11433 matches found
CVE-2020-7619
CVE-2020-7619 affects the Node.js package get-git-data up to version 1.3.1. The issue is a Command Injection vulnerability: user-supplied arguments to get-git-data can lead to arbitrary command execution. Multiple connected sources confirm the vulnerability and link it to the lack of input valida...
sizemometer (>=0.3.0, <=0.8.1) potentially affected by CVE-2020-7619 via get-git-data (>=1.3.0, <=1.3.1)
get-git-data NPM version =1.3.0, =0.3.0, =0.8.1 Source cves: CVE-2020-7619 Source advisory: SNYK:JS-GETGITDATA-564222...
Command Injection
Overview git-add-remote is an API for adding git remotes. Affected versions of this package are vulnerable to Command Injection. The argument name can be controlled by users without any sanitization. PoC var root = require"git-add-remote"; var payload = "& touch Song"; rootpayload,'',function;...
generate-gh-repo (1.1.0), generate-project (>=0.7.0, <=1.0.0) +1 more potentially affected by CVE-2020-7630 via git-add-remote (1.0.0)
git-add-remote NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on git-add-remote and may be impacted: - generate-gh-repo 1.1.0 - generate-project =0.7.0, =1.0.4, =1.0.6 Source cves: CVE-2020-7630 Source advisory: SNYK:JS-GITADDREMOTE-564...
EulerOS Virtualization for ARM 64 3.0.6.0 : git (EulerOS-SA-2020-1361)
According to the versions of the git packages installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerabilities : - Arbitrary command execution is possible in Git before 2.20.2, 2.21.x before 2.21.1, 2.22.x before 2.22.2, 2.23.x before...
CVE-2019-10392
Jenkins Git Client Plugin 2.8.4 and earlier and 3.0.0-rc did not properly restrict values passed as URL argument to an invocation of 'git ls-remote', resulting in OS command injection...
Command Injection
Amendment This was deemed not a vulnerability. Overview git-revision-webpack-plugin is a simple webpack plugin that generates version and commithash files during build based on a local git repository. Affected versions of this package are vulnerable to Command Injection. The function commithash...
Huawei EulerOS: Security Advisory for git (EulerOS-SA-2020-1361)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2020-2136
Jenkins Git Plugin 4.2.0 and earlier does not escape the error message for the repository URL for Microsoft TFS field form validation, resulting in a stored cross-site scripting vulnerability...
Exploit for Incorrect Authorization in Jenkins Git
CVE-2018-1000110: User and Node Enumeration Through Jenkins Git Plugin v3.7 Description: An improper authorization vulnerability exists in Jenkins Git Plugin version 3.7.0 and earlier in GitStatus.java that allows an attacker with network access to obtain a list of nodes and users. Versions...
OpenWrt LuCI Information Disclosure Vulnerability
OpenWrt LuCI is a graphical configuration interface for OpenWrt Linux distribution. An information disclosure vulnerability exists in the OpenWrt LuCI git-20.x version, which can be exploited by remote attackers to retrieve a list of installed packages and services...
Information disclosure
In OpenWrt LuCI git-20.x, remote unauthenticated attackers can retrieve the list of installed packages and services. NOTE: the vendor disputes the significance of this report because, for instances reachable by an unauthenticated actor, the same information is available in other more complex ways...
CVE-2020-10871
In OpenWrt LuCI git-20.x, remote unauthenticated attackers can retrieve the list of installed packages and services. NOTE: the vendor disputes the significance of this report because, for instances reachable by an unauthenticated actor, the same information is available in other more complex ways...
CVE-2020-10871
OpenWrt LuCI git-20.x contains an information disclosure vulnerability: remote, unauthenticated attackers can retrieve the list of installed packages and services. The vendor disputes the severity, noting the information is publicly obtainable by unauthenticated actors via other methods, and ther...
PT-2020-12389 · Openwrt · Openwrt Luci
Name of the Vulnerable Software and Affected Versions: OpenWrt LuCI versions git-20.x Description: The issue allows remote unauthenticated attackers to retrieve the list of installed packages and services. The vendor disputes the significance of this report, stating that the same information is...
GLSA-202003-42 : libgit2: Multiple vulnerabilities
The remote host is affected by the vulnerability described in GLSA-202003-42 libgit2: Multiple vulnerabilities Multiple vulnerabilities have been discovered in libgit2. Please review the CVE identifiers referenced below for details. Impact : An attacker could possibly overwrite arbitrary paths,...
InstaSave - Python Script To Download Images, Videos & Profile Pictures From Instagram
InstaSave is a python script to download images, videos & profile pictures from Instagram without any API access. Features Download Instagram Photos Download Instagram Videos Download Instagram Profile Pictures Git Installation clone the repo $ git clone...
matio:matio_fuzzer: Segv on unknown address in H5O_chunk_deserialize
Project: git://git.code.sf.net/p/matio/matio Detailed Report: https://oss-fuzz.com/testcase?key=5740159733858304 Project: matio Fuzzing Engine: afl Fuzz Target: matiofuzzer Job Type: aflasanmatio Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: H5Ochunkdeserializ...
libgit2: Multiple vulnerabilities
Background libgit2 is a portable, pure C implementation of the Git core methods provided as a re-entrant linkable library with a solid API. Description Multiple vulnerabilities have been discovered in libgit2. Please review the CVE identifiers referenced below for details. Impact An attacker coul...
