Lucene search
+L

12168 matches found

Kitploit
Kitploit
•added 2026/09/23 9:01 a.m.•5 views

CVE-2026-94545

cve-id Donar...

8.6AI score
SaveExploits1
Kitploit
Kitploit
•added 2026/09/23 7:14 a.m.•16 views

gogs

gogs Here we will be setting up our lab in our SEED Ubuntu 16.04 VM and we need to install the Go Git Service GOGS on our VM first before we can move on to exploiting the SQL injection vulnerability. To setup the VM, here are the steps: Step 1: Install the Database Once we have logged in to the...

6.2AI score
SaveExploits0
Kitploit
Kitploit
•added 2026/09/23 7:02 a.m.•12 views

CVE-2025-8110-Gogs-RCE-Exploit

Gogs CVE-2025-8110 RCE Exploit An automated Python exploit for CVE-2025-8110 in Gogs. This vulnerability allows for Remote Code Execution RCE by abusing the PutContents API, which fails to validate if a file path is a symlink. By overwriting the internal .git/config file via a symlink, we can...

8.8CVSS8AI score0.85202EPSS
SaveExploits23
Kitploit
Kitploit
•added 2026/09/23 6:04 a.m.•13 views

CVE-2025-65964

n8n Git Hooks CTF Demo ⚠️ This repository is for educational and CTF demonstration purposes only. Scenario An automation platform e.g., n8n uses Git operations as part of a workflow. The workflow allows arbitrary Git configuration via git config. An attacker-controlled workflow sets: root@kitploit...

9.4CVSS6.4AI score0.00663EPSS
SaveExploits1
Kitploit
Kitploit
•added 2026/09/23 4:55 a.m.•10 views

cve-2024-10220-test

CVE-2024-10220 Test Repository This repository is used for testing CVE-2024-10220 Kubernetes gitRepo volume vulnerability as part of HPC security research at the University of Central Oklahoma. WARNING: This repository contains a malicious Git hook for controlled security testing. Do not use in...

8.1CVSS7.8AI score0.03027EPSS
SaveExploits0
Nuclei
Nuclei
•added 2026/09/23 2:05 a.m.•1951 views

Gitea 1.1.0 - 1.12.5 - Remote Code Execution

Gitea 1.1.0 through 1.12.5 is susceptible to authenticated remote code execution, via the git hook functionality, in customer environments where the documentation is not understood e.g., one viewpoint is that the dangerousness of this feature should be documented immediately above the...

7.2CVSS8.1AI score0.95357EPSS
SaveExploits11References5
Kitploit
Kitploit
•added 2026/09/23 12:02 a.m.•8 views

cve-2024-52005-poc

CVE-2024-52005: Inyección de Secuencias de Escape ANSI en Git Resumen Este repositorio contiene una Prueba de Concepto PoC que demuestra CVE-2024-52005, una vulnerabilidad en Git que permite la inyección de secuencias de escape ANSI a través del canal sideband durante operaciones de Git...

8.8CVSS7.7AI score0.00513EPSS
SaveExploits1References6
Kitploit
Kitploit
•added 2026/09/22 10:53 p.m.•12 views

CVE-2017-1000117-test

How it works This operates using the CVE-2017-1000117 vulnerability. When you clone this repository with root privileges using the git command with the --recurse option, an HTTP server that listens on port 12345 will run automatically. To stop the HTTP server, find its process ID and kill it...

8.8CVSS7.3AI score0.77823EPSS
SaveExploits9
Kitploit
Kitploit
•added 2026/09/22 8:28 p.m.•11 views

CVE-2017-1000117

CVE-2017-1000117 How it works? root@kitploit: $ git clone --recursive [email protected]:ikmski/CVE-2017-1000117.git How to create this repository root@kitploit: $ cat message.txt | gzip | base64 command $ git submodule add [email protected]:ikmski/Hello-World.git subs/CVE-2017-1000117 $...

8.8CVSS7.6AI score0.77823EPSS
SaveExploits9
Kitploit
Kitploit
•added 2026/09/22 6:44 p.m.•7 views

CVE-2017-1000117

Server Launcher for CVE-2017-1000117 Run the following command, then open your web browser and go to http://localhost:8088! root@kitploit: $ git clone --recursive https://github.com/0gawa/CVE-2017-1000117 If "Hello World" is displayed, update git! It's vulnerable...

8.8CVSS7.4AI score0.77823EPSS
SaveExploits9
Kitploit
Kitploit
•added 2026/09/22 6:26 p.m.•5 views

cve-2025-48384-poc

PoC for CVE-2025-48384 This proof-of-concept demonstrates Git's CR-path submodule misparsing vulnerability, leading to arbitrary hook execution during git clone --recurse-submodules. ⚠️ Warning This is for educational and testing purposes only. Do not run this on any production environment. 🧪 Usag...

8CVSS7.8AI score0.04109EPSS
SaveExploits9
Kitploit
Kitploit
•added 2026/09/22 4:58 p.m.•14 views

CVE-2025-48384-POC

To trigger, do git clone --recursive https://github.com/fishyyh/CVE-2025-48384-POC.git on a vulnerable git version and you'll find a /tmp/sectest file suddenly appearing...

8CVSS7.4AI score0.04109EPSS
SaveExploits9References1
SUSE Linux
SUSE Linux
•added 2026/09/22 4:08 p.m.•4 views

Security update for amazon-ssm-agent

This update for amazon-ssm-agent fixes the following issues: CVE-2026-56854: golang.org/x/crypto/ssh: source-address restriction bypassed in 5 callback families bsc1278681 CVE-2026-56855: golang.org/x/crypto/ssh: prevent DoS on deadlocked established channel bsc1278681 CVE-2026-78662:...

8.7CVSS5.8AI score0.005EPSS
SaveExploits1References16
Kitploit
Kitploit
•added 2026/09/22 1:32 p.m.•12 views

cve-2024-32002-submodule-rce

CVE-2024-32002 RCE Submodule A submodule to demonstrate CVE-2024-32002. Demonstrates Remote Code Execution RCE by loading a malicious commit hook into the .git directory of the parent repo. See cve-2024-32002-poc-rce for the working POC that utilises this repo. What this repo contains A malicous...

9CVSS8AI score0.29234EPSS
SaveExploits32References1
Kitploit
Kitploit
•added 2026/09/22 1:16 p.m.•14 views

CVE-2025-48384-poc

CVE-2025-48384-poc CVE-2025-48384 takes the form of an improper link resolution link following vulnerability in git. Specifically, filenames with carriage returns are improperly parsed in .git/config, and including a symlink to point a git hook executable located in a submodule as the submodule...

8CVSS8.1AI score0.04109EPSS
SaveExploits9
Kitploit
Kitploit
•added 2026/09/22 1:15 p.m.•14 views

CVE-2026-40579

Referencias https://github.com/steveukx/git-js/security/advisories/GHSA-mr9g-9pv2-x45j https://vulners.com/cve/CVE-2026-40579...

5.8AI score
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2026/09/22 1:12 p.m.•5 views

CVE-2026-71557

A flaw was found in go-git, an extensible Git implementation library. Maliciously crafted reference names, which can contain directory-traversal sequences, are not properly sanitized. This vulnerability allows an attacker to write files outside of the intended reference storage directory,...

6.3CVSS5.9AI score0.0046EPSS
SaveExploits1References10
Kitploit
Kitploit
•added 2026/09/22 12:08 p.m.•12 views

CVE-2025-48384-test

Reproduce Command Line root@kitploit: git clone --recursive https://github.com/beishanxueyuan/CVE-2025-48384-test.git 修改指向的GitHub仓库 root@kitploit: git init repo git -C repo -c protocol.file.allow=always submodule add https://github.com/beishanxueyuan/CVE-2025-48384.git sub git -C repo mv sub...

8CVSS7.6AI score0.04109EPSS
SaveExploits9
Kitploit
Kitploit
•added 2026/09/22 10:41 a.m.•12 views

CVE-2026-44881_exploit

CVE-2026-44881 — Portainer Git Symlink → Arbitrary Host File Read Single-script exploit for CVE-2026-44881 , a Git symlink injection in Portainer's stack-deployment flow that lets any low-privilege authenticated user with stack-creation rights read arbitrary files reachable by the Portainer...

9.9CVSS7.8AI score0.00585EPSS
SaveExploits2References2
Kitploit
Kitploit
•added 2026/09/22 10:26 a.m.•10 views

prefect-cve-2026-5366

PoC: CVE-2026-5366 - Git Argument Injection in Prefect GitRepository Vulnerability: git argument injection leading to RCE via commitsha plus argument injection via directories Version: vulnerable in 3.6.23, fixed in 3.6.25+ File: src/prefect/runner/storage.py Huntr:...

9.9CVSS8.5AI score0.01034EPSS
SaveExploits3
Rows per page
Query Builder