DotGit

DotGit 방문한 웹사이트에서 .git이 노출되었는지 확인하는 확장 프로그램 기능 방문하는 각 사이트에 .git/.svn/.hg 폴더가 있는지 확인 방문하는 각 사이트에 .env 파일이 있는지 확인 방문하는 각 사이트에 .DSStore 파일이 있는지 확인 사이트가 오픈소스github/gitlab인지 확인 사이트에 security.txt가 있는지 확인 폴더가 발견되면 알림 발견된 노출 사이트 목록 파일이 사이트에 나열되지 않은 경우에도 전체 .git 폴더를 zip 형식으로 다운로드 한 번의 클릭으로 .git/config 보기...

composer-CVE-2026-40261-CVE-2026-40176-PoC

!CAUTION このリポジトリには、Composer の脆弱性 CVE-2026-40261 および CVE-2026-40176 に関する概念実証コードが含まれています。 !CAUTION このコードは教育およびテスト目的のみを意図しています。 !CAUTION 本番環境や、適切な許可なくシステムに対してこのコードを使用しないでください。 !CAUTION セキュリティ脆弱性をテストする前に、必ず許可を得てください。 概要 このリポジトリは、Perforce VCS ドライバーを介したコマンドインジェクションに関連する Composer の 2 つの脆弱性を実証します。 攻撃ベクトル...

CVE-2026-103497

In JetBrains YouTrack before 2026.2.19422 sSRF was possible via the GitHub VCS integration...

CVE-2026-103489

In JetBrains YouTrack before 2026.2.19422 hTML injection in VCS command failure notifications was possible...

CVE-2026-103497

In JetBrains YouTrack before 2026.2.19422 sSRF was possible via the GitHub VCS integration...

CVE-2026-103497

In JetBrains YouTrack before 2026.2.19422 sSRF was possible via the GitHub VCS integration...

EUVD-2026-90588

In JetBrains YouTrack before 2026.2.19422 sSRF was possible via the GitHub VCS integration...

CVE-2026-103497

The JetBrains YouTrack application is affected by a Server-Side Request Forgery (sSRF) vulnerability in versions prior to 2026.2.19422 . The flaw exists within the GitHub VCS integration , potentially allowing an attacker to make requests from the server. No specific exploit details or proof-of-c...

EUVD-2026-90580

In JetBrains YouTrack before 2026.2.19422 hTML injection in VCS command failure notifications was possible...

CVE-2026-103489

Versions of JetBrains YouTrack prior to 2026.2.19422 are vulnerable to an HTML injection flaw. This vulnerability exists within the VCS command failure notifications . No specific exploit information or direct remediation steps are provided in the documentation, though the issue is associated wit...

CVE-2026-103489

In JetBrains YouTrack before 2026.2.19422 hTML injection in VCS command failure notifications was possible...

CVE-2026-103489

In JetBrains YouTrack before 2026.2.19422 hTML injection in VCS command failure notifications was possible...

Astra Linux – Vulnerability in Composer

Composer is a dependency manager for PHP. Versions 1.0 through 2.2.26, and 2.3 through 2.9.5 contain a command injection vulnerability in the Perforce::generateP4Command method. This method constructs shell commands by interpolating user-supplied Perforce connection parameters port, user, client...

Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15

In the Linux kernel, the following vulnerability has been resolved: vcscreen: The load of the struct vcdata pointer in vcswrite was reloaded to avoid a Use-After-Free UAF condition. After a call to consoleunlock in vcswrite, the struct vcdata structure can be freed using vcportdestruct. Therefore...

Astra Linux – Vulnerability in Linux 5.10, Linux, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: vcscreen: The load of the struct vcdata pointer in vcsread was moved to avoid a Use-After-Free UAF condition. After a call to consoleunlock in vcsread, the struct vcdata structure can be freed using vcdeallocate. Therefore, the...

Astra Linux – Vulnerability in python-pip

When installing a package from a Mercurial VCS URL e.g., “pip install hg+…” using pip before version 23.3, the specified Mercurial revision could be used to inject arbitrary configuration options into the “hg clone” call e.g., “--config”. Controlling the Mercurial configuration allows modifying t...

Astra Linux – Vulnerability in Composer

Composer is a dependency manager for the PHP programming language. Integrators who use Composer code to call VcsDriver::getFileContent may encounter a code injection vulnerability if the user can control the $file or $identifier arguments. This vulnerability is documented on packagist.org, where...

Astra Linux – Vulnerability in Linux 5.10, Linux, Linux 5.15

A use-after-free flaw was discovered in vcsread in drivers/tty/vt/vc-screen.c within vc-screen in the Linux Kernel. This issue may allow an attacker with local user access to cause a system crash or leak internal kernel information...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: tty: vt: initialize unicode screen buffer The syzbot report indicates a kernel vulnerability at the vcsread function 1. The buffer can be read immediately after the resizing operation. Initialize the buffer using kzalloc...

NewStart CGSL MAIN 7.02 : golang Multiple Vulnerabilities (NS-SA-2026-0090)

The remote NewStart CGSL host, running version MAIN 7.02, has golang packages installed that are affected by multiple vulnerabilities: - SWIG file names containing 'cgo' and well-crafted payloads could lead to code smuggling and arbitrary code execution at build time due to trust layer bypass...