cve-2024-32002-poc-rce

CVE-2024-32002 RCE POC 一个用于CVE-2024-32002的POC，演示远程代码执行（RCE）。 相关子模块仓库见cve-2024-32002-poc-rce。 此仓库包含的内容 一个具有任意名称的符号链接，链接到 .git 目录。 一个定义恶意子模块的 .gitmodules 文件。 如何重建此仓库 此仓库是在Linux（具体来说是WSL2）中创建的。这很重要，恶意仓库只能在区分大小写的文件系统上创建。 1. 创建一个全小写字符的符号链接 root@kitploit: ln -s .git submodule 注意： 符号链接应指向 .git...

CVE-2023-51385_test

Verificar CVE-2023-51385 Primero, necesitas agregar el siguiente contenido en /.ssh/config root@kitploit: host .example.com ProxyCommand /usr/bin/nc -X connect -x 192.0.2.0:8080 %h %p Existe inyección de comandos en la declaración del archivo .gitmodules root@kitploit: url = ssh://echo helloworld...

cve-2023-51385

验证CVE-2023-51385 首先需要在/.ssh/config中增加如下内容 root@kitploit: host .example.com ProxyCommand /usr/bin/nc -X connect -x 192.0.2.0:8080 %h %p .gitmodules文件语句中存在命令注入 root@kitploit: url = ssh://echo helloworld cve.txtfoo.example.com/bar 配置完成后,执行下面的指令触发 root@kitploit: git clone...

CVE-2025-48384-test

复现命令行 root@kitploit: git clone --recursive https://github.com/beishanxueyuan/CVE-2025-48384-test.git 修改指向的GitHub仓库 root@kitploit: git init repo git -C repo -c protocol.file.allow=always submodule add https://github.com/beishanxueyuan/CVE-2025-48384.git sub git -C repo mv sub $printf "sub\r" git...

CVE-2017-1000117

CVE-2017-1000117 工作原理 root@kitploit: $ git clone --recursive [email protected]:ikmski/CVE-2017-1000117.git 如何创建此仓库 root@kitploit: $ cat message.txt | gzip | base64 command $ git submodule add [email protected]:ikmski/Hello-World.git subs/CVE-2017-1000117 $ cat .gitmodules submodule...

CVE-2018-11235

CVE-2018-11235 漏洞简介 漏洞名称： Git安全漏洞 CNNVD编号：CNNVD-201805-1020 危害等级：高危 CVE编号：CVE-2018-11235 漏洞类型：安全特征问题 发布时间：2018-05-31 威胁类型：远程 更新时间：2019-04-01 厂商：git-scm 漏洞来源：...

CVE-2017-1000117

CVE-2017-1000117 恶意人员可以通过巧妙构造 “ssh://…” 链接，让受害人在执行程序等情况下访问该恶意链接，从而达到命令执行的目的。 该链接可以被放在 git项目的.gitmodules文件下，这样当受害人对一个项目进行git clone –recurse-submodules/git clone --recursive 操作时，就会引发安全问题。 预热： linux 命令行输入 printf 'a' /tmp/pwned.txt 发现在tmp目录创建了pwned.txt,内容为 a git init git remote add origin...

cve-2024-32002-poc

💥 CVE-2024-32002 – Git Submodule Path Injection PoC Motivación Durante la resolución de la máquina Compiled de la plataforma Hack The Box, me encontré con un comportamiento curioso relacionado con Git y los submódulos. Al investigar más a fondo, encontré este excelente post del investigador Amal...

CVE-2023-51385_test

验证CVE-2023-51385 首先需要在/.ssh/config中增加如下内容 root@kitploit: host .example.com ProxyCommand /usr/bin/nc -X connect -x 192.0.2.0:8080 %h %p .gitmodules文件语句中存在命令注入 root@kitploit: url = ssh://echo helloworld cve.txtfoo.example.com/bar 配置完成后,执行下面的指令触发 root@kitploit: git clone...

CVE-2023-51385_test

验证CVE-2023-51385 首先需要在 /.ssh/config增加如下 root@kitploit: 主机 .example.com ProxyCommand /usr/bin/nc -X connect -x 192.0.2.0:8080 %h %p .gitmodules文件语句中存在命令注入 root@kitploit: url = ssh://echo helloworld cve.txtfoo.example.com/bar 配置完成后，执行下面的指令触发 root@kitploit: git 克隆...

CVE-2026-78675

A flaw was found in GitPython that could allow for local file content disclosure. This vulnerability occurs because GitPython does not properly disable mergeincludes when processing .gitmodules files. An attacker could exploit this by creating a specially crafted .gitmodules file with include...

EUVD-2026-65221

GitPython: Arbitrary local file content disclosure via include directive in untrusted .gitmodules SubmoduleConfigParser never disables mergeincludes...

gitpython: GitPython: Arbitrary file creation via path traversal in .gitmodules submodule names

A flaw was found in GitPython where it fails to properly validate submodule names within .gitmodules files. A remote attacker could craft a malicious Git repository containing specially formed submodule names with directory traversal sequences. When GitPython processes these malicious submodule...

Linux Distros Unpatched Vulnerability : CVE-2026-82252

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - gitoxide before 0.52.1 follows symlinks when reading the worktree .gitmodules file, allowing attackers to inject out-of-repository bytes into submodule metadata...

Linux Distros Unpatched Vulnerability : CVE-2026-82251

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - gitoxide before 0.52.1 fails to validate submodule names from .gitmodules configuration, allowing path traversal when deriving submodule git directories...

CVE-2026-82253

gitoxide Rust crates gix = 0.72.0 and gix-validate = 0.10.0 contains a path traversal vulnerability. The submodule name validation function in gix-validate only checks the first occurrence of '..' via name.findb"..", allowing crafted names such as 'a..b/../../../.git/' to bypass the check;...

AZL-98415 CVE-2026-82252 affecting package rust for versions less than 1.75.0-30

gitoxide before 0.52.1 follows symlinks when reading the worktree .gitmodules file, allowing attackers to inject out-of-repository bytes into submodule metadata. Attackers can create a malicious repository with a symlinked .gitmodules pointing outside the repository tree, causing gitoxide to pars...

AZL-98427 CVE-2026-82252 affecting package rust 1.96.1-1

gitoxide before 0.52.1 follows symlinks when reading the worktree .gitmodules file, allowing attackers to inject out-of-repository bytes into submodule metadata. Attackers can create a malicious repository with a symlinked .gitmodules pointing outside the repository tree, causing gitoxide to pars...

AZL-98406 CVE-2026-82251 affecting package rust for versions less than 1.75.0-30

gitoxide before 0.52.1 fails to validate submodule names from .gitmodules configuration, allowing path traversal when deriving submodule git directories. Attackers can craft malicious submodule names with traversal segments to redirect state and open functions to repositories outside .git/modules...

DEBIAN-CVE-2026-82252

gitoxide before 0.52.1 follows symlinks when reading the worktree .gitmodules file, allowing attackers to inject out-of-repository bytes into submodule metadata. Attackers can create a malicious repository with a symlinked .gitmodules pointing outside the repository tree, causing gitoxide to pars...