111 matches found
SUSE SLES12: git / git-arch / git-core / git-cvs / git-daemon / git-doc / etc (SUSE-SU-2022:1306-1)
The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2022:1306-1 advisory. - CVE-2022-24765: Fixed a potential command injection via git worktree bsc1198234. Tenable has extracted the preceding description block...
Updated git packages fix security vulnerability
On multi-user machines, Git users might find themselves unexpectedly in a Git worktree, e.g. when another user created a repository in /tmp, in a mounted network drive or in a scratch space. Merely having a Git-aware prompt that runs 'git status' or 'git diff' and navigating to a directory which ...
Ubuntu: Security Advisory (USN-5376-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2022-24765
creationtimestamp| type| source ---|---|--- 2022-04-12 22:17:09+00:00| seen| https://t.me/cibsecurity/40669 2022-04-14 09:53:26+00:00| published-proof-of-concept| https://t.me/cKure/9345 2022-07-13 00:25:32+00:00| seen| https://t.me/cibsecurity/46093 2026-06-04 11:39:57+00:00| seen|...
CVE-2022-24765 Uncontrolled search for the Git directory in Git for Windows
Git for Windows is a fork of Git containing Windows-specific patches. This vulnerability affects users working on multi-user machines, where untrusted parties have write access to the same hard disk. Those untrusted parties could create the folder C:.git, which would be picked up by Git operation...
KLA12505 Multiple vulnerabilities in Microsoft Developer Tools
Multiple vulnerabilities were found in Microsoft Developer Tools. Malicious users can exploit these vulnerabilities to gain privileges, execute arbitrary code, cause denial of service. Below is a complete list of vulnerabilities: 1. An elevation of privilege vulnerability in Visual Studio can be...
Ubuntu 18.04 LTS / 20.04 LTS : Git vulnerability (USN-5376-1)
The remote Ubuntu 18.04 LTS / 20.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-5376-1 advisory. discovered that Git incorrectly handled certain repository paths in platforms with multiple users support. An attacker could possibly use this issue t...
CVE-2021-24765
creationtimestamp| type| source ---|---|--- 2022-02-01 16:26:47+00:00| seen| https://t.me/cibsecurity/36642...
CVE-2021-24765
The CVE-2021-24765 issue affects the WordPress Perfect Survey plugin up to version 1.5.2. The root cause is failure to validate/escape the X-Forwarded-For header when Anonymize IP is off, allowing Stored Cross-Site Scripting on the statistic page. Affected component: the plugin’s statistic page r...
CVE-2020-24765
InterMind iMind Server through 3.13.65 allows remote unauthenticated attackers to read the self-diagnostic archive via a direct api/rs/monitoring/rs/api/system/dump-diagnostic-info?server=127.0.0.1 request...
CVE-2020-24765
InterMind iMind Server up to version 3.13.65 is affected by an unauthenticated remote read of the self‑diagnostic archive via the endpoint /api/rs/monitoring/rs/api/system/dump-diagnostic-info?server=127.0.0.1. The issue allows remote attackers to access diagnostic archives, and reports describe ...