba de concepto, totalmente inspirada en la charla de Ulisses Castro 50 ton of backdoors, que abusa de la falta de atención del usuario para robar credenciales de acceso a git. Cómo funciona GitBackdorizer consta de tres partes: el handler, el dropper ...

Gitea-Git-Hooks-RCE-CVE-2020-14144-

Gitea Git Hooks RCE CVE-2020-14144 Práctica de OffsecProvingGrounds — Informe de la Máquina Roquefort y POC Resumen...

CVE-2025-8110-Gogs-Remote-Code-Execution

Software afectado: Gogs servicio Git auto‑alojado versiones anteriores a la 0.13.0. Tipo de vulnerabilidad: Inyección de comandos en el mecanismo de hooks de Git. Descripción: Un atacante con acceso de push a un repositorio puede crear un hook de Git malicioso que inyecta comandos en el script de...

CVE-2024-10220-githooks

CVE-2024-10220 Test ref https://irsl.medium.com/sneaky-write-hook-git-clone-to-root-on-k8s-node-e38236205d54...

CVE-2026-52813-Gogs-RCE

CVE-2026-52813 — Path traversal en Gogs que conduce a ejecución remota de código en Git Hooks análisis defensivo Investigación de seguridad / writeup para equipo azul. Este repositorio no contiene ningún PoC weaponizado. Los investigadores que necesiten reproducir el fallo deben usar el PoC públi...

CVE-2025-65964

n8n Git Hooks CTF Demo ⚠️ This repository is for educational and CTF demonstration purposes only. Scenario An automation platform e.g., n8n uses Git operations as part of a workflow. The workflow allows arbitrary Git configuration via git config. An attacker-controlled workflow sets: root@kitploit...

gitpython: GitPython: Remote Code Execution via malicious Git hooks

A flaw was found in GitPython. This vulnerability allows a remote attacker to achieve arbitrary code execution. By supplying a specially crafted template parameter to the Repo.init function, an attacker can point to a directory containing malicious Git hooks. When Git operations are performed on...

CVE-2026-19590

OpenAI Codex Desktop for Windows and macOS could execute attacker-controlled Git hooks because automated Git operations trusted the repository's local core.hooksPath setting. If a user opens an attacker-prepared repository whose preserved .git/config points core.hooksPath to an attacker-controlle...

EUVD-2026-69393

OpenAI Codex Desktop for Windows and macOS could execute attacker-controlled Git hooks because automated Git operations trusted the repository's local core.hooksPath setting. If a user opens an attacker-prepared repository whose preserved .git/config points core.hooksPath to an attacker-controlle...

CVE-2026-19590

OpenAI Codex Desktop for Windows and macOS could execute attacker-controlled Git hooks because automated Git operations trusted the repository's local core.hooksPath setting. If a user opens an attacker-prepared repository whose preserved .git/config points core.hooksPath to an attacker-controlle...

CVE-2026-19590

OpenAI Codex Desktop for Windows and macOS could execute attacker-controlled Git hooks because its automated Git operations trusted the repository-local core.hooksPath setting in .git/config. If a user opens a crafted repository where this setting points to an attacker-controlled directory, a mal...

PT-2026-84354

Name of the Vulnerable Software and Affected Versions OpenAI Codex Desktop for Windows and macOS affected versions not specified Description OpenAI Codex Desktop can execute attacker-controlled Git hooks due to automated Git operations trusting the repository local core.hooksPath setting. If a us...

CVE-2026-78676

GitPython before 3.1.59 fails to safely re-serialize multi-line git-config values during write operations, corrupting dormant quoted values into injected directives like core.hooksPath. Attackers can craft config files with embedded newlines that become live git directives after any unrelated...

SUSE CVE-2026-76218

GitPython before 3.1.58 contains a remote code execution vulnerability in Repo.init that forwards unsafe git options without validation. Attackers can supply a template parameter pointing to a directory with malicious git hooks that execute arbitrary code when git operations are performed on the...

Linux Distros Unpatched Vulnerability : CVE-2026-76218

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GitPython before 3.1.58 contains a remote code execution vulnerability in Repo.init that forwards unsafe git options without validation. Attackers can supply a...

Duplicate Advisory: GitPython: Unguarded git option forwarding in Repo.init enables arbitrary command execution via --template clone hooks

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-9rj7-rf2p-w77r. This link is maintained to preserve external references. Original Description GitPython before 3.1.58 contains a remote code execution vulnerability in Repo.init that forwards unsafe git options...

CVE-2026-76218

GitPython before 3.1.58 contains a remote code execution vulnerability in Repo.init that forwards unsafe git options without validation. Attackers can supply a template parameter pointing to a directory with malicious git hooks that execute arbitrary code when git operations are performed on the...