GitDump

GitDump GitDump dumps the source code from .git when the directory traversal is disabled Requirements Python3 Tested on Windows Kali Linux What it does Dump source code from website/.git directory when directory traversal is disabled. How it works Fetch all common files .git/index, .git/HEAD,...

cve-2024-32002-poc-aw

CVE-2024-32002 PRC AW CVE-2024-32002의 POC로, .git 디렉토리에 임의 쓰기를 시연합니다. 관련 서브모듈 저장소: cve-2024-32002-submodule-aw 이 저장소에 포함된 내용 .git 디렉토리를 가리키는 임의의 이름을 가진 심볼릭 링크. 악의적인 서브모듈을 정의하는 .gitmodules 파일. 이 저장소를 재현하는 방법 이 저장소는 LinuxWSL2에서 생성되었습니다. 대소문자를 구분하는 파일 시스템에서만 악의적인 저장소를 생성할 수 있습니다. 1. 모든 소문자를 사용하여 심볼릭 ...

cve-2024-32002-submodule-aw

CVE-2024-32002 서브모듈 AW CVE-2024-32002를 시연하기 위한 서브모듈입니다. .git에 임의 쓰기를 시연합니다. 이 리포지토리를 사용하는 작동하는 POC는 cve-2024-32002-poc-aw를 참조하십시오. 이 리포지토리에 포함된 내용 단순히, 부모 POC 리포지토리를 클론할 때 이를 감지할 수 있는 임의의 파일입니다. 파일 이름은 Problems입니다. .git에서 이 파일을 보면 문제가 있기 때문입니다...

GitPython: GitPython: Remote Code Execution via Git directory impersonation

A flaw was found in GitPython. This vulnerability allows a remote attacker to execute arbitrary code. By failing to properly validate the git directory location, GitPython allows attackers to impersonate the git directory using tracked files such as gitdir, commondir, and HEAD. An attacker can th...

GitPython: GitPython: Remote Code Execution via Git directory impersonation

A flaw was found in GitPython. This vulnerability allows a remote attacker to execute arbitrary code. By failing to properly validate the git directory location, GitPython allows attackers to impersonate the git directory using tracked files such as gitdir, commondir, and HEAD. An attacker can th...

GitPython: GitPython: Remote Code Execution via Git directory impersonation

A flaw was found in GitPython. This vulnerability allows a remote attacker to execute arbitrary code. By failing to properly validate the git directory location, GitPython allows attackers to impersonate the git directory using tracked files such as gitdir, commondir, and HEAD. An attacker can th...

git-dump

git-dump 이 스크립트는 웹사이트에서 '.git' 디렉토리의 내용을 재귀적으로 다운로드하는 도구입니다. Python과 'requests' 및 'BeautifulSoup' 같은 라이브러리를 사용하여, 이 스크립트는 디렉토리 구조를 검사하고, 파일을 다운로드하며, Git 파일 내의 SHA-1 해시를 식별합니다. 기능 웹사이트에서 ".git" 디렉토리의 내용을 재귀적으로 다운로드합니다. 웹 스크래핑을 위해 Python과 "requests" 및 "BeautifulSoup" 같은 라이브러리를 사용합니다. 디렉토리 구조를 검사하고...

GitPython: GitPython: Remote Code Execution via Git directory impersonation

A flaw was found in GitPython. This vulnerability allows a remote attacker to execute arbitrary code. By failing to properly validate the git directory location, GitPython allows attackers to impersonate the git directory using tracked files such as gitdir, commondir, and HEAD. An attacker can th...

GitPython: Repository content can impersonate the git directory, leading to arbitrary code execution

Summary Repo.init decides which directory is the git directory by testing candidate paths in an order that considers the real .git last. Two earlier tests can be satisfied by ordinary tracked files. Git reserves only the literal name .git, so HEAD, objects/, refs/, config, gitdir, commondir and...

EUVD-2026-74843

GitPython: Repository content can impersonate the git directory, leading to arbitrary code execution...

GitPython: GitPython: Remote Code Execution via Git directory impersonation

A flaw was found in GitPython. This vulnerability allows a remote attacker to execute arbitrary code. By failing to properly validate the git directory location, GitPython allows attackers to impersonate the git directory using tracked files such as gitdir, commondir, and HEAD. An attacker can th...

Critical: Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.5 Product Security and Bug Fix Update

An update is now available for Red Hat Ansible Automation Platform 2.5 Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...

GitPython: GitPython: Remote Code Execution via Git directory impersonation

A flaw was found in GitPython. This vulnerability allows a remote attacker to execute arbitrary code. By failing to properly validate the git directory location, GitPython allows attackers to impersonate the git directory using tracked files such as gitdir, commondir, and HEAD. An attacker can th...

Critical: Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.6 Product Security and Bug Fix Update

An update is now available for Red Hat Ansible Automation Platform 2.6 Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...

Astra Linux – Vulnerability in Git

Git is a version control system. Before versions 2.45.1, 2.44.1, 2.43.4, 2.42.2, 2.41.1, 2.40.2, and 2.39.4, repositories containing submodules could be exploited through a bug in Git. This bug allowed a script to be written into the .git/ directory instead of the submodule’s worktree. This enabl...

SUSE CVE-2026-87817

GitPython before 3.1.60 fails to properly validate the git directory location, allowing attackers to impersonate the git directory using tracked files like gitdir, commondir, and HEAD. Attackers can execute arbitrary code by placing a malicious pre-commit hook in the tracked hooks directory that...

CVE-2026-87817

A flaw was found in GitPython. This vulnerability allows a remote attacker to execute arbitrary code. By failing to properly validate the git directory location, GitPython allows attackers to impersonate the git directory using tracked files such as gitdir, commondir, and HEAD. An attacker can th...

Duplicate Advisory: Repository content can impersonate the git directory, leading to arbitrary code execution

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-239g-whfq-7xj9. This link is maintained to preserve external references. Original Description GitPython before 3.1.60 fails to properly validate the git directory location, allowing attackers to impersonate the...

DEBIAN-CVE-2026-87817

GitPython before 3.1.60 fails to properly validate the git directory location, allowing attackers to impersonate the git directory using tracked files like gitdir, commondir, and HEAD. Attackers can execute arbitrary code by placing a malicious pre-commit hook in the tracked hooks directory that...

CVE-2026-87817

GitPython before 3.1.60 fails to properly validate the git directory location, allowing attackers to impersonate the git directory using tracked files like gitdir, commondir, and HEAD. Attackers can execute arbitrary code by placing a malicious pre-commit hook in the tracked hooks directory that...