ALSA-2025:0673 Important: git-lfs security update

Git Large File Storage LFS replaces large files such as audio samples, videos, datasets, and graphics with text pointers inside Git, while storing the file contents on a remote server. Security Fixes: git-lfs: Git LFS permits exfiltration of credentials via crafted HTTP URLs CVE-2024-53263 For mo...

RHEL 9 : git-lfs (RHSA-2025:0673)

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2025:0673 advisory. Git Large File Storage LFS replaces large files such as audio samples, videos, datasets, and graphics with text pointers inside Git, while storing th...

CVE-2025-0429

creationtimestamp| type| source ---|---|--- 2025-01-22 08:01:59+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/2523 2025-01-22 08:16:26+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgcwi36zeg2j 2025-01-22 08:54:26+00:00| seen|...

CBL Mariner 2.0 Security Update: git (CVE-2024-52006)

The version of git installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-52006 advisory. - Git is a fast, scalable, distributed revision control system with an unusually rich command set that provides...

CBL Mariner 2.0 Security Update: git (CVE-2024-50349)

The version of git installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-50349 advisory. - Git is a fast, scalable, distributed revision control system with an unusually rich command set that provides...

CVE-2024-49732

creationtimestamp| type| source ---|---|--- 2025-01-21 23:17:08+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgbydqc7tp2e 2025-01-21 23:50:04+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lgc26jgtck2h 2025-01-22 01:21:03+00:00| seen|...

CVE-2025-24020 WeGIA Open Redirect vulnerability

WeGIA is a Web manager for charitable institutions. An Open Redirect vulnerability was identified in the control.php endpoint of versions up to and including 3.2.10 of the WeGIA application. The vulnerability allows the nextPage parameter to be manipulated, redirecting authenticated users to...

CVE-2025-24020 WeGIA Open Redirect vulnerability

WeGIA is a Web manager for charitable institutions. An Open Redirect vulnerability was identified in the control.php endpoint of versions up to and including 3.2.10 of the WeGIA application. The vulnerability allows the nextPage parameter to be manipulated, redirecting authenticated users to...

CVE-2025-24020

WeGIA Open Redirect (CVE-2025-24020) affects WeGIA Web Manager versions up to 3.2.10. The vulnerability is in control.php where the nextPage parameter is not validated, allowing an authenticated user to be redirected to arbitrary external URLs. This can enable phishing or user redirection to mali...

CVE-2024-36042

creationtimestamp| type| source ---|---|--- 2025-01-19 17:02:13+00:00| seen| https://bsky.app/profile/decrypt.lol/post/3lg4chhx2kl2n 2025-03-12 03:30:38+00:00| seen| https://gist.github.com/wulfgarpro/a625586ce55cc602e21ed69b6e29e4d4 2025-08-20 09:00:04+00:00| published-proof-of-concept|...

CVE-2025-23202

Bible Module is a tool designed for ROBLOX developers to integrate Bible functionality into their games. The FetchVerse and FetchPassage functions in the Bible Module are susceptible to injection attacks due to the absence of input validation. This vulnerability could allow an attacker to...

CVE-2024-52363

IBM InfoSphere Information Server 11.7 could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL request containing "dot dot" sequences /../ to view arbitrary files on the system...

CVE-2025-23703

creationtimestamp| type| source ---|---|--- 2025-01-16 20:19:37+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfv43pt2ep2n 2025-01-16 22:05:46+00:00| seen| https://t.me/cvedetector/15630 2025-01-17 00:53:23+00:00| seen|...

SUSE CVE-2024-52006

Git is a fast, scalable, distributed revision control system with an unusually rich command set that provides both high-level operations and full access to internals. Git defines a line-based protocol that is used to exchange information between Git and Git credential helpers. Some ecosystems mos...

SUSE CVE-2024-53263

Git LFS is a Git extension for versioning large files. When Git LFS requests credentials from Git for a remote host, it passes portions of the host's URL to the git-credential1 command without checking for embedded line-ending control characters, and then sends any credentials it receives back fr...

CVE-2025-23040

GitHub Desktop is an open-source Electron-based GitHub app designed for git development. An attacker convincing a user to clone a repository directly or through a submodule can allow the attacker access to the user's credentials through the use of maliciously crafted remote URL. GitHub Desktop...

CVE-2025-23040 Maliciously crafted remote URLs could lead to credential leak in GitHub Desktop

GitHub Desktop is an open-source Electron-based GitHub app designed for git development. An attacker convincing a user to clone a repository directly or through a submodule can allow the attacker access to the user's credentials through the use of maliciously crafted remote URL. GitHub Desktop...

GO-2025-3390 Git LFS permits exfiltration of credentials via crafted HTTP URLs in github.com/git-lfs/git-lfs

Git LFS permits exfiltration of credentials via crafted HTTP URLs in github.com/git-lfs/git-lfs...

FreeBSD : git -- multiple vulnerabilities (3445e4b6-d2b8-11ef-9ff3-43c2b5d6c4c8)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 3445e4b6-d2b8-11ef-9ff3-43c2b5d6c4c8 advisory. Git development team reports: CVE-2024-50349: Printing unsanitized URLs when asking for...

CVE-2024-52006

A flaw was found in Git. Git defines a line-based protocol that is used to exchange information between Git and Git credential helpers. Some ecosystems, most notably .NET and node.js, interpret single Carriage Return characters as newlines, which render the protections against CVE-2020-5260...