832 matches found
CVE-2018-17456
CVE-2018-17456 취약점 개요 취약점 이름: Git 입력 검증 오류 취약점 CNNVD 번호: CNNVD-201810-234 위험 등급: 초고위험 CVE 번호: CVE-2018-17456 취약점 유형: 입력 검증 오류 발표일: 2018-10-08 위협 유형: 원격 업데이트일: 2019-04-25 제조사: debian 취약점 출처: Atlassian,TerryZh... 취약점 개요: Git은 무료 오픈 소스 분산 버전 관리 시스템입니다. Git에서 입력 검증 오류 취약점이 발견되었습니다. 이 취약점은 네트워크 시스템 또는...
threatcl
threatcl HCL을 사용한 위협 모델링 hcltm은 어떻게 되었나요? hcltm이 threatcl로 이름이 변경되었습니다. 환영합니다! 개요 !TIP 새 문서를 읽고 싶으신가요? threatcl.dev를 방문하세요. 위협 모델을 문서화하는 방법은 다양합니다. 간단한 텍스트 파일부터 더 상세한 워드 문서, 완전히 계측된 중앙 집중식 솔루션까지 여러 형태가 있습니다. 위협 모델의 가장 가치 있는 두 가지 속성은 위협을 명확하게 문서화하고 가치 있는 변화를 이끌어낼 수 있는 능력입니다. threatcl은 다음 목표에 중점을 두...
Gitmails
개발 - 중요 이 Gitmails 버전은 더 이상 유지보수되지 않습니다. 유지보수되며 발전되고 있는 버전을 사용하려면 Gitmails Shell 포트를 확인하세요. 쉘 포트를 사용하지 않고 Python 버전을 선호한다면, Gitmails를 포크하여 원하는 방향으로 자유롭게 이끌어가세요. 개요 Gitmails는 git 커밋에 작성자가 설정한 이름과 이메일이 포함되어 있으며, 버전 관리 호스트 서비스가 많은 프로젝트를 저장하는 데 사용된다는 점을 활용합니다. Gitmails가 하는 일은 다음과 같습니다: 조직, 팀, 그룹, 사용자...
Gitmails
Development - IMPORTANT This Gitmails version is no longer maintained. Check out the Gitmails Shell port if you want to use a version that is maintained and, hopefully, developed. If you do not want to use the shell port and prefer the Python version, feel free to fork Gitmails and direct it to...
Amazon Linux 2023 : ansible-core, ansible-test (ALAS2023-2026-2036)
It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2026-2036 advisory. A flaw was found in ansible-core. The extractcollectionfromgit function in ansible-core's concreteartifactmanager.py constructs git clone commands without a '--' end-of-options separator before...
The vulnerability of the API for reporting testing results of CI/CD pipelines is a problem with the Pipeline Test Report API software platform based on Git. This API allows attackers to compromise the confidentiality of protected information.
The vulnerability of the API reports for testing CI/CD pipelines is related to deficiencies in the authentication process. Exploiting this vulnerability could allow an attacker to compromise the confidentiality of the protected information...
The vulnerability of the scheduling component of the CI/CD pipeline API for a Git-based software platform allows a malicious actor to alter the configuration of CI/CD processes. This vulnerability enables a hacker to modify the setup of CI/CD workflows.
The vulnerability of the scheduling component of the CI/CD pipeline API for a Git-based software platform relates to insufficient control over the modification of dynamically defined object properties. Exploiting this vulnerability could allow an attacker to remotely alter the CI/CD configuration...
CVE-2026-59327
Spring Tools for Eclipse stores the Spring Boot DevTools remote secret spring.devtools.remote.secret as a plain string attribute on the "Spring Boot DevTools Client" launch configuration. Eclipse persists launch configuration attributes as cleartext XML, either to workspace metadata or, if the us...
CVE-2026-59327
Spring Tools for Eclipse stores the Spring Boot DevTools remote secret spring.devtools.remote.secret as a plain string attribute on the "Spring Boot DevTools Client" launch configuration. Eclipse persists launch configuration attributes as cleartext XML, either to workspace metadata or, if the us...
PT-2026-66414
Spring Tools for Eclipse stores the Spring Boot DevTools remote secret spring.devtools.remote.secret as a plain string attribute on the "Spring Boot DevTools Client" launch configuration. Eclipse persists launch configuration attributes as cleartext XML, either to workspace metadata or, if the us...
CVE-2026-65907
In JetBrains TeamCity before 2026.1.2, 2025.11.6 code execution in Git VCS roots was possible...
EUVD-2026-48253
In JetBrains TeamCity before 2026.1.2, 2025.11.6 code execution in Git VCS roots was possible...
CVE-2026-65907
The vulnerability affects JetBrains TeamCity prior to 2026.1.2, where code execution was possible in Git VCS roots (2025.11.6). The issue is tied to TeamCity’s Git VCS integration, with impact described as CRITICAL (CVSS 3.1). Remediation: upgrade to TeamCity 2026.1.2 or later as indicated by the...
PT-2026-63981
Name of the Vulnerable Software and Affected Versions JetBrains TeamCity versions prior to 2026.1.2 JetBrains TeamCity versions prior to 2025.11.6 Description Remote code execution is possible within Git VCS roots. VCS Version Control System roots are configurations that define the source code...
JetBrains TeamCity < 2026.1.2 Multiple Vulnerabilities
The version of JetBrains TeamCity installed on the remote host is prior to 2026.1.2. It is, therefore, affected by multiple vulnerabilities: - In JetBrains TeamCity before 2026.1.2 arbitrary file access was possible via the Perforce VCS integration CVE-2026-59793 - In JetBrains TeamCity before...
Cursor Flaw Lets Malicious Cloned Repositories Trigger Windows Code Execution
Open a repository in Cursor on Windows and, if a file named git.exe is sitting in the project root, Cursor runs it. No click, no approval dialog, no warning that anything in the folder is about to execute. Whatever that binary does, it does as you, with your source, your SSH keys and your cloud...
CVE-2026-59793
In JetBrains TeamCity before 2026.1.2 arbitrary file access was possible via the Perforce VCS integration...
CVE-2026-59793
In JetBrains TeamCity before 2026.1.2 arbitrary file access was possible via the Perforce VCS integration...
CVE-2026-59793
CVE-2026-59793 affects JetBrains TeamCity prior to version 2026.1.2. The issue allows arbitrary file access via the Perforce VCS integration, due to the Perforce VCS integration component. Impact is described as high for confidentiality, integrity, and availability. The CVSS vector indicates netw...