cve-2020-27955

cve-2020-27955 cve-2020-27955 复现 1. 创建github仓库 2. git clone https://github.com/attacker/poc.git . 3. echo calc.exe git.cmd 4. git lfs track “.dat” 5. echo “Junk” large.dat 6. git add -A 7. git commit -m “POC” 8. git push -u origin master -f...

ofrak

OFRAK OFRAK Open Firmware Reverse Analysis Konsole is a binary analysis and modification platform. OFRAK combines the ability to: Identify and Unpack many binary formats Analyze unpacked binaries with field-tested reverse engineering tools Modify and Repack binaries with powerful patching...

EUVD-2026-78249

Soft Serve versions 0.7.1 through 0.11.6 fail to scope Git LFS lock queries by repository, allowing authenticated users to read lock metadata from repositories they cannot access. Attackers with write access to any repository can enumerate lock IDs globally to recover locked file paths, usernames...

PT-2026-91832

Soft Serve versions 0.7.1 through 0.11.6 fail to scope Git LFS lock queries by repository, allowing authenticated users to read lock metadata from repositories they cannot access. Attackers with write access to any repository can enumerate lock IDs globally to recover locked file paths, usernames...

CVE-2020-27955-LFS

Git-lfs 远程代码执行 RCE 漏洞利用 CVE-2020-27955 .bat / powershell 版本 受影响: git, GitHub CLI gh, GitHub Desktop, Visual Studio Code, SourceTree, SmartGit, GitKraken 等。 发现者: Dawid Golunski https://legalhackers.com https://exploitbox.io 在 Windows 上测试: git, GitHub CLI gh, GitHub Desktop, Visual Studio Code,...

Important: Red Hat Security Advisory: git-lfs security update

An update for git-lfs is now available for Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

git-lfs-RCE-exploit-CVE-2020-27955-Go

Git-lfs 远程代码执行（RCE）漏洞利用 CVE-2020-27955 Go版本 受影响：git, GitHub CLI gh, GitHub Desktop, Visual Studio Code, SourceTree, SmartGit, GitKraken 等。 发现者：Dawid Golunski https://legalhackers.com https://exploitbox.io 在Windows上测试于： git, GitHub CLI gh, GitHub Desktop, Visual Studio Code, SourceTree, SmartGit,...

Important: Red Hat Security Advisory: git-lfs security update

An update for git-lfs is now available for Red Hat Enterprise Linux 9.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

Important: Red Hat Security Advisory: git-lfs security update

An update for git-lfs is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from t...

Important: Red Hat Security Advisory: git-lfs security update

An update for git-lfs is now available for Red Hat Enterprise Linux 10.0 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available fo...

Important: git-lfs security update

Git Large File Storage LFS replaces large files such as audio samples, videos, datasets, and graphics with text pointers inside Git, while storing the file contents on a remote server. Security Fixes: encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal...

CVE-2020-27955

CVE-2020-27955漏洞复现 1、win机下载有漏洞的版本Git-LFS 下载地址：https://github.com/git-for-windows/git/releases/tag/v2.29.2.windows.1 2、win机安装，添加如下信息host文件,10.1.1.5即是nc监听8888的主机（可自行替换） 10.1.1.5 abcall.xyz 3、10.1.1.5主机，nc启监听口8888 ┌──root㉿hostname- └─ nc Cmd line: -l -p 8888 4、win机cmd命令行输入 git clone...

CVE-2020-27955-LFS-main

Git-lfs 远程代码执行（RCE）漏洞利用 CVE-2020-27955（.bat / powershell 版本） 受影响：git、GitHub CLI gh、GitHub Desktop、Visual Studio Code、SourceTree、SmartGit、GitKraken 等。 发现者：Dawid Golunski https://legalhackers.com https://exploitbox.io 已在 Windows 上测试： git、GitHub CLI gh、GitHub Desktop、Visual Studio...

CVE-2020-27955

Git-lfs远程代码执行RCE漏洞利用 CVE-2020-27955 .bat / powershell 版本 受影响: git, GitHub CLI gh, GitHub Desktop, Visual Studio Code, SourceTree, SmartGit, GitKraken 等。 发现者 Dawid Golunski https://legalhackers.com https://exploitbox.io 在 Windows 上测试于: git, GitHub CLI gh, GitHub Desktop, Visual Studio Code,...

CVE-2020-27955

Git-lfs 远程代码执行漏洞 CVE-2020-27955 利用（.bat / powershell 版本） 受影响软件：git、GitHub CLI gh、GitHub Desktop、Visual Studio Code、SourceTree、SmartGit、GitKraken 等 发现者：Dawid Golunski https://legalhackers.com https://exploitbox.io 在 Windows 上测试了以下软件： git、GitHub CLI gh、GitHub Desktop、Visual Studio...

CVE-2020-27955-LFS

Exploit de ejecución remota de código RCE en Git-lfs CVE-2020-27955 versión .bat / powershell Vulnerables: git, GitHub CLI gh, GitHub Desktop, Visual Studio Code, SourceTree, SmartGit, GitKraken, etc. Descubierto por Dawid Golunski https://legalhackers.com https://exploitbox.io Probado en Windows...

git-lfs security update

An update is available for git-lfs. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Git Large File Storage LFS replaces large files such as audio samples, videos...

Important: Red Hat Security Advisory: git-lfs security update

An update for git-lfs is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from t...

CVE-2026-22004-Git-LFS-Pointer-Poisoning-Supply-Chain-

CVE-2026-22004 – Git LFS 指针投毒（供应链） 程序代码（Bash + Python） root@kitploit: createmaliciousrepo.sh - Sets up a repo with poisoned LFS pointer git init git lfs track ".bin" echo "version https://git-lfs.github.com/spec/v1 oid sha256:4142434445464748494a4b4c4d4e4f505152535455565758595a616263646566 size 4...

Important: git-lfs security update

Git Large File Storage LFS replaces large files such as audio samples, videos, datasets, and graphics with text pointers inside Git, while storing the file contents on a remote server. Security Fixes: encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal...