CVE-2025-65964

n8n Git Hooks CTF Demo ⚠️ This repository is for educational and CTF demonstration purposes only. Scenario An automation platform e.g., n8n uses Git operations as part of a workflow. The workflow allows arbitrary Git configuration via git config. An attacker-controlled workflow sets: root@kitploit...

cve-2024-10220-test

CVE-2024-10220 Test Repository This repository is used for testing CVE-2024-10220 Kubernetes gitRepo volume vulnerability as part of HPC security research at the University of Central Oklahoma. WARNING: This repository contains a malicious Git hook for controlled security testing. Do not use in...

Gitea 1.1.0 - 1.12.5 - Remote Code Execution

Gitea 1.1.0 through 1.12.5 is susceptible to authenticated remote code execution, via the git hook functionality, in customer environments where the documentation is not understood e.g., one viewpoint is that the dangerousness of this feature should be documented immediately above the...

cve-2024-52005-poc

CVE-2024-52005: ANSI Escape Sequence Injection in Git Overview This repository contains a Proof-of-Concept PoC demonstrating CVE-2024-52005, a vulnerability in Git that allows ANSI escape sequence injection through the sideband channel during Git operations. CVE-2024-52005 is a High severity CVSS...

CVE-2017-1000117-test

How it works This operates using the CVE-2017-1000117 vulnerability. When you clone this repository with root privileges using the git command with the --recurse option, an HTTP server that listens on port 12345 will run automatically. To stop the HTTP server, find its process ID and kill it...

CVE-2017-1000117

CVE-2017-1000117 How it works? root@kitploit: $ git clone --recursive [email protected]:ikmski/CVE-2017-1000117.git How to create this repository root@kitploit: $ cat message.txt | gzip | base64 command $ git submodule add [email protected]:ikmski/Hello-World.git subs/CVE-2017-1000117 $...

CVE-2017-1000117

Server Launcher for CVE-2017-1000117 Run the following command, then open your web browser and go to http://localhost:8088! root@kitploit: $ git clone --recursive https://github.com/0gawa/CVE-2017-1000117 If "Hello World" is displayed, update git! It's vulnerable...

cve-2025-48384-poc

PoC for CVE-2025-48384 This proof-of-concept demonstrates Git's CR-path submodule misparsing vulnerability, leading to arbitrary hook execution during git clone --recurse-submodules. ⚠️ Warning This is for educational and testing purposes only. Do not run this on any production environment. 🧪 Usag...

CVE-2025-48384-POC

To trigger, do git clone --recursive https://github.com/fishyyh/CVE-2025-48384-POC.git on a vulnerable git version and you'll find a /tmp/sectest file suddenly appearing...

Security update for amazon-ssm-agent

This update for amazon-ssm-agent fixes the following issues: CVE-2026-56854: golang.org/x/crypto/ssh: source-address restriction bypassed in 5 callback families bsc1278681 CVE-2026-56855: golang.org/x/crypto/ssh: prevent DoS on deadlocked established channel bsc1278681 CVE-2026-78662:...

cve-2024-32002-submodule-rce

CVE-2024-32002 RCE Submodule A submodule to demonstrate CVE-2024-32002. Demonstrates Remote Code Execution RCE by loading a malicious commit hook into the .git directory of the parent repo. See cve-2024-32002-poc-rce for the working POC that utilises this repo. What this repo contains A malicous...

CVE-2025-48384-poc

CVE-2025-48384-poc CVE-2025-48384 takes the form of an improper link resolution link following vulnerability in git. Specifically, filenames with carriage returns are improperly parsed in .git/config, and including a symlink to point a git hook executable located in a submodule as the submodule...

CVE-2026-40579

References https://github.com/steveukx/git-js/security/advisories/GHSA-mr9g-9pv2-x45j https://vulners.com/cve/CVE-2026-40579...

CVE-2026-71557

A flaw was found in go-git, an extensible Git implementation library. Maliciously crafted reference names, which can contain directory-traversal sequences, are not properly sanitized. This vulnerability allows an attacker to write files outside of the intended reference storage directory,...

CVE-2025-48384-test

Reproduce Command Line root@kitploit: git clone --recursive https://github.com/beishanxueyuan/CVE-2025-48384-test.git 修改指向的GitHub仓库 root@kitploit: git init repo git -C repo -c protocol.file.allow=always submodule add https://github.com/beishanxueyuan/CVE-2025-48384.git sub git -C repo mv sub...

CVE-2026-44881_exploit

CVE-2026-44881 — Portainer Git Symlink → Arbitrary Host File Read Single-script exploit for CVE-2026-44881 , a Git symlink injection in Portainer's stack-deployment flow that lets any low-privilege authenticated user with stack-creation rights read arbitrary files reachable by the Portainer...

prefect-cve-2026-5366

PoC: CVE-2026-5366 - Inyección de argumentos de Git en Prefect GitRepository Vulnerabilidad: inyección de argumentos de git que conduce a RCE a través de commitsha además de inyección de argumentos a través de directories Versión: vulnerable en 3.6.23, corregida en 3.6.25+ Archivo:...

CVE-2026-71557-poc

CVE-2026-71557: PoC de path traversal en el nombre de referencia de go-git Versión en inglés Resumen Este repositorio es un PoC local seguro de CVE-2026-71557 , basado en el aviso público de go-git GHSA-qgq7-7hm3-q39j. La versión anterior de storage/filesystem no validaba suficientemente el nombr...

guardskill

GuardSkill A repository can make your coding agent run code the moment it opens the folder. GuardSkill checks for that before you do. root@kitploit: npx guardskill . Read-only. No network calls, no telemetry, no configuration, no account, no dependencies. It reads git configuration and hook...

CVE-2025-48384

CVE-2025-48384: Breaking git with a carriage return and cloning RCE Reproduction from https://dgl.cx/2025/07/git-clone-submodule-cve-2025-48384. All credits to David Leadbeater. This is a basic reproduction attempt of the vulnerability. To trigger, do git clone --recursive...