reposcanner

Reposcanner Reposcanner는 API 키와 같은 흥미로운 문자열을 찾기 위해 Git 저장소의 커밋 기록을 검색하는 Python 스크립트입니다. truffleHog에서 영감을 받았습니다. 설치 Python Git 모듈이 필요합니다 Debian에서는 python3-git. Docker root@kitploit: docker build -t reposcanner . docker run -it --rm reposcanner -h docker run -it --rm reposcanner -r 사용법 root@kitploi...

gitrob

Gitrob：将开源置于 OSINT 之中 Gitrob 是一款帮助发现推送到 GitLab 或 Github 仓库中的潜在敏感信息的工具。Gitrob 会克隆属于某个用户或组/组织的仓库，克隆深度可配置，并遍历提交历史，标记与潜在敏感信息签名匹配的文件和/或提交内容。调查结果将通过 Web 界面呈现，便于浏览和分析。 用法 root@kitploit: gitrob options target target2 ... targetN 重要提示 如果你的目标是 GitLab 组，请将组 ID 作为目标参数。你可以在 GitLab 界面中组名的正下方找到组 ID。否则，名称即可作为目标参...

gitrob

Gitrob: Putting the Open Source in OSINT 오픈 소스를 OSINT에 활용 Gitrob는 Github의 공개 저장소에 푸시된 잠재적으로 민감한 파일을 찾는 데 도움을 주는 도구입니다. Gitrob는 사용자나 조직에 속한 저장소를 설정 가능한 깊이까지 복제하고, 커밋 히스토리를 반복하며 잠재적으로 민감한 파일의 시그니처와 일치하는 파일을 플래깅합니다. 발견된 결과는 웹 인터페이스를 통해 제공되어 쉽게 탐색하고 분석할 수 있습니다. 사용법 root@kitploit: gitrob options targe...

Gitmails

Development - IMPORTANT This Gitmails version is no longer maintained. Check out the Gitmails Shell port if you want to use a version that is maintained and, hopefully, developed. If you do not want to use the shell port and prefer the Python version, feel free to fork Gitmails and direct it to...

Gitmails

개발 - 중요 이 Gitmails 버전은 더 이상 유지보수되지 않습니다. 유지보수되며 발전되고 있는 버전을 사용하려면 Gitmails Shell 포트를 확인하세요. 쉘 포트를 사용하지 않고 Python 버전을 선호한다면, Gitmails를 포크하여 원하는 방향으로 자유롭게 이끌어가세요. 개요 Gitmails는 git 커밋에 작성자가 설정한 이름과 이메일이 포함되어 있으며, 버전 관리 호스트 서비스가 많은 프로젝트를 저장하는 데 사용된다는 점을 활용합니다. Gitmails가 하는 일은 다음과 같습니다: 조직, 팀, 그룹, 사용자...

CVE-2026-54527

JupyterLab Git is a Git extension for JupyterLab. From 0.30.0b3 before 0.54.0, the PlainTextDiff.ts createHeader method passes Git filenames directly to innerHTML when rendering renamed files in commit history, allowing a crafted filename to execute JavaScript when a victim views the rename diff ...

CVE-2026-54527 JupyterLab Git: Stored XSS leading to RCE

JupyterLab Git is a Git extension for JupyterLab. From 0.30.0b3 before 0.54.0, the PlainTextDiff.ts createHeader method passes Git filenames directly to innerHTML when rendering renamed files in commit history, allowing a crafted filename to execute JavaScript when a victim views the rename diff ...

CVE-2026-54527 JupyterLab Git: Stored XSS leading to RCE

JupyterLab Git is a Git extension for JupyterLab. From 0.30.0b3 before 0.54.0, the PlainTextDiff.ts createHeader method passes Git filenames directly to innerHTML when rendering renamed files in commit history, allowing a crafted filename to execute JavaScript when a victim views the rename diff ...

CVE-2026-54527

CVE-2026-54527 affects the jupyterlab-git extension. The PlainTextDiff.ts createHeader() renders renamed-file headers by directly inserting Git filenames into innerHTML, enabling stored XSS that can lead to remote code execution. Affected range is before 0.54.0, with fix released in 0.54.0. Explo...

GCVE-1-2026-0007

creationtimestamp| type| source ---|---|--- 2026-01-20 21:00:27+00:00| seen| https://bsky.app/profile/adulau.infosec.exchange.ap.brid.gy/post/3mcv2ed5ci5s2 2026-01-20 21:09:51+00:00| seen| https://infosec.exchange/@adulau/115929431973189919 2026-01-20 21:12:45+00:00| seen|...

EUVD-2024-54018

Malicious code in bioql PyPI...

EUVD-2025-16050

Malicious code in bioql PyPI...

CVE-2025-48064

GitHub Desktop is an open-source, Electron-based GitHub app designed for git development. Prior to version 3.4.20-beta3, an attacker convincing a user to view a file in a commit of their making in the history view can cause information disclosure by means of Git attempting to access a network...

CVE-2025-48064 GitHub Desktop vulnerable to maliciously crafted file renames leading to information disclosure

GitHub Desktop is an open-source, Electron-based GitHub app designed for git development. Prior to version 3.4.20-beta3, an attacker convincing a user to view a file in a commit of their making in the history view can cause information disclosure by means of Git attempting to access a network...

CVE-2025-48064 GitHub Desktop vulnerable to maliciously crafted file renames leading to information disclosure

GitHub Desktop is an open-source, Electron-based GitHub app designed for git development. Prior to version 3.4.20-beta3, an attacker convincing a user to view a file in a commit of their making in the history view can cause information disclosure by means of Git attempting to access a network...

SUSE CVE-2024-27393

In the Linux kernel, the following vulnerability has been resolved: xen-netfront: Add missing skbmarkforrecycle Notice that skbmarkforrecycle is introduced later than fixes tag in commit 6a5bcd84e886 "pagepool: Allow drivers to hint on SKB recycling". It is believed that fixes tag were missing a...

Updated git packages fix security vulnerability

gitattributes are a mechanism to allow defining attributes for paths. These attributes can be defined by adding a '.gitattributes' file to the repository, which contains a set of file patterns and the attributes that should be set for paths matching this pattern. When parsing gitattributes,...

Integer overflow

Git is distributed revision control system. gitattributes are a mechanism to allow defining attributes for paths. These attributes can be defined by adding a .gitattributes file to the repository, which contains a set of file patterns and the attributes that should be set for paths matching this...

GSD-2023-1001218 perf: Fix possible memleak in pmu_dev_alloc()

perf: Fix possible memleak in pmudevalloc This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.86 by commit...

truffleHog - Searches Through Git Repositories For High Entropy Strings And Secrets, Digging Deep Into Commit History

Searches through git repositories for secrets, digging deep into commit history and branches. This is effective at finding secrets accidentally committed. Join The Slack Have questions? Feedback? Jump in slack and hang out with me...