11312 matches found
EulerOS 2.0 SP9 : git (EulerOS-SA-2022-1995)
According to the versions of the git packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Git for Windows is a fork of Git containing Windows-specific patches. This vulnerability affects users working on multi-user machines, where...
U.S. Dept Of Defense: Exposed GIT repo on ██████████[HtUS]
Vulnerability description not provided...
Command Injection
git-clone is vulnerable to command injection. The vulnerability exists due to the insecure usage of the --upload-pack feature of git. An attacker with the ability to control the options object provided to the clone function through the options.args array, is able to inject arbitrary commands to r...
Heap Use After Free in function skipwhite
Description Heap Use After Free in function skipwhite at charset.c:1428 vim version git log commit 324478037923feef1eb8a771648e38ade9e5e05a HEAD - master, tag: v9.0.0042, origin/master, origin/HEAD POC ./afl/src/vim -u NONE -i NONE -n -m -X -Z -e -s -S ./pochuaf4s.dat -c :qa!...
Mageia: Security Advisory (MGASA-2022-0248)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora: Security Advisory for git-time-metric (FEDORA-2022-fae3ecee19)
The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
Fedora: Security Advisory for golang-gopkg-src-d-git-4 (FEDORA-2022-fae3ecee19)
The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
Updated ruby-git packages fix security vulnerability
Command Injection via git argument injection CVE-2022-25648...
MGASA-2022-0248 Updated ruby-git packages fix security vulnerability
Command Injection via git argument injection CVE-2022-25648...
U.S. Dept Of Defense: .git folder exposed [HtUS]
Heyy there, I have found a exposed .git folder on https://█████ https://████████/.git/config core repositoryformatversion = 0 filemode = true bare = false logallrefupdates = true remote "origin" url = https://████ fetch = +refs/heads/:refs/remotes/origin/ Using gitdumper...
[SECURITY] Fedora 36 Update: powerline-go-1.21.0-4.fc36
A Powerline like prompt for Bash, ZSH and Fish. - Shows some important details about the git/hg branch - Changes color if the last command exited with a failure code - If you're too deep into a directory tree, shortens the displayed path with an ellipsis - Shows the current Python virtualenv...
[SECURITY] Fedora 36 Update: golang-gopkg-src-d-git-4-4.13.1-8.fc36
A highly extensible git implementation in pure go...
[SECURITY] Fedora 36 Update: golang-github-google-slothfs-0-0.11.20200727git59c1163.fc36
SlothFS is a FUSE filesystem that provides light-weight, lazily downloaded, read-only checkouts of manifest-based Git projects. It is intended for use wi th Android...
[SECURITY] Fedora 36 Update: fzf-0.30.0-3.fc36
fzf is a general-purpose command-line fuzzy finder. It's an interactive Unix filter for command-line that can be used with any list; files, command history, processes, hostnames, bookmarks, git commits, etc...
[SECURITY] Fedora 36 Update: git-time-metric-1.3.5-15.fc36
Simple, seamless, lightweight time tracking for Git...
GHSA-8JMW-WJR8-2X66 Command injection in git-clone
All versions of package git-clone are vulnerable to Command Injection due to insecure usage of the --upload-pack feature of git. Credits Credit to @lirantal for discovering this vulnerability...
-llscw-react-cli (>=1.0.0, <=1.1.0), 002-node-cli (1.0.0) +13032 more potentially affected by CVE-2022-25900 via git-clone (>=0.0.2, <=0.1.0)
git-clone NPM version =0.0.2, =1.0.0, =0.0.1, =1.0.0, =1.0.11 and more Source cves: CVE-2022-25900 Source advisory: OSV:GHSA-8JMW-WJR8-2X66...
Command injection in git-clone
All versions of package git-clone are vulnerable to Command Injection due to insecure usage of the --upload-pack feature of git. Credits Credit to @lirantal for discovering this vulnerability...
