GitBackdorizer

GitBackdorizer BETA GitBackdorizer is a proof of concept, fully inspired in Ulisses Castro's 50 ton of backdoors talk, that abuses the lack of user attention to steal git access credentials. How it Works GitBackdorizer consists of three pieces: handler, dropper and the payload. Handler The handle...

CVE-2020-14144-GiTea-git-hooks-rce

CVE-2020-14144 - تنفيذ التعليمات البرمجية عن بُعد بعد المصادقة في GiTea سكربت لاستغلال CVE-2020-14144 - تنفيذ التعليمات البرمجية عن بُعد بعد المصادقة في GiTea باستخدام git hooks الميزات توليد تلقائي لحمولة القشرة العكسية Reverse Shell من IP والمنفذ رفع سكربت شل مخصص وتنفيذه عن بُعد باستخدام الخيا...

git-secrets

=========== git-secrets Vous empêche de commiter des mots de passe et autres informations sensibles dans un dépôt git. .. contents:: :depth: 2 Synopsis :: git secrets --scan -r|--recursive --cached --no-index --untracked ... git secrets --scan-history git secrets --install -f|--force git secrets...

CVE-2024-10220-githooks

اختبار CVE-2024-10220 مرجع https://irsl.medium.com/sneaky-write-hook-git-clone-to-root-on-k8s-node-e38236205d54...

CVE-2026-52813-Gogs-RCE

CVE-2026-52813 — Traversée de chemin dans Gogs conduisant à une exécution de code à distance via Git Hooks Analyse défensive Recherche en sécurité / writeup orienté équipe bleue. Ce dépôt ne contient pas de PoC armé. Les chercheurs souhaitant reproduire doivent utiliser le PoC public référencé da...

CVE-2025-65964

n8n Git Hooks CTF عرض توضيحي ⚠️ هذا المستودع مخصص للأغراض التعليمية والتوضيحية لـ CTF فقط. السيناريو منصة أتمتة مثل n8n تستخدم عمليات Git كجزء من سير العمل. يسمح سير العمل بتكوين Git عشوائي عبر git config. يقوم سير العمل المسيطر عليه من قبل المهاجم بتعيين: core.hooksPath=hooks/ سوف يقوم Git بعد ذل...

CVE-2026-60004-PoC

CVE-2026-60004 : Exécution de code à distance via l'API Diffpatch de Gitea !WARNING Ce dépôt est destiné exclusivement à la recherche en sécurité autorisée et aux tests contrôlés en laboratoire. N'exécutez pas la preuve de concept contre des systèmes que vous ne possédez pas ou pour lesquels vous...

CVE-2021-21300

CVE-2021-21300 في إصدارات متعددة من git، لا يتم التعامل مع الروابط الرمزية بشكل صارم. بعد تحميل ملفات إلى git على نظام ملفات حساس لحالة الأحرف مثل Linux، يمكن أن يؤدي استنساخ مستودع خبيث على مضيف يستخدم نظام ملفات غير حساس لحالة الأحرف مثل Windows إلى تنفيذ أوامر عن بُعد. الإصدارات المتأثرة من 2....

Gitea-Git-Hooks-RCE-CVE-2020-14144-

Gitea Git Hooks RCE CVE-2020-14144 OffsecProvingGrounds Pratique — Article sur la machine Roquefort & POC Aperçu Élément| Détail ---|--- Machine| Roquefort Proving Grounds Pratique OS| Linux Version Gitea| 1.7.5 CVE| CVE-2020-14144 Vecteur| RCE authentifié via Git Hooks Shell utilisateur| chloe L...

CVE-2025-8110-Gogs-Remote-Code-Execution

البرنامج المتأثر: إصدارات Gogs خدمة Git المستضافة ذاتيًا قبل 0.13.0. نوع الثغرة: حقن الأوامر في آلية خطاف Git. الوصف: يمكن للمهاجم الذي لديه صلاحية الدفع إلى مستودع إنشاء خطاف Git ضار يحقن الأوامر في سكربت خطاف post‑receive، مما يؤدي إلى تنفيذ تعليمات برمجية عن بُعد على خادم Gogs...

OESA-2026-4226 flatpak-builder security update

Flatpak-builder is a tool for building flatpaks from sources. Security Fixes: A flaw was found in flatpak-builder where Git hooks are not disabled when applying patch sources with use-git-am: true. An attacker who can provide a malicious source containing a Git post-applypatch hook can cause the...

OESA-2026-4225 flatpak-builder security update

Flatpak-builder is a tool for building flatpaks from sources. Security Fixes: A flaw was found in flatpak-builder where Git hooks are not disabled when applying patch sources with use-git-am: true. An attacker who can provide a malicious source containing a Git post-applypatch hook can cause the...

OESA-2026-4224 flatpak-builder security update

Flatpak-builder is a tool for building flatpaks from sources. Security Fixes: A flaw was found in flatpak-builder where Git hooks are not disabled when applying patch sources with use-git-am: true. An attacker who can provide a malicious source containing a Git post-applypatch hook can cause the...

CVE-2026-78677

A flaw was found in GitPython. This vulnerability allows a remote attacker to create arbitrary Git directories outside the intended clone destination. By manipulating the separategitdir parameter during repository cloning, an attacker can redirect repository metadata to an attacker-controlled...

OESA-2026-4074 flatpak-builder security update

Flatpak-builder is a tool for building flatpaks from sources. Security Fixes: A flaw was found in flatpak-builder where Git hooks are not disabled when applying patch sources with use-git-am: true. An attacker who can provide a malicious source containing a Git post-applypatch hook can cause the...

SUSE CVE-2026-93993

Mistral Vibe before 2.25.5 contains a remote code execution vulnerability in the worktree creation process that executes git hooks before trust validation. Attackers can supply a repository with a crafted post-checkout hook that executes arbitrary shell commands with the privileges of the user...

CVE-2026-93993: Inclusion of Functionality from Untrusted Control Sphere

Mistral Vibe before 2.25.5 contains a remote code execution vulnerability in the worktree creation process that executes git hooks before trust validation. Attackers can supply a repository with a crafted post-checkout hook that executes arbitrary shell commands with the privileges of the user...

SUSE CVE-2026-86320

A flaw was found in flatpak-builder where Git hooks are not disabled when applying patch sources with use-git-am: true. An attacker who can provide a malicious source containing a Git post-applypatch hook can cause the hook to execute on the host during the build process, resulting in arbitrary...

CVE-2026-86320

A flaw was found in flatpak-builder where Git hooks are not disabled when applying patch sources with use-git-am: true. An attacker who can provide a malicious source containing a Git post-applypatch hook can cause the hook to execute on the host during the build process, resulting in arbitrary...

UBUNTU-CVE-2026-86320

A flaw was found in flatpak-builder where Git hooks are not disabled when applying patch sources with use-git-am: true. An attacker who can provide a malicious source containing a Git post-applypatch hook can cause the hook to execute on the host during the build process, resulting in arbitrary...