12213 matches found
CVE-2026-73625 GitPython before 3.1.54 Remote Code Execution via kwarg value smuggling
GitPython versions before 3.1.54 contain a remote code execution vulnerability in the checkunsafeoptions guard that can be bypassed by smuggling git options inside single-character kwarg values. Attackers can supply crafted option dictionaries to clonefrom, fetch, pull, push, lsremote, itercommit...
CVE-2026-73625
GitPython versions before 3.1.54 contain a remote code execution vulnerability in the checkunsafeoptions guard that can be bypassed by smuggling git options inside single-character kwarg values. Attackers can supply crafted option dictionaries to clonefrom, fetch, pull, push, lsremote, itercommit...
CVE-2026-73625 GitPython before 3.1.54 Remote Code Execution via kwarg value smuggling
GitPython versions before 3.1.54 contain a remote code execution vulnerability in the checkunsafeoptions guard that can be bypassed by smuggling git options inside single-character kwarg values. Attackers can supply crafted option dictionaries to clonefrom, fetch, pull, push, lsremote, itercommit...
CVE-2026-73625
GitPython versions before 3.1.54 contain a remote code execution vulnerability in the checkunsafeoptions guard that can be bypassed by smuggling git options inside single-character kwarg values. Attackers can supply crafted option dictionaries to clonefrom, fetch, pull, push, lsremote, itercommit...
CVE-2026-73625
GitPython before 3.1.54 contains a remote code execution vulnerability in the check_unsafe_options guard that can be bypassed by smuggling git options inside single-character kwarg values. Attackers can supply crafted option dictionaries to clone_from, fetch, pull, push, ls_remote, iter_commits, ...
CVE-2026-73625 GitPython before 3.1.54 Remote Code Execution via kwarg value smuggling
GitPython versions before 3.1.54 contain a remote code execution vulnerability in the checkunsafeoptions guard that can be bypassed by smuggling git options inside single-character kwarg values. Attackers can supply crafted option dictionaries to clonefrom, fetch, pull, push, lsremote, itercommit...
CVE-2026-73625: Improper Neutralization of Special Elements used in an OS Command
GitPython versions before 3.1.54 contain a remote code execution vulnerability in the checkunsafeoptions guard that can be bypassed by smuggling git options inside single-character kwarg values. Attackers can supply crafted option dictionaries to clonefrom, fetch, pull, push, lsremote, itercommit...
CVE-2026-73294
Semaphore UI is a web interface for managing DevOps tools. Prior to 2.18.17 and 2.19.5-beta2, repository giturl handling passes an attacker-controlled --upload-pack option to CmdGitClient.GetLastRemoteCommitHash through POST /api/project/id/repositories and scheduled commit-hash polling, allowing...
CVE-2026-73294 Semaphore U: OS Command Injection
Semaphore UI is a web interface for managing DevOps tools. Prior to 2.18.17 and 2.19.5-beta2, repository giturl handling passes an attacker-controlled --upload-pack option to CmdGitClient.GetLastRemoteCommitHash through POST /api/project/id/repositories and scheduled commit-hash polling, allowing...
CVE-2026-73294 Semaphore U: OS Command Injection
Semaphore UI is a web interface for managing DevOps tools. Prior to 2.18.17 and 2.19.5-beta2, repository giturl handling passes an attacker-controlled --upload-pack option to CmdGitClient.GetLastRemoteCommitHash through POST /api/project/id/repositories and scheduled commit-hash polling, allowing...
CVE-2026-73294 Semaphore U: OS Command Injection
Semaphore UI is a web interface for managing DevOps tools. Prior to 2.18.17 and 2.19.5-beta2, repository giturl handling passes an attacker-controlled --upload-pack option to CmdGitClient.GetLastRemoteCommitHash through POST /api/project/id/repositories and scheduled commit-hash polling, allowing...
CVE-2026-73294
Semaphore UI is a web interface for managing DevOps tools. Prior to 2.18.17 and 2.19.5-beta2, repository giturl handling passes an attacker-controlled --upload-pack option to CmdGitClient.GetLastRemoteCommitHash through POST /api/project/id/repositories and scheduled commit-hash polling, allowing...
PT-2026-71145
Name of the Vulnerable Software and Affected Versions Semaphore UI versions prior to 2.18.17 Semaphore UI versions prior to 2.19.5-beta2 Description Improper handling of the git url variable allows a project Manager or Owner to execute arbitrary OS commands within the server process. This occurs...
SUSE SLED15: perl / perl-32bit / perl-base / perl-base-32bit / perl-core-DB_File / etc (SUSE-SU-2026:3558-1)
The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3558-1 advisory. - CVE-2026-8376: heap buffer overflow when compiling regular expressions with a repeated fixed string on 32-bi...
CVE-2026-59133
Execution with unnecessary privileges in Microsoft High Performance Computing HPC Pack allows an authorized attacker to elevate privileges over a network...
CVE-2026-59124
Deserialization of untrusted data in Microsoft High Performance Computing HPC Pack allows an unauthorized attacker to execute code over a network...
CVE-2026-59133
The CVE-2026-59133 entry concerns the Microsoft High Performance Computing (HPC) Pack, where an authorized attacker can escalate privileges over the network. According to the data, the issue enables Execution with unnecessary privileges, leading to High impact on confidentiality, integrity, and a...
CVE-2026-59133 Microsoft High Performance Computing (HPC) Pack Elevation of Privilege Vulnerability
...