CVE-2018-11235

CVE-2018-11235 Creazione automatica di repository Git dannosi per sfruttare CVE-2018-11235, un'esecuzione di codice remota tramite i sottomoduli Git. Post del blog: https://devblogs.microsoft.com/devops/announcing-the-may-2018-git-security-vulnerability/...

CVE-2018-11235

CVE-2018-11235 CVE-2018-11235...

cve-2018-11235-git-submodule-ce-and-docker-ngrok-configuration

CVE-2018-11235-Git-Submodule-CE + Configuração do Docker Ngrok PoC do CVE-2018-11235-Git e tunelamento com docker ngrok Construir o Dockerfile root@kitploit: $ docker build -t cve-2018-11235 . Criar rede personalizada para ngrok root@kitploit: $ docker network create myngroknet Iniciar o servidor...

CVE-2018-11235-poc

CVE-2018-11235-poc per la versione v2.7.4 Riferimenti 1.PoC di CHYbeta 2.CVE-2018-11235 - PoC rapido e sporco...

CVE-2018-11235-Git-Submodule-CE

CVE-2018-11235-Git-Submodule-CE CVE-2018-11235-Git PoC Von Docker pullen docker pull qweraqq/cve-2018-11235-git-submodule-rce Git-HTTP-Server starten docker run -d -p 8080:80 qweraqq/cve-2018-11235-git-submodule-rce PoC git clone --recurse-submodules http://git.gitserver/malicious.git...

clone_and_pwn

Cabeçalhos Título do Exploit: Clone and Pwn Data: 4 de junho de 2018 Autor do Exploit: Alejandro Caceres Página do fornecedor: https://git-scm.com/ Link do software: https://git-scm.com/downloads Versão: código arbitrário é executado nas versões do cliente git anteriores a Git 2.13.7, 2.14.x...

CVE-2018-11235

CVE-2018-11235...

CVE-2018-11235

CVE-2018-11235...

CVE-2018-11235-PoC

CVE-2018-11235 के लिए PoC शोषण root@kitploit: repository: http://REDACTED/2018-11235PoC.git/ return: Submodule 'aaa' https://repo1 registered for path 'aaa' Submodule '../../fakegit/modules/evil' https://repo2 registered for path 'evil' Submodule path 'aaa': checked out...

Exploit for Path Traversal in Debian Debian_Linux

CVE-2018-11235 1. ssh to your vps. 2. Clone this repo: ba...

BELL-CVE-2018-11235 CVE-2018-11235 does not affect BellSoft software

Bulletin has no description...

Mageia: Security Advisory (MGASA-2018-0267)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2018:2469-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2018:1872-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

centarnekretnine.me Cross Site Scripting vulnerability OBB-2008512

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Affected Website:| centarnekretnine.me ---|--- Open Bug...

SUSE: Security Advisory (SUSE-SU-2018:1566-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Git Submodules Directory Traversal (CVE-2018-11235)

A directory traversal vulnerability exists in the Git client. The vulnerability is due to insufficient validation of submodule names in the .gitmodules file during checkout. Successful exploitation of this vulnerability could enable the attacker to execute arbitrary scripts on the target system...

Huawei EulerOS: Security Advisory for git (EulerOS-SA-2019-1420)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for git (EulerOS-SA-2018-1215)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for git (EulerOS-SA-2018-1216)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...