CVE-2026-60004

CVE-2026-60004 — Gitea diffpatch RCE Gitea-diffpatch-Endpunkt PoC für Remote-Codeausführung. Ein Konto mit Schreibberechtigung für ein Repository auf Instanzen mit offener Registrierung genügt eine anonyme Registrierung kann auf dem Server als Gitea-Dienstkonto beliebige Shell-Befehle ausführen...

CVE-2026-60004-gitea-0day

CVE-2026-60004 - Gitea = 1.27.0 Pre-Auth RCE Dies ist ein Proof-of-Concept-Exploit für CVE-2026-60004, eine kritische Schwachstelle für Remote-Code-Ausführung in Gitea-Versionen 1.17 bis 1.27.0. Das Skript automatisiert die gesamte Exploit-Kette, von der Benutzerregistrierung bis zur Einrichtung...

CVE-2024-32002-EXP

CVE-2024-32002-EXP root@kitploit: !/bin/bash Imposta le opzioni di configurazione Git git config --global protocol.file.allow always git config --global core.symlinks true Evita messaggi di avviso imposta il ramo predefinito su main git config --global init.defaultBranch main Definisci il percors...

rcetest

CVE-2024-32002: Sfruttare Git RCE tramite git clone Questo repository contiene un PoC per sfruttare CVE-2024-32002, una vulnerabilità in Git che consente RCE durante un'operazione git clone. Creando repository con sottomoduli in un modo specifico, un attaccante può sfruttare la gestione dei symli...

cve-2025-48384-poc

PoC per CVE-2025-48384 Questa proof-of-concept dimostra la vulnerabilità di errata interpretazione del sottomodulo CR-path di Git, che porta all'esecuzione arbitraria di hook durante git clone --recurse-submodules. ⚠️ Avviso Questo è solo per scopi educativi e di test. Non eseguirlo in un ambiente...

CVE-2025-48384

CVE-2025-48384: Git mit einem Wagenrücklauf brechen und RCE beim Klonen Reproduktion von https://dgl.cx/2025/07/git-clone-submodule-cve-2025-48384. Alle Credits an David Leadbeater. Dies ist ein grundlegender Reproduktionsversuch der Schwachstelle. Um auszulösen, führen Sie git clone --recursive...

CVE-2025-48384-test

Reproduktionsbefehle root@kitploit: git clone --recursive https://github.com/beishanxueyuan/CVE-2025-48384-test.git Ändern des GitHub-Repositories, auf das verwiesen wird root@kitploit: git init repo git -C repo -c protocol.file.allow=always submodule add...

CVE-2026-78677

GitPython before 3.1.59 omits --separate-git-dir from unsafegitcloneoptions, allowing attackers to create arbitrary git directories outside the intended clone destination. Attackers can pass a separategitdir parameter to Repo.clonefrom or Repo.clone to redirect repository metadata to an...

EUVD-2026-65223

GitPython before 3.1.59 omits --separate-git-dir from unsafegitcloneoptions, allowing attackers to create arbitrary git directories outside the intended clone destination. Attackers can pass a separategitdir parameter to Repo.clonefrom or Repo.clone to redirect repository metadata to an...

CVE-2026-78677 GitPython before 3.1.59 Path Traversal via separate-git-dir

GitPython before 3.1.59 omits --separate-git-dir from unsafegitcloneoptions, allowing attackers to create arbitrary git directories outside the intended clone destination. Attackers can pass a separategitdir parameter to Repo.clonefrom or Repo.clone to redirect repository metadata to an...

CVE-2026-78677

GitPython before 3.1.59 omits the --separate-git-dir option from its unsafe_git_clone_options list, enabling a path traversal attack. An attacker can pass a separate_git_dir parameter to Repo.clone_from() or Repo.clone() to redirect repository metadata to an attacker-controlled filesystem path, r...

CVE-2026-78677

GitPython before 3.1.59 omits --separate-git-dir from unsafegitcloneoptions, allowing attackers to create arbitrary git directories outside the intended clone destination. Attackers can pass a separategitdir parameter to Repo.clonefrom or Repo.clone to redirect repository metadata to an...

CVE-2026-42284

A flaw was found in GitPython, a Python library for interacting with Git repositories. A remote attacker could exploit an input validation vulnerability in the clone function. By crafting a malicious string in the multioptions parameter, an attacker could bypass validation. This allows for the...

GHSA-9RJ7-RF2P-W77R GitPython: Unguarded git option forwarding in Repo.init enables arbitrary command execution via --template clone hooks

Summary Repo.init forwards kwargs verbatim to git init with no unsafe-option guard and no allowunsafeoptions parameter. git init --template= copies /hooks/ into the new repo's .git/hooks, so an attacker-controlled template kwarg plants a hook that executes on the next git operation → arbitrary co...

EUVD-2026-53342

Mistral Vibe before 2.23.3 contains a remote code execution vulnerability that allows attackers to execute arbitrary commands by embedding a malicious core.fsmonitor hook in a repository's .git/config file, which is triggered when vibe invokes git status --porcelain without suppressing hook...

DEBIAN-CVE-2026-52726

Dulwich is a pure-Python implementation of the Git file formats and protocols. Starting in version 0.23.2 and prior to version 1.2.5, dulwich.porcelain.submoduleupdate, and by extension porcelain.clone..., recursesubmodules=True, materializes attacker-controlled submodule paths from a crafted...

CVE-2026-40068

In versions 2.1.63 through 2.1.83 of Claude Code, the folder trust determination logic used the git worktree commondir file without validating its contents. An attacker could craft a malicious repository with a commondir file pointing to a path the victim had previously trusted, causing Claude Co...

Astra Linux – Vulnerability in Git

Git is a version control system. Before versions 2.45.1, 2.44.1, 2.43.4, 2.42.2, 2.41.1, 2.40.2, and 2.39.4, repositories containing submodules could be exploited through a bug in Git. This bug allowed an attacker to manipulate the creation of files—specifically, files that were written into the...

PYSEC-2026-2163

GitPython is a python library used to interact with Git repositories. Prior to version 3.1.49, GitConfigParser.setvalue passes values to Python's configparser without validating for newlines. GitPython's own write converts embedded newlines into indented continuation lines e.g. \n becomes \n\t, b...

CVE-2026-42284

GitPython is a python library used to interact with Git repositories. Prior to version 3.1.47, clone validates multioptions as the original list, then executes shlex.split" ".joinmultioptions. A string like "--branch main --config core.hooksPath=/x" passes validation starts with --branch, but aft...