11393 matches found
UBUNTU-CVE-2021-21237
Git LFS is a command line extension for managing large files with Git. On Windows, if Git LFS operates on a malicious repository with a git.bat or git.exe file in the current directory, that program would be executed, permitting the attacker to execute arbitrary code. This does not affect Unix...
CVE-2021-21237
Git LFS is a command line extension for managing large files with Git. On Windows, if Git LFS operates on a malicious repository with a git.bat or git.exe file in the current directory, that program would be executed, permitting the attacker to execute arbitrary code. This does not affect Unix...
CVE-2021-21237
Git LFS is a command line extension for managing large files with Git. On Windows, if Git LFS operates on a malicious repository with a git.bat or git.exe file in the current directory, that program would be executed, permitting the attacker to execute arbitrary code. This does not affect Unix...
Directory traversal
Git LFS is a command line extension for managing large files with Git. On Windows, if Git LFS operates on a malicious repository with a git.bat or git.exe file in the current directory, that program would be executed, permitting the attacker to execute arbitrary code. This does not affect Unix...
CVE-2021-21237
Summary (CVE-2021-21237): Git LFS on Windows is vulnerable to remote code execution when operating on a malicious repository that contains a git.bat or git.exe in the current directory. The Go runtime on Windows includes the current directory for command names without a directory separator, causi...
CVE-2021-21237
Git LFS is a command line extension for managing large files with Git. On Windows, if Git LFS operates on a malicious repository with a git.bat or git.exe file in the current directory, that program would be executed, permitting the attacker to execute arbitrary code. This does not affect Unix...
CVE-2021-21237 Git LFS can execute a Git binary from the current directory on Windows
Git LFS is a command line extension for managing large files with Git. On Windows, if Git LFS operates on a malicious repository with a git.bat or git.exe file in the current directory, that program would be executed, permitting the attacker to execute arbitrary code. This does not affect Unix...
Git Lfs Code Issue Vulnerability
Git Lfs is a command line tool from the Git Lfs team for working with large files in git projects. A security vulnerability exists in Git LFS that stems from allowing an attacker to execute arbitrary code...
Mail.ru: todo.mail.ru open .git
todo.mail.ru landing .git folder was publicly accessible...
git-big-picture code injection vulnerability
Git Big Ppicture is the Git Big Ppicture team of a Python based can be Git commit records for visual display of the software . A code injection vulnerability exists prior to version 1.0.0 of git-big-picture, which can be exploited to execute code because the program incorrectly handles characters...
CVE-2021-3028
git-big-picture before 1.0.0 mishandles ' characters in a branch name, leading to code execution...
CVE-2021-3028
git-big-picture before 1.0.0 mishandles ' characters in a branch name, leading to code execution...
DEBIAN-CVE-2021-3028
git-big-picture before 1.0.0 mishandles ' characters in a branch name, leading to code execution...
CVE-2021-3028
git-big-picture before 1.0.0 mishandles ' characters in a branch name, leading to code execution...
CVE-2021-3028
git-big-picture before 1.0.0 mishandles ' characters in a branch name, leading to code execution...
UBUNTU-CVE-2021-3028
git-big-picture before 1.0.0 mishandles ' characters in a branch name, leading to code execution...
Remote code execution
git-big-picture before 1.0.0 mishandles ' characters in a branch name, leading to code execution...
PYSEC-2021-15
git-big-picture before 1.0.0 mishandles ' characters in a branch name, leading to code execution...
PYSEC-2021-15
git-big-picture before 1.0.0 mishandles ' characters in a branch name, leading to code execution...
CVE-2021-3028
CVE-2021-3028 affects git-big-picture before 1.0.0. The root cause is improper handling of apostrophe (') characters in branch names, which leads to code execution. The provided documents indicate the vulnerable version range and state that upgrading to 1.0.0 (or applying the vendor patch) mitiga...