reposcanner

Reposcanner Reposcanner는 API 키와 같은 흥미로운 문자열을 찾기 위해 Git 저장소의 커밋 기록을 검색하는 Python 스크립트입니다. truffleHog에서 영감을 받았습니다. 설치 Python Git 모듈이 필요합니다 Debian에서는 python3-git. Docker root@kitploit: docker build -t reposcanner . docker run -it --rm reposcanner -h docker run -it --rm reposcanner -r 사용법 root@kitploi...

gitrob

Gitrob: Putting the Open Source in OSINT 오픈 소스를 OSINT에 활용 Gitrob는 Github의 공개 저장소에 푸시된 잠재적으로 민감한 파일을 찾는 데 도움을 주는 도구입니다. Gitrob는 사용자나 조직에 속한 저장소를 설정 가능한 깊이까지 복제하고, 커밋 히스토리를 반복하며 잠재적으로 민감한 파일의 시그니처와 일치하는 파일을 플래깅합니다. 발견된 결과는 웹 인터페이스를 통해 제공되어 쉽게 탐색하고 분석할 수 있습니다. 사용법 root@kitploit: gitrob options targe...

Gitmails

개발 - 중요 이 Gitmails 버전은 더 이상 유지보수되지 않습니다. 유지보수되며 발전되고 있는 버전을 사용하려면 Gitmails Shell 포트를 확인하세요. 쉘 포트를 사용하지 않고 Python 버전을 선호한다면, Gitmails를 포크하여 원하는 방향으로 자유롭게 이끌어가세요. 개요 Gitmails는 git 커밋에 작성자가 설정한 이름과 이메일이 포함되어 있으며, 버전 관리 호스트 서비스가 많은 프로젝트를 저장하는 데 사용된다는 점을 활용합니다. Gitmails가 하는 일은 다음과 같습니다: 조직, 팀, 그룹, 사용자...

Gitmails

Development - IMPORTANT This Gitmails version is no longer maintained. Check out the Gitmails Shell port if you want to use a version that is maintained and, hopefully, developed. If you do not want to use the shell port and prefer the Python version, feel free to fork Gitmails and direct it to...

gitrob

Gitrob: OSINTにおけるオープンソースの活用 Gitrobは、GitLabまたはGithub上のリポジトリにプッシュされた機密情報の可能性があるものを見つけるためのツールです。Gitrobは、ユーザーまたはグループ/組織に属するリポジトリを設定可能な深さまでクローンし、コミット履歴を反復処理して、機密情報の可能性があるパターンに一致するファイルやコミットコンテンツにフラグを立てます。検出結果はWebインターフェースを通じて表示され、簡単に閲覧・分析できます。 使い方 root@kitploit: gitrob options target target2 ... targetN...

Gitea: API access token scope enforcement bypass on repository RSS/Atom feed endpoints leaks private repository commit data

Summary A Gitea personal access token PAT restricted to a non-repository scope e.g. read:issue can read the commit history of any private repository the token owner can access, via the repository RSS/Atom feed endpoints. The same token is correctly denied 403 on /raw, /media, /archive, and the...

CVE-2026-54527

JupyterLab Git is a Git extension for JupyterLab. From 0.30.0b3 before 0.54.0, the PlainTextDiff.ts createHeader method passes Git filenames directly to innerHTML when rendering renamed files in commit history, allowing a crafted filename to execute JavaScript when a victim views the rename diff ...

CVE-2026-54527 JupyterLab Git: Stored XSS leading to RCE

JupyterLab Git is a Git extension for JupyterLab. From 0.30.0b3 before 0.54.0, the PlainTextDiff.ts createHeader method passes Git filenames directly to innerHTML when rendering renamed files in commit history, allowing a crafted filename to execute JavaScript when a victim views the rename diff ...

CVE-2026-54527 JupyterLab Git: Stored XSS leading to RCE

JupyterLab Git is a Git extension for JupyterLab. From 0.30.0b3 before 0.54.0, the PlainTextDiff.ts createHeader method passes Git filenames directly to innerHTML when rendering renamed files in commit history, allowing a crafted filename to execute JavaScript when a victim views the rename diff ...

CVE-2026-54527

CVE-2026-54527 affects the jupyterlab-git extension. The PlainTextDiff.ts createHeader() renders renamed-file headers by directly inserting Git filenames into innerHTML, enabling stored XSS that can lead to remote code execution. Affected range is before 0.54.0, with fix released in 0.54.0. Explo...

CVE-2026-54527: Improper Neutralization of Input During Web Page Generation

JupyterLab Git is a Git extension for JupyterLab. From 0.30.0b3 before 0.54.0, the PlainTextDiff.ts createHeader method passes Git filenames directly to innerHTML when rendering renamed files in commit history, allowing a crafted filename to execute JavaScript when a victim views the rename diff ...

GCVE-1-2026-0007

creationtimestamp| type| source ---|---|--- 2026-01-20 21:00:27+00:00| seen| https://bsky.app/profile/adulau.infosec.exchange.ap.brid.gy/post/3mcv2ed5ci5s2 2026-01-20 21:09:51+00:00| seen| https://infosec.exchange/@adulau/115929431973189919 2026-01-20 21:12:45+00:00| seen|...

EUVD-2024-54018

Malicious code in bioql PyPI...

EUVD-2025-16050

Malicious code in bioql PyPI...

CVE-2025-48064

GitHub Desktop is an open-source, Electron-based GitHub app designed for git development. Prior to version 3.4.20-beta3, an attacker convincing a user to view a file in a commit of their making in the history view can cause information disclosure by means of Git attempting to access a network...

CVE-2025-48064 GitHub Desktop vulnerable to maliciously crafted file renames leading to information disclosure

GitHub Desktop is an open-source, Electron-based GitHub app designed for git development. Prior to version 3.4.20-beta3, an attacker convincing a user to view a file in a commit of their making in the history view can cause information disclosure by means of Git attempting to access a network...

CVE-2025-48064 GitHub Desktop vulnerable to maliciously crafted file renames leading to information disclosure

GitHub Desktop is an open-source, Electron-based GitHub app designed for git development. Prior to version 3.4.20-beta3, an attacker convincing a user to view a file in a commit of their making in the history view can cause information disclosure by means of Git attempting to access a network...

SUSE CVE-2024-27393

In the Linux kernel, the following vulnerability has been resolved: xen-netfront: Add missing skbmarkforrecycle Notice that skbmarkforrecycle is introduced later than fixes tag in commit 6a5bcd84e886 "pagepool: Allow drivers to hint on SKB recycling". It is believed that fixes tag were missing a...

Updated git packages fix security vulnerability

gitattributes are a mechanism to allow defining attributes for paths. These attributes can be defined by adding a '.gitattributes' file to the repository, which contains a set of file patterns and the attributes that should be set for paths matching this pattern. When parsing gitattributes,...

Integer overflow

Git is distributed revision control system. gitattributes are a mechanism to allow defining attributes for paths. These attributes can be defined by adding a .gitattributes file to the repository, which contains a set of file patterns and the attributes that should be set for paths matching this...