137 matches found
[SECURITY] Fedora 35 Update: golang-sourcegraph-appdash-0-0.9.20210113gitebfcffb.fc35
Appdash is an application tracing system for Go, based on Google's Dapper and Twitter's Zipkin. Appdash allows you to trace the end-to-end handling of requests and operations in your application for perf and debugging. It displays timings and application-specific metadata for each step, and it...
Metasploit Weekly Wrap-Up
JBOSS EAP/AS - More Deserializations? Indeed! Community contributor Heyder Andrade added in a new module for a Java deserialization vulnerability in JBOSS EAP/AS Remoting Unified Invoker interface for versions 6.1.0 and prior. As far as we can tell this was first disclosed by Joao Matos in his...
Sourcegraph gitserver sshCommand Remote Command Execution Exploit
A vulnerability exists within Sourcegraph's gitserver component that allows a remote attacker to execute arbitrary OS commands by modifying the core.sshCommand value within the git configuration. This command can then be triggered on demand by executing a git push operation. The vulnerability was...
Sourcegraph gitserver sshCommand Remote Command Execution
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Sourcegraph gitserver sshCommand RCE', 'Description' = %q A vulnerability exists within Sourcegraph's gitserver component that allows a remote...
Fedora: Security Advisory for golang-github-sourcegraph-syntaxhighlight (FEDORA-2022-fae3ecee19)
The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
Fedora: Security Advisory for golang-sourcegraph-appdash (FEDORA-2022-fae3ecee19)
The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
[SECURITY] Fedora 36 Update: golang-sourcegraph-appdash-0-0.9.20210113gitebfcffb.fc36
Appdash is an application tracing system for Go, based on Google's Dapper and Twitter's Zipkin. Appdash allows you to trace the end-to-end handling of requests and operations in your application for perf and debugging. It displays timings and application-specific metadata for each step, and it...
The vulnerability of the gitserver service in the Sourcegraph search and navigation system, related to improper code generation management, allows a violator to execute arbitrary code.
The vulnerability of the gitserver service in the Sourcegraph search and navigation system is related to improper code generation management. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially crafted HTTP request...
Sourcegraph Gitserver 3.36.3 Remote Code Execution
Exploit Title: Sourcegraph Gitserver 3.36.3 - Remote Code Execution RCE Date: 2022-06-10 Exploit Author: Altelus Vendor Homepage: https://about.sourcegraph.com/ Version: 3.63.3 Tested on: Linux CVE : CVE-2022-23642 Docker Container: sourcegraph/server:3.36.3 Sourcegraph prior to 3.37.0 has a remo...
Sourcegraph Gitserver 3.36.3 - Remote Code Execution Exploit
Exploit Title: Sourcegraph Gitserver 3.36.3 - Remote Code Execution RCE Exploit Author: Altelus Vendor Homepage: https://about.sourcegraph.com/ Version: 3.63.3 Tested on: Linux CVE : CVE-2022-23642 Docker Container: sourcegraph/server:3.36.3 Sourcegraph prior to 3.37.0 has a remote code execution...
Sourcegraph Gitserver 3.36.3 - Remote Code Execution (RCE)
Exploit Title: Sourcegraph Gitserver 3.36.3 - Remote Code Execution RCE Date: 2022-06-10 Exploit Author: Altelus Vendor Homepage: https://about.sourcegraph.com/ Version: 3.63.3 Tested on: Linux CVE : CVE-2022-23642 Docker Container: sourcegraph/server:3.36.3 Sourcegraph prior to 3.37.0 has a remo...
Exploit for Code Injection in Sourcegraph
PoC for Sourcegraph Gitserver 3.37.0 RCE CVE-2022-23642 S...
Remote Code Execution
github.com/sourcegraph/sourcegraph is vulnerable to remote code execution. A privileged attacker who is able to edit or add a Gitolite code host and has administrative access to Sourcegraph’s bundled Grafana instance has the ability to change these command arbitrarily and run it remotely...
Arbitrary Code Execution
Overview Affected versions of this package are vulnerable to Arbitrary Code Execution in the gitserver service. An administrator who is able to edit or add a Gitolite code host and has administrative access to Sourcegraph’s bundled Grafana instance can change this command arbitrarily and run it...
CVE-2022-29171
Sourcegraph is a fast and featureful code search and navigation engine. Versions before 3.38.0 are vulnerable to Remote Code Execution in the gitserver service. The Gitolite code host integration with Phabricator allows Sourcegraph site admins to specify a callsignCommand, which is used to obtain...
Remote code execution
Sourcegraph is a fast and featureful code search and navigation engine. Versions before 3.38.0 are vulnerable to Remote Code Execution in the gitserver service. The Gitolite code host integration with Phabricator allows Sourcegraph site admins to specify a callsignCommand, which is used to obtain...
Sourcegraph 代码注入漏洞
Sourcegraph is an open source code search and navigation tool from US-based Sourcegraph. A code injection vulnerability exists in versions prior to Sourcegraph 3.38.0, which can be exploited by an attacker to execute remote code in the gitserver service...
CVE-2022-29171 Remote Code Execution in sourcegraph
Sourcegraph is a fast and featureful code search and navigation engine. Versions before 3.38.0 are vulnerable to Remote Code Execution in the gitserver service. The Gitolite code host integration with Phabricator allows Sourcegraph site admins to specify a callsignCommand, which is used to obtain...
CVE-2022-29171 Remote Code Execution in sourcegraph
Sourcegraph is a fast and featureful code search and navigation engine. Versions before 3.38.0 are vulnerable to Remote Code Execution in the gitserver service. The Gitolite code host integration with Phabricator allows Sourcegraph site admins to specify a callsignCommand, which is used to obtain...
CVE-2022-29171 Remote Code Execution in sourcegraph
Sourcegraph is a fast and featureful code search and navigation engine. Versions before 3.38.0 are vulnerable to Remote Code Execution in the gitserver service. The Gitolite code host integration with Phabricator allows Sourcegraph site admins to specify a callsignCommand, which is used to obtain...