CVE-2022-29221-PoC

CVE-2022-29221-PoC I do not host in Github anymore, but on my own Git hosting instance. Go here to see code: https://git.sbani.net/sbani/CVE-2022-29221-PoC...

CVE-2018-17456

CVE-2018-17456 漏洞简介 漏洞名称： Git输入验证错误漏洞 CNNVD编号：CNNVD-201810-234 危害等级：超危 CVE编号：CVE-2018-17456 漏洞类型：输入验证错误 发布时间：2018-10-08 威胁类型：远程 更新时间：2019-04-25 厂商：debian 漏洞来源：Atlassian,TerryZh...

Important: Red Hat Security Advisory: git-lfs security update

An update for git-lfs is now available for Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

git-lfs-RCE-exploit-CVE-2020-27955-Go

Git-lfs 远程代码执行（RCE）漏洞利用 CVE-2020-27955 Go版本 受影响：git, GitHub CLI gh, GitHub Desktop, Visual Studio Code, SourceTree, SmartGit, GitKraken 等。 发现者：Dawid Golunski https://legalhackers.com https://exploitbox.io 在Windows上测试于： git, GitHub CLI gh, GitHub Desktop, Visual Studio Code, SourceTree, SmartGit,...

libgit2: libgit2: Denial of Service due to heap out-of-bounds read from malicious Git server

A flaw was found in libgit2. A fixed-size string comparison in the setdata function within transports/smartpkt.c does not adequately verify the size of a network packet buffer. A remote attacker, operating a malicious Git server, can send a specially crafted packet-line capability buffer. This ca...

dymerge

A simple, yet powerful tool - written purely in python - which takes given wordlists and merges them into one dynamic dictionary that can then be used as ammunition for a successful dictionary based or bruteforce attack. Compatible with Python 2.6 & 2.7. Author: Nikolaos Kamarinakis nikolaskama.m...

CVE-2018-11235-DEMO

CVE-2018-11235 使い方 root@kitploit: chybeta@ubuntu git clone https://github.com/CHYbeta/CVE-2018-11235-DEMO.git chybeta@ubuntu cd CVE-2018-11235-DEMO chybeta@ubuntu /CVE-2018-11235-DEMO /usr/local/bin/git --version git version 2.17.0 chybeta@ubuntu /CVE-2018-11235-DEMO ./build.sh 分析...

CVE-2017-1000117

CVE-2017-1000117 此模块可用于测试你是否易受 CVE-2017-1000117 漏洞影响 root@kitploit: git clone https://github.com/timwr/CVE-2017-1000117.git --recurse-submodules ls CVE-2017-1000117 如果你存在漏洞，输出如下： root@kitploit: $ git clone https://github.com/timwr/CVE-2017-1000117.git --recurse-submodules Cloning into...

Astra Linux – Vulnerability in Git

Git is a revision control system. Before versions 2.30.9, 2.31.8, 2.32.7, 2.33.8, 2.34.8, 2.35.8, 2.36.6, 2.37.7, 2.38.5, 2.39.3, and 2.40.1, feeding specially crafted input to git apply --reject could cause a path outside the working tree to be overwritten with partially controlled contents...

Astra Linux – Vulnerability in Git

Git is a version control system. Before versions 2.45.1, 2.44.1, 2.43.4, 2.42.2, 2.41.1, 2.40.2, and 2.39.4, repositories containing submodules could be exploited through a bug in Git. This bug allowed an attacker to manipulate the creation of files—specifically, files that were written into the...

Astra Linux – Vulnerability in Git

Git is a distributed revision control system. git log can display commits in an arbitrary format using its --format specifiers. This functionality is also exposed to git archive via the export-subst gitattribute. When processing the padding operators, there is an integer overflow in...

Astra Linux – Vulnerability in node-hosted-git-info

Packages that use hosted-git-info before version 3.0.8 are vulnerable to Regular Expression Denial of Service ReDoS attacks due to the regular expression shortcutMatch in the fromUrl function in index.js. The affected regular expressions have a polynomial worst-case time complexity...

Important: Red Hat Security Advisory: rust security update

An update for rust is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...

libgit2: libgit2: Denial of Service due to heap out-of-bounds read from malicious Git server

A flaw was found in libgit2. A fixed-size string comparison in the setdata function within transports/smartpkt.c does not adequately verify the size of a network packet buffer. A remote attacker, operating a malicious Git server, can send a specially crafted packet-line capability buffer. This ca...

CVE-2018-11235

CVE-2018-11235 の PoC エクスプロイト ============================== GitHub で脆弱性を利用するリポジトリをプッシュすることは許可されていません（彼らにとっては良いことです）。そのため、build.sh スクリプトを実行して自分でビルドする必要があります。 その後、リポジトリをどこかにプッシュします。--recurse-submodules フラグを付けてクローンすると、悪意のあるスクリプト が実行されます: root@kitploit: $ git clone --recurse-submodules repo destdir...

Important: Red Hat Security Advisory: git-lfs security update

An update for git-lfs is now available for Red Hat Enterprise Linux 9.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

cracklord

Cracklord http://jmmcatee.github.io/cracklord/ What Is It? CrackLord is a system designed to provide a scalable, pluggable, and distributed system for both password cracking as well as any other jobs needing lots of computing resources. Better said, CrackLord is a way to load balance the resource...

CVE-2026-60004

🚨 CVE-2026-60004 - RCE Ejecución Remota de Código Crítica en Gitea a través del Git Hook diffpatch Una vulnerabilidad crítica de Ejecución Remota de Código RCE que permite la ejecución arbitraria de comandos a través del endpoint de la APIdiffpatch abusando de la ejecución de Git hooks. 📖 Resumen...

Security update for ansible-core

This update for ansible-core fixes the following issues: CVE-2026-16493: argument injection in ansible-galaxy collection install via git clone bsc1272369. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch"...

nvdcve

NVD/CVE® を JSON ファイルとして 重要 : このリポジトリは、Git を使用して CVE®/NVD の変更履歴を探索したり、GitHub のプルリクエストを使用して新しい脆弱性を提出できる CVEProject/cvelist プロジェクトと部分的に重複しています。ただし、このリポジトリは依然として辞書と同期されており、各脆弱性を JSON 形式で取得することができます。 概要 このリポジトリには、NVD および CVE® 辞書からの脆弱性を記述した JSON ファイルが含まれています。 主な目的は2つあります: JSON 形式 スキーマ...