103 matches found
CVE-2024-10220-githooks
CVE-2024-10220 Test ref https://irsl.medium.com/sneaky-write-hook-git-clone-to-root-on-k8s-node-e38236205d54...
CVE-2025-65964
n8n Git Hooks CTF Demo ⚠️ Dieses Repository dient ausschließlich zu Bildungs- und CTF-Demonstrationszwecken. Szenario Eine Automatisierungsplattform z. B. n8n verwendet Git-Operationen als Teil eines Workflows. Der Workflow erlaubt beliebige Git-Konfiguration über git config. Ein...
GitBackdorizer
GitBackdorizer BETA GitBackdorizer ist ein Proof-of-Concept, der vollständig von Ulisses Castros Vortrag 50 Tonnen Hintertüren inspiriert ist, und die mangelnde Aufmerksamkeit der Benutzer ausnutzt, um Git-Zugangsdaten zu stehlen. Wie es funktioniert GitBackdorizer besteht aus drei Komponenten:...
git-secrets
============= git-secrets Impedisce di committare password e altre informazioni sensibili in un repository git. .. contents:: :depth: 2 Sinossi :: root@kitploit: git secrets --scan -r|--recursive --cached --no-index --untracked ... git secrets --scan-history git secrets --install -f|--force git...
CVE-2021-21300
CVE-2021-21300 In diverse versioni di git, la gestione dei collegamenti simbolici non è rigorosa. Dopo aver caricato file su git da un filesystem case-sensitive ad esempio Linux, un host con filesystem case-insensitive ad esempio Windows che clona un repository malintenzionato può portare...
CVE-2025-8110-Gogs-Remote-Code-Execution
Betroffene Software: Gogs selbst gehosteter Git-Dienst Versionen vor 0.13.0. Schwachstellentyp: Befehlseinschleusung im Git-Hook-Mechanismus. Beschreibung: Ein Angreifer mit Push-Zugriff auf ein Repository kann einen bösartigen Git-Hook erstellen, der Befehle in das Post-Receive-Hook-Skript...
CVE-2020-14144-GiTea-git-hooks-rce
CVE-2020-14144 - تنفيذ التعليمات البرمجية عن بُعد بعد المصادقة في GiTea سكربت لاستغلال CVE-2020-14144 - تنفيذ التعليمات البرمجية عن بُعد بعد المصادقة في GiTea باستخدام git hooks الميزات توليد تلقائي لحمولة القشرة العكسية Reverse Shell من IP والمنفذ رفع سكربت شل مخصص وتنفيذه عن بُعد باستخدام الخيا...
CVE-2026-52813-Gogs-RCE
CVE-2026-52813 — Path traversal di Gogs che porta a esecuzione remota di codice tramite Git hooks analisi difensiva Ricerca sulla sicurezza / writeup orientato alla blue team. Questo repository non contiene PoC weaponizzati. I ricercatori che desiderano riprodurre il problema devono utilizzare il...
Gitea-Git-Hooks-RCE-CVE-2020-14144-
Gitea Git Hooks RCE CVE-2020-14144 OffsecProvingGrounds अभ्यास — Roquefort मशीन राइटअप और POC अवलोकन...
Linux Distros Unpatched Vulnerability : CVE-2026-76218
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GitPython before 3.1.58 contains a remote code execution vulnerability in Repo.init that forwards unsafe git options without validation. Attackers can supply a...
CVE-2026-76218
GitPython before 3.1.58 contains a remote code execution vulnerability in Repo.init that forwards unsafe git options without validation. Attackers can supply a template parameter pointing to a directory with malicious git hooks that execute arbitrary code when git operations are performed on the...
EUVD-2026-62459
GitPython before 3.1.58 contains a remote code execution vulnerability in Repo.init that forwards unsafe git options without validation. Attackers can supply a template parameter pointing to a directory with malicious git hooks that execute arbitrary code when git operations are performed on the...
CVE-2026-76218 GitPython before 3.1.58 Remote Code Execution via Repo.init
GitPython before 3.1.58 contains a remote code execution vulnerability in Repo.init that forwards unsafe git options without validation. Attackers can supply a template parameter pointing to a directory with malicious git hooks that execute arbitrary code when git operations are performed on the...
CVE-2026-76218
GitPython before 3.1.58 has an RCE flaw in Repo.init that passes unvalidated git options, allowing attackers to inject a template directory with malicious hooks executed during subsequent git operations. Affected libraries should upgrade to 3.1.58 or later; no in-the-wild exploitation is reported...
CVE-2026-76218 GitPython before 3.1.58 Remote Code Execution via Repo.init
GitPython before 3.1.58 contains a remote code execution vulnerability in Repo.init that forwards unsafe git options without validation. Attackers can supply a template parameter pointing to a directory with malicious git hooks that execute arbitrary code when git operations are performed on the...
CVE-2026-76218 GitPython before 3.1.58 Remote Code Execution via Repo.init
GitPython before 3.1.58 contains a remote code execution vulnerability in Repo.init that forwards unsafe git options without validation. Attackers can supply a template parameter pointing to a directory with malicious git hooks that execute arbitrary code when git operations are performed on the...
PT-2026-78400
Name of the Vulnerable Software and Affected Versions GitPython versions prior to 3.1.58 Description A remote code execution issue exists in the Repo.init function. The software forwards unsafe git options without proper validation, allowing an attacker to provide a template parameter that points...
CVE-2026-72767
n8n before 1.123.67, 2.x before 2.31.5, and 2.32.x before 2.32.1 contain a remote code execution vulnerability in the Git node. Authenticated users with rights to create and execute workflows can stage a crafted local repository that causes git to run hooks under default git security settings,...
CVE-2026-72767
The CVE covers n8n prior to 1.123.67, and 2.x prior to 2.31.5 (and 2.32.x prior to 2.32.1), with a remote code execution flaw in the Git node. Authenticated users who can create/execute workflows can stage a crafted local repository, causing Git to run hooks under default security settings and ex...
CVE-2026-72767 n8n before 1.123.67 Remote Code Execution via Git node
n8n before 1.123.67, 2.x before 2.31.5, and 2.32.x before 2.32.1 contain a remote code execution vulnerability in the Git node. Authenticated users with rights to create and execute workflows can stage a crafted local repository that causes git to run hooks under default git security settings,...