gogs

gogs Aquí configuraremos nuestro laboratorio en nuestra máquina virtual SEED Ubuntu 16.04 y necesitamos instalar el Servicio Git de Go GOGS en nuestra máquina virtual antes de poder pasar a explotar la vulnerabilidad de inyección SQL. Para configurar la máquina virtual, estos son los pasos: Paso ...

CVE-2026-44881_exploit

CVE-2026-44881 — Enlace simbólico Git de Portainer → Lectura arbitraria de archivos del host Exploit de un solo script para CVE-2026-44881 , una inyección de enlace simbólico Git en el flujo de despliegue de stacks de Portainer que permite a cualquier usuario autenticado con privilegios bajos y...

CVE-2026-71557-poc

CVE-2026-71557: PoC de path traversal en el nombre de referencia de go-git Versión en inglés Resumen Este repositorio es un PoC local seguro de CVE-2026-71557 , basado en el aviso público de go-git GHSA-qgq7-7hm3-q39j. La versión anterior de storage/filesystem no validaba suficientemente el nombr...

ROOT-APP-GOBINARY-CVE-2026-71556 CVE-2026-71556 in github.com/go-git/go-git/v5 - Patched by Root

Root has patched CVE-2026-71556 in the github.com/go-git/go-git/v5 package for Root:Go. Multiple fixed versions available...

ROOT-APP-GOBINARY-CVE-2026-45022 CVE-2026-45022 in github.com/go-git/go-git/v5 - Patched by Root

Root has patched CVE-2026-45022 in the github.com/go-git/go-git/v5 package for Root:Go. Multiple fixed versions available...

ROOT-APP-GOBINARY-CVE-2026-45570 CVE-2026-45570 in github.com/go-git/go-git/v5 - Patched by Root

Root has patched CVE-2026-45570 in the github.com/go-git/go-git/v5 package for Root:Go. Multiple fixed versions available...

Amazon Linux 2 : amazon-ssm-agent (ALAS-2026-3963)

The version of amazon-ssm-agent installed on the remote host is prior to 3.3.5226.0-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2026-3963 advisory. Handshakes which used Encrypted Client Hello could be de-anonymized by a passive network observer due to a...

ROS-20261001-73-0020

The vulnerability in Go-Git relates to an incorrect limitation on the path name to the restricted access catalog. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to protected information...

Rocky Linux 8 [CIQ] Security Update: grafana / grafana-debuginfo / grafana-debugsource / grafana-selinux Multiple Vulnerabilities (crlsa-2025_0401)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20250401 advisory. go-git: argument injection via the URL field CVE-2025-21613 go-git: go-git clients vulnerable to DoS via maliciously crafted Git server replies...

CLEANSTART-2026-MF55431 go-git is an extensible git implementation library written in pure Go

CVE-2026-71557 affects multiple packages. go-git is an extensible git implementation library written in pure Go. See references for individual vulnerability details...

CLEANSTART-2026-JT96055 go-git is an extensible git implementation library written in pure Go

CVE-2026-71556 affects multiple packages. go-git is an extensible git implementation library written in pure Go. See references for individual vulnerability details...

Amazon Linux 2 : amazon-ssm-agent (ALAS-2026-3933)

The version of amazon-ssm-agent installed on the remote host is prior to 3.3.5226.0-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2026-3933 advisory. Handshakes which used Encrypted Client Hello could be de-anonymized by a passive network observer due to a...

Security update for amazon-ssm-agent (important)

openSUSE security update: security update for amazon-ssm-agent ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21884-1 Rating: important References: bsc1276981 bsc1276994 bsc1278681 Cross-References: CVE-2026-56854 CVE-2026-56855 CVE-2026-71556...

Security update for amazon-ssm-agent

This update for amazon-ssm-agent fixes the following issues: CVE-2026-56854: golang.org/x/crypto/ssh: source-address restriction bypassed in 5 callback families bsc1278681 CVE-2026-56855: golang.org/x/crypto/ssh: prevent DoS on deadlocked established channel bsc1278681 CVE-2026-78662:...

CVE-2026-71557

A flaw was found in go-git, an extensible Git implementation library. Maliciously crafted reference names, which can contain directory-traversal sequences, are not properly sanitized. This vulnerability allows an attacker to write files outside of the intended reference storage directory,...

SUSE SLES15 Security Update : amazon-ssm-agent (SUSE-SU-2026:4082-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4082-1 advisory. - CVE-2026-71556: github.com/go-git/go-git/v5: Arbitrary file read/write via symbolic link resolution bsc1276981. - CVE-2026-71557:...

github.com/go-git/go-git: github.com/go-git/go-git/v5: go-git: Unauthorized file modification via directory traversal in reference names

A flaw was found in go-git, an extensible Git implementation library. Maliciously crafted reference names, which can contain directory-traversal sequences, are not properly sanitized. This vulnerability allows an attacker to write files outside of the intended reference storage directory,...

github.com/go-git/go-git: github.com/go-git/go-git/v5: go-git: Unauthorized file modification via directory traversal in reference names

A flaw was found in go-git, an extensible Git implementation library. Maliciously crafted reference names, which can contain directory-traversal sequences, are not properly sanitized. This vulnerability allows an attacker to write files outside of the intended reference storage directory,...

CLEANSTART-2026-NK57336 go-git is an extensible git implementation library written in pure Go

Multiple security vulnerabilities affect the grafana-alloy package. go-git is an extensible git implementation library written in pure Go. See references for individual vulnerability details...

PT-2026-99827

Multiple security vulnerabilities affect the grafana-alloy package. go-git is an extensible git implementation library written in pure Go. See references for individual vulnerability details...