29 matches found
CVE-2025-48384
CVE-2025-48384: Rompere git con un ritorno a capo e RCE tramite clonazione Riproduzione tratta da https://dgl.cx/2025/07/git-clone-submodule-cve-2025-48384. Tutti i crediti a David Leadbeater. Questo è un tentativo di riproduzione di base della vulnerabilità. Per attivarla, esegui git clone...
CVE-2018-11235-PoC
CVE-2018-11235 के लिए PoC शोषण root@kitploit: repository: http://REDACTED/2018-11235PoC.git/ return: Submodule 'aaa' https://repo1 registered for path 'aaa' Submodule '../../fakegit/modules/evil' https://repo2 registered for path 'evil' Submodule path 'aaa': checked out...
CVE-2025-48384
CVE-2025-48384: Git mit einem Wagenrücklauf brechen und RCE beim Klonen Reproduktion von https://dgl.cx/2025/07/git-clone-submodule-cve-2025-48384. Alle Credits an David Leadbeater. Dies ist ein grundlegender Reproduktionsversuch der Schwachstelle. Um auszulösen, führen Sie git clone --recursive...
cve-2024-32002-poc
💥 CVE-2024-32002 – Git Submodule Path Injection PoC Motivazione Durante la risoluzione della macchina Compiled della piattaforma Hack The Box, mi sono imbattuto in un comportamento curioso che coinvolge Git e sottomoduli. Investigando più a fondo, ho trovato questo eccellente post del ricercatore...
CVE-2026-53584
libgit2 (a portable C implementation of Git core methods) is vulnerable to submodule path traversal in versions prior to 1.8.6 and 1.9.5 . The affected code paths in src/libgit2/submodule.c (git_submodule_lookup and git_submodule_add_setup) fail to reject traversal components (e.g., ../) in submo...
GHSA-GFHV-VQV2-4544 Dulwich's submodule path traversal in porcelain.submodule_update / porcelain.clone(recurse_submodules=True) yields RCE via attacker-dropped .git/hooks payload
Summary dulwich.porcelain.submoduleupdate, and by extension porcelain.clone..., recursesubmodules=True, materializes attacker-controlled submodule paths from a crafted upstream repository without path validation. A malicious .gitmodules plus a matching tree gitlink whose path is .git/hooks or any...
CVE-2026-52726 Dulwich's submodule path traversal in porcelain.submodule_update / porcelain.clone(recurse_submodules=True) yields RCE via attacker-dropped .git/hooks payload
Dulwich is a pure-Python implementation of the Git file formats and protocols. Starting in version 0.23.2 and prior to version 1.2.5, dulwich.porcelain.submoduleupdate, and by extension porcelain.clone..., recursesubmodules=True, materializes attacker-controlled submodule paths from a crafted...
PT-2026-48568
🔴 CVE-2026-52726 is being exploited for RCE: attackers can drop malicious .git/hooks payloads via Dulwich's submodule path traversal flaw. This bypasses standard protections. Patch immediately to prevent full compromise. NerdieNews CyberSecurity Vulnerability https://t.co/tIoG1l3nqd...
EulerOS 2.0 SP11 : git (EulerOS-SA-2025-2224)
According to the versions of the git packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Git is a fast, scalable, distributed revision control system with an unusually rich command set that provides both high-level operations and full...
Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: git (UTSA-2025-984661)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-984661 advisory. Git is a fast, scalable, distributed revision control system with an unusually rich command set that provides both high-level operations and full access to internals...
EulerOS 2.0 SP10 : git (EulerOS-SA-2025-2065)
According to the versions of the git packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Git is a fast, scalable, distributed revision control system with an unusually rich command set that provides both high-level operations and full...
EulerOS 2.0 SP10 : git (EulerOS-SA-2025-2093)
According to the versions of the git packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Git is a fast, scalable, distributed revision control system with an unusually rich command set that provides both high-level operations and full...
EulerOS 2.0 SP12 : git (EulerOS-SA-2025-2035)
According to the versions of the git packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Git is a fast, scalable, distributed revision control system with an unusually rich command set that provides both high-level operations and full...
Linux Distros Unpatched Vulnerability : CVE-2025-48384
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Git is a fast, scalable, distributed revision control system with an unusually rich command set that provides both high-level operations and full access to...
git: Git arbitrary code execution
A line-end handling flaw was found in Git. When writing a config entry, values with a trailing carriage return CR are not quoted, resulting in the CR being lost when the config is read later. When initializing a submodule, if the submodule path contains a trailing CR, the altered path is read,...
git: Git arbitrary code execution
A line-end handling flaw was found in Git. When writing a config entry, values with a trailing carriage return CR are not quoted, resulting in the CR being lost when the config is read later. When initializing a submodule, if the submodule path contains a trailing CR, the altered path is read,...
git: Git arbitrary code execution
A line-end handling flaw was found in Git. When writing a config entry, values with a trailing carriage return CR are not quoted, resulting in the CR being lost when the config is read later. When initializing a submodule, if the submodule path contains a trailing CR, the altered path is read,...
git: Git arbitrary code execution
A line-end handling flaw was found in Git. When writing a config entry, values with a trailing carriage return CR are not quoted, resulting in the CR being lost when the config is read later. When initializing a submodule, if the submodule path contains a trailing CR, the altered path is read,...
git: Git arbitrary code execution
A line-end handling flaw was found in Git. When writing a config entry, values with a trailing carriage return CR are not quoted, resulting in the CR being lost when the config is read later. When initializing a submodule, if the submodule path contains a trailing CR, the altered path is read,...
git: Git arbitrary code execution
A line-end handling flaw was found in Git. When writing a config entry, values with a trailing carriage return CR are not quoted, resulting in the CR being lost when the config is read later. When initializing a submodule, if the submodule path contains a trailing CR, the altered path is read,...