CVE-2025-31722

CVE-2025-31722 — Jenkins Templating Engine RCE For educational and authorized security research purposes only. Description Sandbox bypass vulnerability in the Jenkins Templating Engine JTE plugin = 2.5.3 that allows a low-privileged user to execute arbitrary code on the Jenkins server. The flaw...

Git-Secret

Git-Secret Go scripts for finding an API key / some keywords in repository Update V1.0.2 🚀 Removing some checkers Adding example file contains github dorks Add support to go install command issue 5 Screenshoot 📷 How to Install To install the latest version: go install...

cve-2024-10220-test

CVE-2024-10220 Test Repository This repository is used for testing CVE-2024-10220 Kubernetes gitRepo volume vulnerability as part of HPC security research at the University of Central Oklahoma. WARNING: This repository contains a malicious Git hook for controlled security testing. Do not use in...

CVE-2025-48384-submodule

CVE-2025-48384 Submodule This submodule contains a malicious post-checkout hook for demonstration...

CVE-2024-32002

CVE-2024-32002: Exploiting Git RCE via git clone This repository contains a PoC for exploiting CVE-2024-32002, a vulnerability in Git that allows RCE during a git clone operation. By crafting repositories with submodules in a specific way, an attacker can exploit symlink handling on...

openhands-disclosure

Summary Multiple Command Injection vulnerabilities in openhands str: """Initialize the repository. Args: outputdir: The output directory to write the repository to issuenumber: The issue number to fix issuetype: The type of the issue basecommit: The base commit to checkout if issuetype is pr """...

CVE-2022-44268

Project moved Project has been moved to https://git.rotfl.io/v/CVE-2022-44268...

cve-2022-36804

Atlassian Bitbucket RCE PoC - CVE-2022-36804 This repo contains a simple PoC script for Atlassian Bitbucket's remove code execution vulnerability. You can simply run this script via following commands: echo 'bitbucket.redacted.com' | python3 cve-2022-36804.py Or you can create a targets file from...

darling

Darling Darling is a runtime environment for macOS applications. Please note that most GUI applications will not run at the moment. Download Packages for some distributions are available for download under releases. Build Instructions For build instructions, visit Darling Docs. Prefixes Darling h...

CVE-2021-21300

CVE-2021-21300 just clone me then your machine will print "PWNED" ref:https://www.openwall.com/lists/oss-security/2021/03/09/3...

git-crypt

git-crypt - transparent file encryption in git git-crypt enables transparent encryption and decryption of files in a git repository. Files which you choose to protect are encrypted when committed, and decrypted when checked out. git-crypt lets you freely share a repository containing a mix of...

EUVD-2026-112374

n8n before 1.123.85, 2.x before 2.43.5, and 2.44.x before 2.44.1 stores credential secrets in execution error data when operations fail in the Git, MongoDB Atlas Vector Store, and Google Cloud Storage nodes. Users who can view a workflow's executions but cannot read the credential can recover Git...

CVE-2020-27955

CVE-2020-27955 Vulnerability Reproduction 1. Download the vulnerable version of Git-LFS on the Windows machine Download link: https://github.com/git-for-windows/git/releases/tag/v2.29.2.windows.1 2. Install on the Windows machine, add the following information to the hosts file. 10.1.1.5 is the...

CVE-2024-32004

Create tmp repo, set uploadpack.allowfilter to true git init tmp git -C tmp config uploadpack.allowfilter 1 Clone evil from tmp repo git clone --filter=blob:none --no-local --no-checkout tmp evil rm -rf tmp Configure remote filter script git -C evil config remote.origin.uploadpack...

gitGRAB

gitGRAB Install Requests pip install requests Execute the program python3 gitgrab.py...

CVE-2026-60004

CVE-2026-60004 — Gitea diffpatch RCE Remote code execution PoC for the Gitea diffpatch endpoint. An account with write access to a repository on instances with open registration, simply registering an account suffices can execute arbitrary shell commands on the server as the Gitea service account...

cve-2024-32002-poc-aw

CVE-2024-32002 PRC AW A POC for CVE-2024-32002 demonstrating arbitrary write into the .git directory. See cve-2024-32002-submodule-aw for the related submodule repository. What this repo contains A symlink with an arbitraty name that links to the .git directory. A .gitmodules file that defines th...

fbchecker

ABANDONED Facebook block multiple access with their API FACEBOOK MASS ACCOUNT CHECKER Facebook Mass Account Checker Without Locked Account Simple Installation : apt install git php -y git clone https://github.com/fdciabdul/fbchecker cd fbchecker php fbcheck.php Usage php fbcheck.php target.txt...

CVE-2017-1000117

Server Launcher for CVE-2017-1000117 Run the following command, then open your web browser and go to http://localhost:8088! $ git clone --recursive https://github.com/0gawa/CVE-2017-1000117 If "Hello World" is displayed, update git! It's vulnerable...

CVE-2020-27955

Git-lfs Remote Code Execution RCE exploit CVE-2020-27955 .bat / powershell version Vulnerable: git, GitHub CLI gh, GitHub Desktop, Visual Studio Code, SourceTree, SmartGit, GitKraken etc. Discovered by Dawid Golunski https://legalhackers.com https://exploitbox.io Tested on Windows on: git, GitHub...