CVE-2020-14144-GiTea-git-hooks-rce

CVE-2020-14144 - Exécution de code à distance RCE authentifiée sur GiTea Un script pour exploiter CVE-2020-14144 - Exécution de code à distance authentifiée sur GiTea via les hooks git Fonctionnalités Génération automatique d'une payload de reverse shell à partir de l'IP et du PORT Téléverser un...

GitBackdorizer

GitBackdorizer BÊTA GitBackdorizer est une preuve de concept, entièrement inspirée de la conférence 50 ton of backdoors d'Ulisses Castro, qui abuse du manque d'attention des utilisateurs pour voler les identifiants d'accès Git. Fonctionnement GitBackdorizer se compose de trois éléments : le...

git-secrets

=========== git-secrets Vous empêche de commiter des mots de passe et autres informations sensibles dans un dépôt git. .. contents:: :depth: 2 Synopsis :: git secrets --scan -r|--recursive --cached --no-index --untracked ... git secrets --scan-history git secrets --install -f|--force git secrets...

CVE-2024-10220-githooks

CVE-2024-10220 Test réf https://irsl.medium.com/sneaky-write-hook-git-clone-to-root-on-k8s-node-e38236205d54...

CVE-2026-52813-Gogs-RCE

CVE-2026-52813 — Gogs 경로 탐색으로 인한 Git Hooks 원격 코드 실행 방어 중심 분석 보안 연구 / 블루팀용 writeup. 이 저장소는 무기화된 PoC를 포함하지 않습니다. 재현이 필요한 연구자는 공식 advisory에서 참조하는 공개 PoC를 사용하십시오. 항목| 내용 ---|--- CVE| CVE-2026-52813 별칭| GHSA-c39w-43gm-34h5 / GO-2026-5305 영향받는 버전| Gogs /와 결합하면 다른 저장소의 로컬 checkout 내에 악성 hooks/update를 배치...

CVE-2025-65964

n8n Git Hooks CTF Démo ⚠️ Ce dépôt est destiné uniquement à des fins éducatives et de démonstration CTF. Scénario Une plateforme d'automatisation par exemple, n8n utilise des opérations Git dans le cadre d'un workflow. Le workflow permet une configuration Git arbitraire via git config. Un workflow...

CVE-2026-60004-PoC

CVE-2026-60004: Удалённое выполнение кода через API diffpatch в Gitea !WARNING Этот репозиторий предназначен исключительно для авторизованных исследований в области безопасности и контролируемого лабораторного тестирования. Не запускайте proof of concept против систем, которыми вы не владеете или...

CVE-2021-21300

CVE-2021-21300 Dans plusieurs versions de git, la gestion des liens symboliques est relâchée. Après avoir téléchargé des fichiers vers git sur un système de fichiers sensible à la casse par exemple Linux, cloner un dépôt malveillant sur un hôte utilisant un système de fichiers insensible à la cas...

Gitea-Git-Hooks-RCE-CVE-2020-14144-

RCE через Git Hooks в Gitea CVE-2020-14144 Практика OffsecProvingGrounds — Разбор машины Roquefort и PoC Обзор Пункт| Детали ---|--- Машина| Roquefort Proving Grounds Practice ОС| Linux Версия Gitea| 1.7.5 CVE| CVE-2020-14144 Вектор| Аутентифицированное RCE через Git Hooks Пользователь| chloe...

CVE-2025-8110-Gogs-Remote-Code-Execution

Logiciel affecté : Gogs service Git auto-hébergé versions antérieures à 0.13.0. Type de vulnérabilité : Injection de commandes dans le mécanisme de hook Git. Description : Un attaquant disposant d'un accès en push à un dépôt peut créer un hook Git malveillant qui injecte des commandes dans le...

CVE-2026-78677

A flaw was found in GitPython. This vulnerability allows a remote attacker to create arbitrary Git directories outside the intended clone destination. By manipulating the separategitdir parameter during repository cloning, an attacker can redirect repository metadata to an attacker-controlled...

CVE-2026-93993: Inclusion of Functionality from Untrusted Control Sphere

Mistral Vibe before 2.25.5 contains a remote code execution vulnerability in the worktree creation process that executes git hooks before trust validation. Attackers can supply a repository with a crafted post-checkout hook that executes arbitrary shell commands with the privileges of the user...

CVE-2026-86320 Flatpak-builder: host code execution via `git am` hook execution in patch source extraction (`use-git-am`)

A flaw was found in flatpak-builder where Git hooks are not disabled when applying patch sources with use-git-am: true. An attacker who can provide a malicious source containing a Git post-applypatch hook can cause the hook to execute on the host during the build process, resulting in arbitrary...

CVE-2026-86320: Improper Control of Generation of Code

A flaw was found in flatpak-builder where Git hooks are not disabled when applying patch sources with use-git-am: true. An attacker who can provide a malicious source containing a Git post-applypatch hook can cause the hook to execute on the host during the build process, resulting in arbitrary...

gitpython: GitPython: Remote Code Execution via malicious Git hooks

A flaw was found in GitPython. This vulnerability allows a remote attacker to achieve arbitrary code execution. By supplying a specially crafted template parameter to the Repo.init function, an attacker can point to a directory containing malicious Git hooks. When Git operations are performed on...

CVE-2026-19590

OpenAI Codex Desktop for Windows and macOS could execute attacker-controlled Git hooks because automated Git operations trusted the repository's local core.hooksPath setting. If a user opens an attacker-prepared repository whose preserved .git/config points core.hooksPath to an attacker-controlle...

EUVD-2026-69393

OpenAI Codex Desktop for Windows and macOS could execute attacker-controlled Git hooks because automated Git operations trusted the repository's local core.hooksPath setting. If a user opens an attacker-prepared repository whose preserved .git/config points core.hooksPath to an attacker-controlle...

CVE-2026-19590

OpenAI Codex Desktop for Windows and macOS is vulnerable to arbitrary code execution due to a lack of proper sanitization of configuration settings. Specifically, automated Git operations trust the repository's local core.hooksPath setting. An attacker can provide a specially crafted repository w...

CVE-2026-19590

OpenAI Codex Desktop for Windows and macOS could execute attacker-controlled Git hooks because automated Git operations trusted the repository's local core.hooksPath setting. If a user opens an attacker-prepared repository whose preserved .git/config points core.hooksPath to an attacker-controlle...

CVE-2026-19590

OpenAI Codex Desktop for Windows and macOS could execute attacker-controlled Git hooks because automated Git operations trusted the repository's local core.hooksPath setting. If a user opens an attacker-prepared repository whose preserved .git/config points core.hooksPath to an attacker-controlle...