The vulnerability of the distributed Git version control system for Windows lies in the use of an unreliable path for checking orthography of cloned repositories, allowing a perpetrator to execute arbitrary code.

The vulnerability of the distributed Git version control system for Windows is related to the use of an unreliable path for checking orthography of cloned repositories. Exploiting this vulnerability allows a perpetrator to execute arbitrary code...

The vulnerability of the gettext() function in the distributed version control system Git for Windows allows a hacker to insert any messages they want.

The vulnerability of the gettext function in the distributed version control system Git for Windows is related to an incorrect limitation on the path name to the restricted directory. Exploiting this vulnerability could allow a malicious individual to deploy arbitrary messages...

CVE-2023-45510

tsMuxer version git-2539d07 was discovered to contain an alloc-dealloc-mismatch operator new vs operator delete error...

PT-2023-29566 · Tsmuxer · Tsmuxer

Name of the Vulnerable Software and Affected Versions: tsMuxer version git-2539d07 Description: The issue is related to an alloc-dealloc-mismatch error, specifically due to the use of operator new vs operator delete. This error was discovered in tsMuxer. Recommendations: For tsMuxer version...

PT-2023-29567 · Tsmuxer · Tsmuxer

Name of the Vulnerable Software and Affected Versions: tsMuxer version git-2539d07 Description: A memory leak in tsMuxer allows attackers to cause a Denial of Service DoS via a crafted MP4 file. Recommendations: For tsMuxer version git-2539d07, consider updating to a newer version that contains a...

CVE-2023-45510

tsMuxer (git-2539d07) is reported to contain an alloc-dealloc-mismatch (operator new[] vs operator delete) error. Multiple sources (Red Hat CVE, NVD, OSV, CVE lists, CNNVD, PT-2023-29566) corroborate this description for tsMuxer. Public details do not specify affected platforms beyond the git com...

tsMuxer Security Vulnerabilities

tsMuxer is a transport stream multiplexer for remixing/multiplexing elementary streams by Dan Personal Developer. A security vulnerability exists in the tsMuxer git-2539d07 version. No information about this vulnerability is available at this time, please stay tuned to CNNVD or the vendor...

tsMuxer Security Vulnerabilities

tsMuxer is a transport stream multiplexer for remixing/multiplexing elementary streams by Dan Personal Developer. A security vulnerability exists in the tsMuxer git-2539d07 version. No information about this vulnerability is available at this time, please stay tuned to CNNVD or the vendor...

CVE-2023-45510

tsMuxer version git-2539d07 was discovered to contain an alloc-dealloc-mismatch operator new vs operator delete error...

AZL-39895 CVE-2023-39325 affecting package git-lfs for versions less than 3.5.1-1

A malicious HTTP/2 client which rapidly creates requests and immediately resets them can cause excessive server resource consumption. While the total number of requests is bounded by the http2.Server.MaxConcurrentStreams setting, resetting an in-progress request allows the attacker to create a ne...

AZL-34730 CVE-2023-39325 affecting package git-lfs for versions less than 3.6.1-1

A malicious HTTP/2 client which rapidly creates requests and immediately resets them can cause excessive server resource consumption. While the total number of requests is bounded by the http2.Server.MaxConcurrentStreams setting, resetting an in-progress request allows the attacker to create a ne...

NULL Pointer Dereference in function gf_filter_pck_new_alloc_internal

Description NULL Pointer Dereference in function gffilterpcknewallocinternal at filtercore/filterpck.c:108. Version git log commit 5692dc729491805e0e5f55c21d50ba1e6b19e88e HEAD - master, origin/master, origin/HEAD Author: Aurelien David Date: Wed Oct 11 13:24:46 2023 +0200 ac3dmx: add remain size...

The vulnerability of the executeable file connect.exe in the distributed version of the Git version control system for Windows allows a hacker to execute arbitrary code.

The vulnerability of the executeable file connect.exe in the distributed version of Git for Windows relates to an uncontrolled element in the search path. Exploiting this vulnerability could allow a perpetrator to execute arbitrary code...

The vulnerability of the distributed version of the Git version control system for Windows, doskey.exe, allows a hacker to execute arbitrary code.

The vulnerability of the distributed version of the Git version control system for Windows, called doskey.exe, is related to an uncontrolled element in the search path. Exploiting this vulnerability could allow a perpetrator to execute arbitrary code...

GHSA-QPPJ-FM5R-HXR3 vulnerabilities

Vulnerabilities for packages: fuse-overlayfs-snapshotter, kpt, skaffold, rqlite, gomplate, scorecard, buildkitd, metrics-server, gitness, atlantis, k3d, bom, cortex, kubevela, helm, git-lfs, kubernetes-csi-livenessprobe, flux-notification-controller, mc, oauth2-proxy, dynamic-localpv-provisioner,...

SaltStack 3000 < 3002.8 / 3003 < 3003.4 / 3004 < 3004.1 Multiple Vulnerabilities

According to its self-reported version number, the instance of SaltStack hosted on the remote server is affected by multiple vulnerabilities: - After receiving several bad packets on the request server equal to the number of worker threads, the master will become unresponsive to return requests...

Access control vulnerability due to dismissive git & test politics

Lines of code Vulnerability details Impact High risk access control vulnerability due to overutilizing rewards logic Proof of Concept Commenting out accessibility checks may lead to overutilizing existing rewards logic Tools Used Manual review Recommended Mitigation Steps git diff test coverage...

CVE-2023-43809

Soft Serve is a self-hostable Git server for the command line. Prior to version 0.6.2, a security vulnerability in Soft Serve could allow an unauthenticated, remote attacker to bypass public key authentication when keyboard-interactive SSH authentication is active, through the allow-keyless...

Mozilla: Mozilla Employee's Token for sql.telemetry.mozilla.org Exposed in Git Commit

A Mozilla employee's API token was exposed in a GitHub repository, granting access to confidential data. The token was rotated and removed from the service...

CVE-2023-43809 Soft Serve Public Key Authentication Bypass Vulnerability when Keyboard-Interactive SSH Authentication is Enabled

Soft Serve is a self-hostable Git server for the command line. Prior to version 0.6.2, a security vulnerability in Soft Serve could allow an unauthenticated, remote attacker to bypass public key authentication when keyboard-interactive SSH authentication is active, through the allow-keyless...