CVE-2015-8968

git-fastclone before 1.0.1 permits arbitrary shell command execution from .gitmodules. If an attacker can instruct a user to run a recursive clone from a repository they control, they can get a client to run an arbitrary shell command. Alternately, if an attacker can MITM an unencrypted git clone...

CVE-2015-8969

git-fastclone before 1.0.5 passes user modifiable strings directly to a shell command. An attacker can execute malicious commands by modifying the strings that are passed as arguments to "cd " and "git clone " commands in the library...

CVE-2015-8968

CVE-2015-8968 affects git-fastclone prior to 1.0.1, enabling arbitrary shell command execution via .gitmodules when cloning recursively or updating submodules. The exploit occurs through ext helper URLs (git-remote-ext) embedded in submodules, allowing command execution either over cloned repos o...

kernel: Information leak when truncating of compressed/inlined extents on BTRFS

An information-leak vulnerability was found in the kernel when it truncated a file to a smaller size which consisted of an inline extent that was compressed. The data between the new file size and the old file size was not discarded and the number of bytes used by the inode were not correctly...

kernel: Information leak when truncating of compressed/inlined extents on BTRFS

An information-leak vulnerability was found in the kernel when it truncated a file to a smaller size which consisted of an inline extent that was compressed. The data between the new file size and the old file size was not discarded and the number of bytes used by the inode were not correctly...

CVE-2015-8968: Improper Neutralization of Special Elements used in a Command

git-fastclone before 1.0.1 permits arbitrary shell command execution from .gitmodules. If an attacker can instruct a user to run a recursive clone from a repository they control, they can get a client to run an arbitrary shell command. Alternately, if an attacker can MITM an unencrypted git clone...

PT-2016-4080

Name of the Vulnerable Software and Affected Versions git-fastclone versions prior to 1.0.5 Description The issue allows an attacker to execute malicious commands by modifying user modifiable strings that are passed as arguments to cd and git clone commands in the library. This is due to the...

The vulnerability of the Linux operating system, which allows a hacker to send signals to privileged processes

The vulnerability of the Linux operating system’s system call clone kernel function is related to deficiencies in access control. Exploiting this vulnerability allows an attacker, operating locally, to send signals to privileged parent processes from unprivileged child processes by creating a new...

PT-2016-4079

Name of the Vulnerable Software and Affected Versions git-fastclone versions prior to 1.0.1 Description The issue allows for arbitrary shell command execution from .gitmodules. An attacker can exploit this by instructing a user to run a recursive clone from a controlled repository, or by performi...

CVE-2015-8969: Improper Neutralization of Special Elements used in a Command

git-fastclone before 1.0.5 passes user modifiable strings directly to a shell command. An attacker can execute malicious commands by modifying the strings that are passed as arguments to "cd " and "git clone " commands in the library...

Just Dial Clone Script SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: SQL Injection in Just Dial Clone Script Date: 20 October 2016 Exploit Author: Arbin Godar Website : ArbinGodar.com Vendor: http://www.i-netsolution.com/...

Just Dial Clone Script SQL Injection

Exploit Title: SQL Injection in Just Dial Clone Script Date: 20 October 2016 Exploit Author: Arbin Godar Website : ArbinGodar.com Vendor: http://www.i-netsolution.com/ ---------------------------------------------------------------------------------------------------------------------- Proof of...

Just Dial Clone Script - srch SQL Injection

Just Dial Clone Script - srch SQL Injection Exploit Title: SQL Injection in Just Dial Clone Script Date: 20 October 2016 Exploit Author: Arbin Godar Website : ArbinGodar.com Vendor: http://www.i-netsolution.com/...

Just Dial Clone Script - 'srch' SQL Injection

Exploit Title: SQL Injection in Just Dial Clone Script Date: 20 October 2016 Exploit Author: Arbin Godar Website : ArbinGodar.com Vendor: http://www.i-netsolution.com/ ---------------------------------------------------------------------------------------------------------------------- Proof of...

B2B Portal Script - Blind SQL Injection Vulnerability

Exploit for php platform in category web applications x========================================================================================================================================x | Title : B2B Portal Script Blind SQL Vulnerabilities | Software : B2B Portal Script | Vendor :...

Just Dial Clone Script - SQL Injection Vulnerability

Exploit for php platform in category web applications x========================================================================================================================================x | Title : Just Dial Clone Script SQL & XSS Vulnerabilities | Software : Just Dial Clone | Vendor :...

Just Dial Clone Script SQL Injection

x========================================================================================================================================x | Title : Just Dial Clone Script SQL & XSS Vulnerabilities | Software : Just Dial Clone | Vendor : http://www.i-netsolution.com/ | Demo :...

B2B Portal Script Blind SQL Injection

x========================================================================================================================================x | Title : B2B Portal Script Blind SQL Vulnerabilities | Software : B2B Portal Script | Vendor : http://www.i-netsolution.com/ | Demo :...

B2B Portal Script - Blind SQL Injection

B2B Portal Script - Blind SQL Injection x========================================================================================================================================x | Title : B2B Portal Script Blind SQL Vulnerabilities | Software : B2B Portal Script | Vendor :...

Just Dial Clone Script - 'fid' SQL Injection

x========================================================================================================================================x | Title : Just Dial Clone Script SQL & XSS Vulnerabilities | Software : Just Dial Clone | Vendor : http://www.i-netsolution.com/ | Demo :...