CVE-2020-27955

Git-lfs Remote Code Execution RCE Exploit CVE-2020-27955 .bat / PowerShell-Version Betroffen: git, GitHub CLI gh, GitHub Desktop, Visual Studio Code, SourceTree, SmartGit, GitKraken usw. Entdeckt von Dawid Golunski https://legalhackers.com https://exploitbox.io Getestet unter Windows auf: git,...

clone_and_pwn

Intestazioni Titolo Exploit: Clone and Pwn Data: 4 giugno 2018 Autore Exploit: Alejandro Caceres Homepage del Venditore: https://git-scm.com/ Link Software: https://git-scm.com/downloads Versione: codice arbitrario viene eseguito sulle versioni del client git precedenti a 2.13.7, 2.14.x precedent...

CVE-2024-32002-git-rce

CVE-2024-32002-git-rce Exploit RCE per clonazione ricorsiva per macOS e Windows Questo è un exploit per CVE-2024-32002, una vulnerabilità critica in Git che consente l'esecuzione remota di codice durante la clonazione di un repository con sottomoduli. L'exploit funziona creando un repository...

CVE-2025-55349

CVE-2025-55349 — pm2 Beliebige Codeausführung über postinstall Entdecker : Golden Ticket Labs Hersteller : Unitech pm2 Zuweisungsdatum : 20. August 2025 MITRE Beschreibung Eine Schwachstelle in der Komponente lib/API/Modules/NPM.js von Unitech PM2 v5.4.2 ermöglicht beliebige Codeausführung durch...

CVE-2025-8110

Gogs RCE Exploit CVE-2025-8110 Ein Proof of Concept PoC für CVE-2025-8110 , eine kritische Schwachstelle in Gogs, die Remote-Code-Ausführung RCE durch Manipulation von .git/config mittels symbolischer Link-Umgehungen und sshCommand-Injection ermöglicht. 📖 Übersicht Dieser Exploit zielt auf einen...

CVE-2025-8110-Gogs-Remote-Code-Execution

Software interessato: Gogs servizio Git self-hosted versioni precedenti alla 0.13.0. Tipo di vulnerabilità: Iniezione di comandi nel meccanismo dei Git hook. Descrizione: Un aggressore con accesso push a un repository può creare un Git hook dannoso che inietta comandi nello script dell'hook...

CVE-2024-32002

CVE-2024-32002 1. Modifica il file exploit.sh sostituisci i repository 2. esegui bash exploit.sh exploit.sh Ispirato da - https://github.com/safebuffer/CVE-2024-32002 Realizzato per CTF Versioni vulnerabili v2.45.0 v2.44.0 =v2.43.3 =v2.42.1 v2.41.0 =v2.40.1 =v2.39.3 Fonte...

CVE-2023-51385_test

Verificação do CVE-2023-51385 Primeiro, é necessário adicionar o seguinte conteúdo em /.ssh/config root@kitploit: host .example.com ProxyCommand /usr/bin/nc -X connect -x 192.0.2.0:8080 %h %p Existe injeção de comando na declaração do arquivo .gitmodules root@kitploit: url = ssh://echo helloworld...

git-lfs-RCE-exploit-CVE-2020-27955-Go

Exploit di Remote Code Execution RCE in Git-lfs CVE-2020-27955 versione Go Vulnerabili: git, GitHub CLI gh, GitHub Desktop, Visual Studio Code, SourceTree, SmartGit, GitKraken ecc. Scoperto da Dawid Golunski https://legalhackers.com https://exploitbox.io Testato su Windows su: git, GitHub CLI gh,...

git-lfs-RCE-exploit-CVE-2020-27955

Exploit di Remote Code Execution RCE su Git-lfs CVE-2020-27955 versione .bat / powershell Vulnerabile: git, GitHub CLI gh, GitHub Desktop, Visual Studio Code, SourceTree, SmartGit, GitKraken ecc. Scoperto da Dawid Golunski https://legalhackers.com https://exploitbox.io Testato su Windows su: git,...

ROOT-OS-DEBIAN-12-CVE-2022-24975 CVE-2022-24975 in git - Patched by Root

Root has patched CVE-2022-24975 in the git package for Root:Debian:12. Multiple fixed versions available...

CVE-2020-27955-LFS

Git-lfs Remote Code Execution RCE exploit CVE-2020-27955 versione .bat / powershell Vulnerabili: git, GitHub CLI gh, GitHub Desktop, Visual Studio Code, SourceTree, SmartGit, GitKraken ecc. Scoperto da Dawid Golunski https://legalhackers.com https://exploitbox.io Testato su Windows su: git, GitHu...

CVE-2026-40579

Riferimenti https://github.com/steveukx/git-js/security/advisories/GHSA-mr9g-9pv2-x45j https://vulners.com/cve/CVE-2026-40579...

CVE-2020-27955

Reproduktion der Schwachstelle CVE-2020-27955 1. Auf dem Windows-Rechner die verwundbare Version von Git-LFS herunterladen. Download-Link: https://github.com/git-for-windows/git/releases/tag/v2.29.2.windows.1 2. Auf dem Windows-Rechner installieren und die folgenden Informationen zur Hosts-Datei...

CVE-2018-11235

CVE-2018-11235 Per iniziare Per creare i contenitori Docker, usa: root@kitploit: make docker I seguenti comandi make devono essere eseguiti in parallelo su terminali diversi dalla propria macchina Per avviare il contenitore del server attaccante, usa: root@kitploit: make runserver per avviare il...

n8n >= 0.123.0 and < 1.121.3 - Remote Code Execution

n8n versions = 0.123.0 and = 0.123.0 and = 0.123.0 and 1.121.3 contain a critical authenticated remote code execution vulnerability via arbitrary file write. An authenticated user can exploit the Git node to overwrite critical files and execute untrusted code on the n8n server, potentially leadin...

Gogs <= 0.14.2 - Authenticated RCE via git rebase Argument Injection

Gogs is an open source self-hosted Git service. Prior to 0.14.3, Gogs allows authenticated users to achieve Remote Code Execution RCE on the server by creating a pull request with a specially crafted branch name that injects the --exec flag into the git rebase command during the "Rebase before...

DumpsterDiver

DumpsterDiver von @Rzepsky DumpsterDiver ist ein Werkzeug, das große Datenmengen nach fest codierten Geheimnissen wie Schlüsseln z.B. AWS Access Key, Azure Share Key oder SSH-Schlüssel oder Passwörtern durchsuchen kann. Zusätzlich ermöglicht es die Erstellung einfacher Suchregeln mit grundlegende...

bst

Binary String Toolkit Summary The Binary String Toolkit or BST for short is a rather simple utility to convert binary strings to various formats suitable for inclusions in source codes, such as those used to develop exploits and Proof of Concepts in the security field. Features Convert and dump...

CVE-2023-29007_win-version

CVE-2023-29007win-version ursprünglicher PoC https://github.com/ethiack/CVE-2023-29007 PoC-Repository für CVE-2023-29007 Weitere Informationen verfügbar unter: https://blog.ethiack.com/en/blog/git-arbitrary-configuration-injection-cve-2023-29007...