CVE-2024-10220-githooks

CVE-2024-10220 Prueba ref https://irsl.medium.com/sneaky-write-hook-git-clone-to-root-on-k8s-node-e38236205d54...

CVE-2024-32002-poc

Script Bash: !/bin/bash Set Git configuration options git config --global protocol.file.allow always git config --global core.symlinks true Avoid warning messages set default branch to main git config --global init.defaultBranch main Define tell-tale path telltalepath="$PWD/tell.tale" Initialize...

CVE-2026-47423-dompurify-xss-detector

Herramienta de detección de bypass de sanitizador para DOMPurify . En lugar de depender de comentarios del código fuente fácilmente eliminables o de variables de versión, esta herramienta realiza un fingerprinting lógico sobre los bundles JavaScript de producción minificados para identificar...

The vulnerability of the Clone() function in the modules/git/repo.go file of the Git repository management tool Gitea allows a attacker to perform an SSRF attack.

The vulnerability of the Clone function in the modules/git/repo.go file of the Git repository management tool Gitea is related to the use of a name with an incorrect reference. Exploiting this vulnerability could allow a remote attacker to perform an SSRF attack...

gitpython: GitPython: Remote Code Execution via malicious Git template

A flaw was found in GitPython. An incomplete denylist in the unsafegitcloneoptions function fails to restrict the --template option. This allows a remote attacker to supply a malicious Git template directory, leading to arbitrary command execution during clone operations...

gitpython: GitPython: Remote Code Execution via malicious Git template

A flaw was found in GitPython. An incomplete denylist in the unsafegitcloneoptions function fails to restrict the --template option. This allows a remote attacker to supply a malicious Git template directory, leading to arbitrary command execution during clone operations...

CVE-2026-102826

A flaw was found in simple-git. The library fails to properly sanitize Git configuration directives passed through custom clone arguments, which allows Git to load an attacker-controlled configuration file. By specifying executable settings within that configuration, an attacker can achieve...

AlmaLinux 9.2 [TuxCare] Security Update: git / git-all / git-core / git-core-doc / git-credential-libsecret / etc Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2025:1739386567)

The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2025:1739386567 advisory. - Git is a revision control system. Prior to versions 2.45.1, 2.44.1, 2.43.4, 2.42.2, 2.41.1, 2.40.2, and 2.39.4, local clones may e...

AlmaLinux 9.2 [TuxCare] Security Update: git / git-all / git-core / git-core-doc / git-credential-libsecret / etc (ALMALINUX9.2:CLSA-2025:1737153672)

The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2025:1737153672 advisory. - Git is a revision control system. Prior to versions 2.45.1, 2.44.1, 2.43.4, 2.42.2, 2.41.1, 2.40.2, and 2.39.4, repositories with submodule...

Rocky Linux 10.2 [CIQ] Security Update: mysql8.4 / mysql8.4-common / mysql8.4-debuginfo / etc Multiple Vulnerabilities (crlsa-2026_56007)

The Rocky Linux 10.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202656007 advisory. mysql: Performance Schema unspecified vulnerability CPU Jul 2026 CVE-2026-61081 mysql: Optimizer unspecified vulnerability CPU Jul 2026 CVE-2026-47064...

CentOS Linux 7 [TuxCare] Security Update: emacs-git / emacs-git-el / git / git-all / git-bzr / git-cvs / etc (CENTOS7:CLSA-2024:1722529344)

The CentOS Linux 7 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS7:CLSA-2024:1722529344 advisory. - Git is a revision control system. Prior to versions 2.45.1, 2.44.1, 2.43.4, 2.42.2, 2.41.1, 2.40.2, and 2.39.4, an attacker can prepare a local...

Relapse-Exploit

PS5 Relapse Exploit Supported firmware: 7.00 through 13.60...

EUVD-2026-71494

undici vulnerable to TLS certificate validation bypass via dropped connect options in BalancedPool...

Relapse-Exploit

PS5 Relapse Exploit Supported firmware: 7.00 through 13.60...

exploit

PS5 Relapse Exploit Supported firmware: 7.00 through 13.60...

Relapse-Exploit

PS5 Relapse Exploit Supported firmware: 7.00 through 13.60...

ps5-jb

PS5 Relapse Exploit Supported firmware: 7.00 through 13.60...

CLEANSTART-2026-NT71796 undici's BalancedPool constructor passes its entire options object through an internal deep-clone that serializes and reparses the value as JSON

Security vulnerability affects the langfuse package. undici's BalancedPool constructor passes its entire options object through an internal deep-clone that serializes and reparses the value as JSON...

PT-2026-102780

Marmite through 0.4.2 contains missing authentication in the development server endpoints / marmite /content, / marmite /config, and / marmite /file/, allowing unauthenticated attackers to create, modify, and overwrite site content and configuration. Attackers can exploit unsanitized path...

cgit < 1.2.1 - Directory Traversal

cGit 1.2.1 via cgitcloneobjects has a directory traversal vulnerability when enable-http-clone=1 is not turned off, as demonstrated by a cgit/cgit.cgi/git/objects/?path=../ request. id: CVE-2018-14912 info: name: cgit 1.2.1 - Directory Traversal author: 0xAkoko severity: high description: cGit...