Exploit for Unrestricted Upload of File with Dangerous Type in Git

PoC exploit for CVE-2024-32002, a remote code execution vulnerab...

The vulnerability of the Gogs self-managed Git repository creation software lies in the possibility of manipulating arguments, allowing a hacker to execute arbitrary commands.

The vulnerability of the Gogs self-managed Git repository creation software is related to the implementation or modification of arguments. Exploiting this vulnerability allows a malicious actor, operating remotely, to execute arbitrary commands...

The vulnerability of the Nomad application’s Go-getter orchestrator library, related to improper handling of argument separators in commands, allows a malicious actor to format the Git URL, thereby allowing them to inject additional Git arguments into the Git command.

The vulnerability of the Nomad application’s Go-getter orchestrator library relates to the improper elimination of argument separators in commands. Exploiting this vulnerability allows a malicious actor to format the Git URL remotely, thereby introducing additional Git arguments during the Git...

ROS-20240729-05

Vulnerability in the libssh2 library of Libgit2's implementation of Git's C methods is related to validation bugs of cryptographic signatures. Exploitation of the vulnerability could allow an attacker acting remotely, execute a man-in-the-middle attack...

Exploit for Unrestricted Upload of File with Dangerous Type in Git

CVE-2024-32002: Exploiting Git RCE via git clone This repos...

SUSE SLES15: git / git-arch / git-core / git-cvs / git-daemon / git-doc / etc (SUSE-SU-2024:2599-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2024:2599-1 advisory. - CVE-2024-24577: Fixed arbitrary code execution due to heap corruption in gitindexadd bsc1219660 Tenable has extracted the preceding...

USN-6793-1: Git vulnerabilities | Cloud Foundry

Severity Medium Vendor Canonical Ubuntu Versions Affected Canonical Ubuntu 22.04 Description It was discovered that Git incorrectly handled certain submodules. An attacker could possibly use this issue to execute arbitrary code. This issue was fixed in Ubuntu 22.04 LTS, Ubuntu 23.10 and Ubuntu...

Photon OS 4.0: Git PHSA-2023-4.0-0426

An update of the git package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2023-4.0-0426. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid20426...

Photon OS 5.0: Git PHSA-2024-5.0-0271

An update of the git package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2024-5.0-0271. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid20453...

SUSE: Security Advisory (SUSE-SU-2024:2599-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PT-2024-6167 · Unknown +2 · Soft Serve +2

Name of the Vulnerable Software and Affected Versions: Soft Serve versions prior to 0.7.5 Description: The issue is related to Soft Serve passing all environment variables given by the client to git subprocesses, including variables that control program execution, such as LD PRELOAD. This can be...

Photon OS 4.0: Git PHSA-2024-4.0-0611

An update of the git package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2024-4.0-0611. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid20444...

Photon OS 3.0: Git PHSA-2023-3.0-0526

An update of the git package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2023-3.0-0526. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid20373...

Photon OS 3.0: Git PHSA-2022-3.0-0486

An update of the git package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2022-3.0-0486. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid20398...

SUSE-SU-2024:2599-1 Security update for git

This update for git fixes the following issues: - CVE-2024-24577: Fixed arbitrary code execution due to heap corruption in gitindexadd bsc1219660...

SUSE SLES12: git / git-arch / git-core / git-cvs / git-daemon / git-doc / etc (SUSE-SU-2024:2592-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2024:2592-1 advisory. - CVE-2024-24577: Fixed arbitrary code execution due to heap corruption in gitindexadd bsc1219660 Tenable has extracted the preceding...

SUSE: Security Advisory (SUSE-SU-2024:2592-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Photon OS 3.0: Git PHSA-2019-3.0-0036

An update of the git package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2019-3.0-0036. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid20307...

Photon OS 4.0: Git PHSA-2023-4.0-0327

An update of the git package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2023-4.0-0327. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid20335...

Photon OS 4.0: Git PHSA-2022-4.0-0271

An update of the git package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2022-4.0-0271. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid20324...