DotGit

DotGit An extension for checking if .git is exposed in visited websites Features Check if a .git/.svn/.hg folder exists for each site you visit Check if a .env file exists for each site you visit Check if a .DSStore file exists for each site you visit Check if the site is open source github/gitla...

composer-CVE-2026-40261-CVE-2026-40176-PoC

!CAUTION THIS REPOSITORY CONTAINS PROOF-OF-CONCEPT CODE FOR VULNERABILITIES CVE-2026-40261 AND CVE-2026-40176 IN COMPOSER. !CAUTION THE CODE IS INTENDED FOR EDUCATIONAL AND TESTING PURPOSES ONLY. !CAUTION DO NOT USE THIS CODE IN PRODUCTION ENVIRONMENTS OR AGAINST SYSTEMS WITHOUT PROPER...

JetBrains YouTrack < 2026.2.19562 Multiple Vulnerabilities

The version of JetBrains YouTrack installed on the remote host is prior to 2026.2.19562. It is, therefore, affected by multiple vulnerabilities: - In JetBrains YouTrack before 2026.2.19562 missing authorization in the saved query endpoint allowed disclosure of issue descriptions. CVE-2026-123327 ...

JetBrains PyCharm < 2020.3.4 Local Code Execution

According to its self-reported version, the JetBrains PyCharm installation on the remote host is prior to 2020.3.4. It is, therefore, affected by a code execution vulnerability. In JetBrains PyCharm before 2020.3.4, local code execution was possible because of insufficient checks when getting the...

CVE-2026-123332

In JetBrains YouTrack before 2026.2.19562 missing authorization allowed Project Admin to manage VCS hosting server configurations...

CVE-2026-123334

In JetBrains YouTrack before 2026.2.19562 project admins of a related project could delete VCS integrations owned by another project...

CVE-2026-123334

In JetBrains YouTrack before 2026.2.19562 project admins of a related project could delete VCS integrations owned by another project...

EUVD-2026-118098

In JetBrains YouTrack before 2026.2.19562 project admins of a related project could delete VCS integrations owned by another project...

CVE-2026-123334

In JetBrains YouTrack versions before 2026.2.19562 , a flaw in authorization logic allows project admins of a related project to delete VCS integrations owned by a different project. This vulnerability is associated with CWE-863 (Incorrect Authorization) and has a CVSS 3.1 score of 3.8. Remediati...

EUVD-2026-118096

In JetBrains YouTrack before 2026.2.19562 missing authorization allowed Project Admin to manage VCS hosting server configurations...

CVE-2026-123332

In JetBrains YouTrack versions prior to 2026.2.19562 , a missing authorization vulnerability (CWE-862) allows a Project Admin to manage VCS hosting server configurations . The impact includes low levels of confidentiality, integrity, and availability. Remediation is available in version 2026.2.19...

CVE-2026-123332

In JetBrains YouTrack before 2026.2.19562 missing authorization allowed Project Admin to manage VCS hosting server configurations...

CVE-2026-123332: JetBrains YouTrack: In JetBrains YouTrack before 2026.2.19562 missing authorization allowed Project Admin to manage VCS hosting server…

In JetBrains YouTrack before 2026.2.19562 missing authorization allowed Project Admin to manage VCS hosting server configurations...

CVE-2026-123334: JetBrains YouTrack: In JetBrains YouTrack before 2026.2.19562 project admins of a related project could delete VCS integrations owned by…

In JetBrains YouTrack before 2026.2.19562 project admins of a related project could delete VCS integrations owned by another project...

CLEANSTART-2026-JE26969 go command may execute unexpected commands when operating in untrusted VCS repositories

CVE-2025-4674 affects multiple packages. The go command may execute unexpected commands when operating in untrusted VCS repositories. See references for individual vulnerability details...

CLEANSTART-2026-XI62926 go command may execute unexpected commands when operating in untrusted VCS repositories

CVE-2025-4674 affects multiple packages. The go command may execute unexpected commands when operating in untrusted VCS repositories. See references for individual vulnerability details...

CLEANSTART-2026-ZX56372 go command may execute unexpected commands when operating in untrusted VCS repositories

Security vulnerability affects the logstash-exporter-fips package. The go command may execute unexpected commands when operating in untrusted VCS repositories...

Plastic SCM 8087 name-only ACL trigger RCE

NameWorkingMode + default ACL: cm trigger create with attacker Path → Process.Start. Requires local cm client; declares plasticuser no password. """Plastic SCM / Unity VCS name-only auth trigger RCE port 8087, cm client.""" from future import annotations import os import subprocess from kittysplo...

CFEngine Enterprise Nova Hub — VCS Settings Command Injection → Root RCE — Detect

Fingerprint / reachability check for CFEngine Enterprise Nova Hub — VCS Settings Command Injection → Root RCE !/usr/bin/env python3 -- coding: utf-8 -- """Detection for CFEngine Enterprise Nova Hub — VCS Settings Command Injection → Root RCE""" from kittysploit import from...

Cisco TelePresence Video Communication Server (VCS) Expressway: CVE-2026-76495: Cisco Expressway Series Security Hardening Release: October 2026

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Expressway Series software engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered...