31 matches found
CVE-2022-39275
CVE-2022-39275 CVE-2022-39275 के लिए POC। परामर्श के लिए संसाधन: NIST NVD CVE.org Github Security Advisory यह कमिट हैश 47f9f5fb29be2b5892c79ace4f23022f397a0a5e link का एक फोर्क है, बस इसे फिर से पुश किया गया क्योंकि git सबमॉड्यूल भी थे जिन्हें बदलना था। POC-Setup setup guide का पालन करें। यदि यह...
CVE-2024-32002
CVE-2024-32002 إثبات مفهوم RCE نظرة عامة يحتوي هذا المستودع على إثبات مفهوم PoC للثغرة CVE-2024-32002، وهي ثغرة تنفيذ برمجيات عن بُعد RCE في الوحدات الفرعية لـ Git. يوضح الاستغلال كيف يمكن تشغيل حمولة خبيثة عبر استنساخ متكرر لمستودع Git. إعداد المستودع قبل تشغيل إثبات المفهوم، أنشئ المستودعات...
CVE-2024-32002
CVE-2024-32002 RCE PoC نظرة عامة يحتوي هذا المستودع على إثبات مفهوم PoC للثغرة CVE-2024-32002، وهي ثغرة تنفيذ برمجي عن بُعد RCE في الوحدات الفرعية لـ Git. يوضح الاستغلال كيف يمكن تشغيل حمولة خبيثة عبر استنساخ متكرر لمستودع Git. إعداد المستودع قبل تشغيل الـ PoC، قم بإنشاء المستودعات التالية على خا...
Cve-2024-32002-poc
CVE-2024-32002 RCE PoC अवलोकन इस रिपॉजिटरी में CVE-2024-32002 के लिए एक प्रूफ ऑफ कॉन्सेप्ट PoC शामिल है, जो Git सबमॉड्यूल्स में एक रिमोट कोड एक्सिक्यूशन RCE कमजोरी है। यह एक्सप्लॉइट दर्शाता है कि कैसे एक दुर्भावनापूर्ण पेलोड को Git रिपॉजिटरी की रिकर्सिव क्लोनिंग के माध्यम से ट्रिगर किया जा सकता ह...
CVE-2026-87056
A flaw was found in operator-sdk-builder. The repository lacks automated dependency-update configurations for its git submodules, Containerfile base image, and Tekton bundle references. This absence prevents the automatic flagging of stale or vulnerable dependencies. Consequently, this could lead...
hate_crack v2.16.0
root@kitploit: / | \ / | \ \ | | / \ \ / \ / \ /\ \ \ / | |/ / \ Y // | | \ / \ | | // \ | \ /|| /\ | \ / / // / / / / Installation Installing from source is the only supported path. hatecrack is not distributed on PyPI: pip install hate-crack resolves to a 0.0.0 placeholder that...
Ubuntu: Security Advisory (USN-8012-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Exploit for Unrestricted Upload of File with Dangerous Type in Git
CVE-2024-32002 RCE PoC Overview This repository contains...
Authentication Token Leakage
github.com/cli/cli is vulnerable to authentication token leakage. The vulnerability is due to improper handling of the credential.helper configuration when cloning repositories with git submodules hosted outside of GitHub.com and ghe.com, causing authentication tokens to be exposed...
CVE-2024-53858
The gh cli is GitHub’s official command line tool. A security vulnerability has been identified in the GitHub CLI that could leak authentication tokens when cloning repositories containing "git" submodules hosted outside of GitHub.com and ghe.com. This vulnerability stems from several "gh" comman...
CVE-2024-53858
The gh cli is GitHub’s official command line tool. A security vulnerability has been identified in the GitHub CLI that could leak authentication tokens when cloning repositories containing git submodules hosted outside of GitHub.com and ghe.com. This vulnerability stems from several gh commands...
CVE-2024-53858: Exposure of Sensitive Information to an Unauthorized Actor
The gh cli is GitHub’s official command line tool. A security vulnerability has been identified in the GitHub CLI that could leak authentication tokens when cloning repositories containing git submodules hosted outside of GitHub.com and ghe.com. This vulnerability stems from several gh commands...
Malicious code in capistrano_scm-gitsubmodules (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
USN-6793-1 git vulnerabilities
It was discovered that Git incorrectly handled certain submodules. An attacker could possibly use this issue to execute arbitrary code. This issue was fixed in Ubuntu 22.04 LTS, Ubuntu 23.10 and Ubuntu 24.04 LTS. CVE-2024-32002 It was discovered that Git incorrectly handled certain cloned...
Important: git
Issue Overview: Git is a revision control system. Prior to versions 2.45.1, 2.44.1, 2.43.4, 2.42.2, 2.41.1, 2.40.2, and 2.39.4, repositories with submodules can be crafted in a way that exploits a bug in Git whereby it can be fooled into writing files not into the submodule's worktree but into a...
OESA-2024-1662 git security update
Git is a free and open source distributed version control system designed to handle everything from small to very large projects with speed and efficiency. Git is easy to learn and has a tiny footprint with lightning fast performance. It outclasses SCM tools like Subversion, CVS, Perforce, and...
Exploit for Unrestricted Upload of File with Dangerous Type in Git
CVE-2024-32002 RCE PoC Overview This repository contains...
ALPINE-CVE-2024-32002
Git is a revision control system. Prior to versions 2.45.1, 2.44.1, 2.43.4, 2.42.2, 2.41.1, 2.40.2, and 2.39.4, repositories with submodules can be crafted in a way that exploits a bug in Git whereby it can be fooled into writing files not into the submodule's worktree but into a .git/ directory...
AZL-42040 CVE-2024-32002 affecting package git for versions less than 2.39.4-1
Git is a revision control system. Prior to versions 2.45.1, 2.44.1, 2.43.4, 2.42.2, 2.41.1, 2.40.2, and 2.39.4, repositories with submodules can be crafted in a way that exploits a bug in Git whereby it can be fooled into writing files not into the submodule's worktree but into a .git/ directory...
AZL-43038 CVE-2024-32002 affecting package git for versions less than 2.45.2-1
Git is a revision control system. Prior to versions 2.45.1, 2.44.1, 2.43.4, 2.42.2, 2.41.1, 2.40.2, and 2.39.4, repositories with submodules can be crafted in a way that exploits a bug in Git whereby it can be fooled into writing files not into the submodule's worktree but into a .git/ directory...