52 matches found
CVE-2025-48384
PoC for CVE-2025-48384 See CVE-2025-48384 To run: git -c protocol.file.allow=always clone --recurse-submodules [email protected]:liamg/CVE-2025-48384.git Example output: git -c protocol.file.allow=always clone --recurse-submodules CVE-2025-48384 test Cloning into 'test'... done. 'ubmodule...
CVE-2025-48384-test
Reproduce Command Line git clone --recursive https://github.com/beishanxueyuan/CVE-2025-48384-test.git 修改指向的GitHub仓库 git init repo git -C repo -c protocol.file.allow=always submodule add https://github.com/beishanxueyuan/CVE-2025-48384.git sub git -C repo mv sub $printf "sub\r" git config unset -...
CVE-2026-106219
In JetBrains TeamCity before 2026.2.1 missing validation of Git submodule URLs allowed reading local repositories on the server...
EUVD-2026-93505
In JetBrains TeamCity before 2026.2.1 missing validation of Git submodule URLs allowed reading local repositories on the server...
CVE-2026-106219
In JetBrains TeamCity before 2026.2.1 missing validation of Git submodule URLs allowed reading local repositories on the server...
CVE-2026-106219
JetBrains TeamCity versions prior to 2026.2.1 are affected by a vulnerability where insufficient validation of Git submodule URLs allows for the unauthorized reading of local repositories hosted on the server. The root cause is identified as CWE-73 (External Control of File Name or Path). To reme...
CVE-2026-106219
In JetBrains TeamCity before 2026.2.1 missing validation of Git submodule URLs allowed reading local repositories on the server...
PT-2026-106802
Name of the Vulnerable Software and Affected Versions JetBrains TeamCity versions prior to 2026.2.1 Description Insufficient validation of Git submodule URLs allows for the unauthorized reading of local repositories hosted on the server. Recommendations Update to version 2026.2.1...
CVE-2018-11235-DEMO
CVE-2018-11235 Usage chybeta@ubuntu git clone https://github.com/CHYbeta/CVE-2018-11235-DEMO.git chybeta@ubuntu cd CVE-2018-11235-DEMO chybeta@ubuntu /CVE-2018-11235-DEMO /usr/local/bin/git --version git version 2.17.0 chybeta@ubuntu /CVE-2018-11235-DEMO ./build.sh Analysis RCE with Git submodule...
cve-2024-32002-submodule-rce
CVE-2024-32002 RCE Submodule A submodule to demonstrate CVE-2024-32002. Demonstrates Remote Code Execution RCE by loading a malicious commit hook into the .git directory of the parent repo. See cve-2024-32002-poc-rce for the working POC that utilises this repo. What this repo contains A malicous...
CVE-2025-48384-submodule
CVE-2025-48384 Submodule This submodule contains a malicious post-checkout hook for demonstration...
docker-cve-2022-39253-poc
docker host file read using cve-2022-39253 poc PoC reproduce environment $ docker run --name=cve-2022-39253 -ti -d ssst0n3/dockerarchive:gitcve-2022-39253 $ docker attach --detach-keys ctrl-x cve-2022-39253 use ctrl-x to exit container's terminal wait minutes for environment starting ... ... Ubun...
ANT-2026-6SNS6KMP · GitoxideLabs/gitoxide · Remote Code Execution
rce high GHSA-f26g-jm89-4g65 Severity Claude high · Security research firm - · Maintainer high Discovered by Claude Mythos Preview REPORT Anthropic's analysis of this finding, sealed at approval. ANT-2026-6SNS6KMP: RCE when updating a Git submodule of a malicious repository Updating a Git submodu...
CVE-2026-30461
Daylight Studio FuelCMS v1.5.2 was discovered to contain an authenticated remote code execution RCE vulnerability via the /controllers/Installer.php and the function addgitsubmodule...
EUVD-2026-22976
Daylight Studio FuelCMS v1.5.2 was discovered to contain an authenticated remote code execution RCE vulnerability via the /controllers/Installer.php and the function addgitsubmodule...
FUEL CMS 安全漏洞
FUEL CMS is a content management system CMS developed by David McReynolds using the Codelgniter framework. Version 1.5.2 of FUEL CMS has a security vulnerability that stems from authenticated remote code execution. This vulnerability could allow arbitrary code to be executed through the...
CVE-2026-30461
Daylight Studio FuelCMS v1.5.2 was discovered to contain an authenticated remote code execution RCE vulnerability via the /controllers/Installer.php and the function addgitsubmodule...
CVE-2026-30461
Daylight Studio FuelCMS v1.5.2 contains an authenticated remote code execution (RCE) vulnerability. The issue resides in the add_git_submodule function within the /controllers/Installer.php file, where a lack of enforced access control allows authenticated users to clone arbitrary repositories. I...
