CVE-2023-51385_test

Verificar CVE-2023-51385 Primero, necesitas agregar el siguiente contenido en /.ssh/config host .example.com ProxyCommand /usr/bin/nc -X connect -x 192.0.2.0:8080 %h %p Existe inyección de comandos en la declaración del archivo .gitmodules url = ssh://echo helloworld cve.txtfoo.example.com/bar Un...

CVE-2025-48384-test

Línea de comandos para reproducir git clone --recursive https://github.com/beishanxueyuan/CVE-2025-48384-test.git Modificar el repositorio de GitHub al que apunta git init repo git -C repo -c protocol.file.allow=always submodule add https://github.com/beishanxueyuan/CVE-2025-48384.git sub git -C...

cve-2024-32002-poc-rce

CVE-2024-32002 RCE POC Un POC para CVE-2024-32002 que demuestra Ejecución Remota de Código RCE. Vea cve-2024-32002-poc-rce para el repositorio de submódulos relacionado. Lo que contiene este repositorio Un enlace simbólico con un nombre arbitrario que enlaza al directorio .git. Un archivo...

CVE-2017-1000117

CVE-2017-1000117 ¿Cómo funciona? $ git clone --recursive [email protected]:ikmski/CVE-2017-1000117.git Cómo crear este repositorio $ cat message.txt | gzip | base64 command $ git submodule add [email protected]:ikmski/Hello-World.git subs/CVE-2017-1000117 $ cat .gitmodules submodule...

CVE-2018-11235

CVE-2018-11235 Resumen de la vulnerabilidad Nombre de la vulnerabilidad: Vulnerabilidad de seguridad de Git ID CNNVD: CNNVD-201805-1020 Nivel de peligro: Alto ID CVE: CVE-2018-11235 Tipo de vulnerabilidad: Problema de característica de seguridad Fecha de publicación: 2018-05-31 Tipo de amenaza:...

CVE-2017-1000117

CVE-2017-1000117 Una persona malintencionada puede construir un enlace "ssh://…" de forma que la víctima, al ejecutar un programa u otras acciones, acceda a dicho enlace malicioso, logrando así la ejecución de comandos. Este enlace puede colocarse en el archivo .gitmodules de un proyecto git, de...

cve-2024-32002-poc

💥 CVE-2024-32002 – Git Submodule Path Injection PoC Motivación Durante la resolución de la máquina Compiled de la plataforma Hack The Box, me encontré con un comportamiento curioso relacionado con Git y los submódulos. Al investigar más a fondo, encontré este excelente post del investigador Amal...

CVE-2023-51385_test

Verifying CVE-2023-51385 First, add the following content to /.ssh/config host .example.com ProxyCommand /usr/bin/nc -X connect -x 192.0.2.0:8080 %h %p There is a command injection in the .gitmodules file statement url = ssh://echo helloworld cve.txtfoo.example.com/bar After configuration is...

CVE-2023-51385_test

Verificar CVE-2023-51385 Primero, agregue lo siguiente en /.ssh/config 主机 .example.com ProxyCommand /usr/bin/nc -X connect -x 192.0.2.0:8080 %h %p Existe una inyección de comandos en la declaración del archivo .gitmodules url = ssh://echo helloworld cve.txtfoo.example.com/bar Una vez configurado,...

cve-2023-51385

Verificación de CVE-2023-51385 Primero, necesitas añadir el siguiente contenido a /.ssh/config: host .example.com ProxyCommand /usr/bin/nc -X connect -x 192.0.2.0:8080 %h %p Existe una inyección de comandos en la declaración del archivo .gitmodules url = ssh://echo helloworld...

CVE-2026-55251

NetBox Device Type Library is a collection of community-sourced device type definitions for import into NetBox. Prior to commit f41fc1e, the CI workflow .github/workflows/validation.yml runs on pullrequest and executes code supplied by the pull request before any maintainer review. Three...

CVE-2026-55251 NetBox Device Type Library: Arbitrary Code Execution on CI Runner Through Malicious requirements.txt, .pre-commit-hooks-config.yaml, and .gitmodules Files

NetBox Device Type Library is a collection of community-sourced device type definitions for import into NetBox. Prior to commit f41fc1e, the CI workflow .github/workflows/validation.yml runs on pullrequest and executes code supplied by the pull request before any maintainer review. Three...

CVE-2026-55251 NetBox Device Type Library: Arbitrary Code Execution on CI Runner Through Malicious requirements.txt, .pre-commit-hooks-config.yaml, and .gitmodules Files

NetBox Device Type Library is a collection of community-sourced device type definitions for import into NetBox. Prior to commit f41fc1e, the CI workflow .github/workflows/validation.yml runs on pullrequest and executes code supplied by the pull request before any maintainer review. Three...

CVE-2026-55251 NetBox Device Type Library: Arbitrary Code Execution on CI Runner Through Malicious requirements.txt, .pre-commit-hooks-config.yaml, and .gitmodules Files

NetBox Device Type Library is a collection of community-sourced device type definitions for import into NetBox. Prior to commit f41fc1e, the CI workflow .github/workflows/validation.yml runs on pullrequest and executes code supplied by the pull request before any maintainer review. Three...

PT-2026-104001

NetBox Device Type Library is a collection of community-sourced device type definitions for import into NetBox. Prior to commit f41fc1e, the CI workflow .github/workflows/validation.yml runs on pull request and executes code supplied by the pull request before any maintainer review. Three...

DEBIAN-CVE-2026-100689

GitPython before 3.1.62 does not validate the path field read from an untrusted .gitmodules file when updating submodules. While a prior fix GHSA-hmq2-w58f-27jc added Submodule.validatedname to constrain the name field, and GitPython's own containment guard Submodule.torelativepath is applied in...

UBUNTU-CVE-2026-100689

GitPython before 3.1.62 does not validate the path field read from an untrusted .gitmodules file when updating submodules. While a prior fix GHSA-hmq2-w58f-27jc added Submodule.validatedname to constrain the name field, and GitPython's own containment guard Submodule.torelativepath is applied in...

CVE-2026-100689

GitPython before 3.1.62 does not validate the path field read from an untrusted .gitmodules file when updating submodules. While a prior fix GHSA-hmq2-w58f-27jc added Submodule.validatedname to constrain the name field, and GitPython's own containment guard Submodule.torelativepath is applied in...

CVE-2026-100689 GitPython before 3.1.62 Path Traversal via gitmodules path

GitPython before 3.1.62 does not validate the path field read from an untrusted .gitmodules file when updating submodules. While a prior fix GHSA-hmq2-w58f-27jc added Submodule.validatedname to constrain the name field, and GitPython's own containment guard Submodule.torelativepath is applied in...

CVE-2026-100689

GitPython before 3.1.62 does not validate the "path" field read from an untrusted .gitmodules file when updating submodules. While a prior fix GHSA-hmq2-w58f-27jc added Submodule.validatedname to constrain the "name" field, and GitPython's own containment guard Submodule.torelativepath is applied...