CVE-2026-104026

In Sapling SCM prior to v0.2.20260929-102736, control characters were allowed to be embedded in Git subtree URLs. A maliciously constructed repository, if cloned by a target, could trigger code execution on otherwise read-only actions such as sl log/blame/annotate...

CVE-2026-104026

In Sapling SCM versions prior to v0.2.20260929-102736 , the software allows control characters to be embedded in Git subtree URLs . An attacker can exploit this by providing a maliciously constructed repository; if a target clones this repository, it can trigger code execution during otherwise re...

EUVD-2026-91648

In Sapling SCM prior to v0.2.20260929-102736, control characters were allowed to be embedded in Git subtree URLs. A maliciously constructed repository, if cloned by a target, could trigger code execution on otherwise read-only actions such as sl log/blame/annotate...

pivit

Pivit Pivit은 PIV 애플릿을 지원하는 스마트 카드Yubikey에 저장된 x509 인증서를 관리하고, 해당 인증서를 사용하여 데이터를 서명하고 검증하기 위한 명령줄 도구입니다. 커밋과 태그를 서명하고 검증하기 위해 git 명령줄이 외부 프로그램을 호출하는 방식과 완벽하게 호환됩니다. 설치 Brew brew install pivit Go install go install github.com/cashapp/pivit/cmd/pivit@latest 사용법 git이 pivit을 사용하여 서명을 생성하고 검증하도록 설정하려면 ...

CVE-2026-11120-Command-Injection-via-Git-URL-in-CI-CD-Pipeline

CVE-2026-11120 – CI/CD 파이프라인의 Git URL을 통한 명령 삽입 프로그램 코드 Python cicdbuild.py - Clones repository without sanitizing URL import subprocess, sys def cloneandbuildrepourl: Vulnerability: repourl can contain shell metacharacters cmd = f"git clone repourl /tmp/repo" subprocess.checkcallcmd, shell=True...

CVE-2026-33718

CVE-2026-33718 OpenHands는 Git Diff 처리기를 통한 명령 삽입Command Injection 취약점이 있습니다. 기부 PayPal 또는 아래 QR 코드를 스캔하여 이 프로젝트의 유지보수를 지원해 주세요. ⚡ 간단한 사용법 이 프로젝트는 다음과 같은 안전하고 인가된 환경에서만 사용하세요: 로컬 가상 머신 Docker 컨테이너 격리된 랩lab 환경 인가된 침투 테스트 환경 예시 설정: git clone cd Project use python follow below Create a virtual...

DumpsterDiver

DumpsterDiver от @Rzepsky DumpsterDiver — это инструмент, который может анализировать большие объемы данных в поиске жестко закодированных секретов, таких как ключи например, AWS Access Key, Azure Share Key или SSH-ключи или пароли. Кроме того, он позволяет создавать простые правила поиска с...

bst

Binary String Toolkit Summary The Binary String Toolkit or BST for short is a rather simple utility to convert binary strings to various formats suitable for inclusions in source codes, such as those used to develop exploits and Proof of Concepts in the security field. Features Convert and dump...

Gitmails

Development - IMPORTANT This Gitmails version is no longer maintained. Check out the Gitmails Shell port if you want to use a version that is maintained and, hopefully, developed. If you do not want to use the shell port and prefer the Python version, feel free to fork Gitmails and direct it to...

CVE-2024-32002-git-rce-father-poc

이 저장소에는 README가 없습니다...

Git-Secret

Git-Secret 저장소에서 API 키 / 특정 키워드를 찾기 위한 Go 스크립트 업데이트 V1.0.2 🚀 일부 검사기 제거 GitHub dorks를 포함한 예제 파일 추가 go install 명령어 지원 추가 issue 5 스크린샷 📷 설치 방법 최신 버전을 설치하려면: go install github.com/daffainfo/Git-Secret@latest 또는 이 저장소를 클론하고 클론한 저장소 내에서 go build를 실행하여 프로젝트를 빌드할 수 있습니다. 사용 방법 ./Git-Secret dorks 경로에는 일부...

Gitea 1.1.0 - 1.12.5 - Remote Code Execution

Gitea 1.1.0 through 1.12.5 is susceptible to authenticated remote code execution, via the git hook functionality, in customer environments where the documentation is not understood e.g., one viewpoint is that the dangerousness of this feature should be documented immediately above the...

Gogs 0.5.5 - 0.12.2 - Remote Code Execution

Gogs 0.5.5 through 0.12.2 is susceptible to authenticated remote code execution via the git hooks functionality. There can be a privilege escalation if access to this feature is granted to a user who does not have administrative privileges. NOTE: Since this is mentioned in the documentation but n...

CVE-2022-39275

CVE-2022-39275 CVE-2022-39275를 위한 POC입니다. 보안 권고 관련 자료: NIST NVD CVE.org Github Security Advisory 이 저장소는 커밋 해시 47f9f5fb29be2b5892c79ace4f23022f397a0a5e의 포크입니다 링크. git 서브모듈도 함께 변경해야 했기 때문에 다시 푸시되었습니다. POC-설정 설정 가이드를 따르십시오. 만약 구버전이라면, 다음 단계를 따르십시오: cd saleor-platform docker compose build docker...

gitpython: GitPython: Arbitrary File Overwrite via improper git option validation

A flaw was found in GitPython. This vulnerability allows a remote attacker to overwrite arbitrary files on the system. By failing to properly validate git options passed to the Diffable.diff method, an attacker can supply a malicious output argument to write patch content to attacker-controlled...

GitPython: GitPython: Remote Code Execution via Git directory impersonation

A flaw was found in GitPython. This vulnerability allows a remote attacker to execute arbitrary code. By failing to properly validate the git directory location, GitPython allows attackers to impersonate the git directory using tracked files such as gitdir, commondir, and HEAD. An attacker can th...

GitPython: GitPython: Remote Code Execution via Git directory impersonation

A flaw was found in GitPython. This vulnerability allows a remote attacker to execute arbitrary code. By failing to properly validate the git directory location, GitPython allows attackers to impersonate the git directory using tracked files such as gitdir, commondir, and HEAD. An attacker can th...

GitPython: GitPython: Arbitrary command execution due to bypass of dangerous Git option checks

A flaw was found in GitPython, a Python library used to interact with Git repositories. This vulnerability allows an attacker to achieve arbitrary command execution by providing specially crafted arguments kwargs to functions such as Repo.clonefrom, Remote.fetch, Remote.pull, or Remote.push. This...

GitPython: GitPython: Remote Code Execution via Git directory impersonation

A flaw was found in GitPython. This vulnerability allows a remote attacker to execute arbitrary code. By failing to properly validate the git directory location, GitPython allows attackers to impersonate the git directory using tracked files such as gitdir, commondir, and HEAD. An attacker can th...

hook

hook gitrce용 서브모듈: https://github.com/EQSTSeminar/gitrce 공격 시나리오 kali192.168.216.129 --원격 저장소 주소 전달-- Win192.168.216.130 kali192.168.216.129 --Git clone && hook 스크립트post-checkout 실행-- Win192.168.216.130 면책 조항 이 저장소는 CVE-2024-32002에 대한 git clone RCE 익스플로잇으로 사용하기 위한 것이 아닙니다. 이 프로젝트의 목적은 사람들이 이 취약점에...