cve-2024-32002-poc-aw
jakob-pennington/cve-2024-32002-poc-awA POC for CVE-2024-32002 demonstrating arbitrary write into the .git directory.
educationexploitationlabs-practice+2
jakob-pennington/cve-2024-32002-poc-awA POC for CVE-2024-32002 demonstrating arbitrary write into the .git directory.
rawsec/rawsec-cybersecurity-listCurated inventory of cybersecurity tools and resources covering penetration testing, forensics, OSINT, web security, malware analysis, cryptography,…
shirouuu/gitea-template-sync-path-traversal-privilege-escalation-cve-2026-38526-PoC and write-up for the HackTheBox "Nexus" privilege escalation: root-run Gitea template-sync service vulnerable to path traversal via forged Git…
judgedbykira/cve-2026-20896-gitea-authentication-bypassAn explanation and PoC to exploit CVE-2026-20896 Authentication Bypass Vulnerability on Gitea. Being able to steal session tokens for valid users in…
royaleybovich/cve-2026-3854-labLocal intentionally vulnerable lab with a guided workshop and CTF challenges for practicing Git push-option RCE, unsafe deserialization,…
saboor-hakimi-23/cve-2025-65964Educational CTF demo demonstrating command execution via Git hooks by abusing core.hooksPath in automation workflows. Highlights local hook execution…
arun1033/cve-2025-48384Reproduction script for CVE-2025-48384, a git clone RCE via carriage return in submodule paths, demonstrating the vulnerability and providing a local…
enochgitgamefied/nextjs-cve-2025-29927-docker-labDocker-based lab for exploring and reproducing the Next.js CVE-2025-29927 middleware authorization bypass vulnerability. Includes vulnerable app,…
cves-labs/cve-2026-21876Docker-based lab environment for reproducing and exploiting CVE-2026-1357, with step-by-step setup and Burp Suite exploitation guidance.
dinosn/cve-2026-10053-labReproducible lab for CVE-2026-10053 (GitLab npm package-registry path traversal -> arbitrary file write as git). Vulnerable 19.2.1 vs patched 19.2.2,…
fishyyh/cve-2025-48384-pocProof-of-concept exploit for CVE-2025-48384, demonstrating remote code execution via a crafted git clone operation on vulnerable Git versions.
cves-labs/cve-2026-1357Lab environment and proof-of-concept exploit for CVE-2026-1357, a WordPress plugin vulnerability, with Docker setup and automated exploitation…
chriswalker11/running-cve-2024-32002-locally-for-tesingLocal reproduction environment for CVE-2024-32002 Git RCE exploit using Gitea, with custom payload injection via post-checkout hooks and submodule…
jerry-zhuang/cve-2017-1000117Proof-of-concept exploit for CVE-2017-1000117 (Git clone command injection) targeting SSH, designed for vulnerability testing and educational lab…
horkimhab/cve-2026-33718Proof-of-concept exploit for CVE-2026-33718 demonstrating command injection in OpenHands' Git Diff Handler. Educational resource for vulnerability…
suz1n/whs3_vulhubPoC for CVE-2017-8386 Git-Shell sandbox bypass vulnerability.
featherw1t/cve-2023-51385_testProof-of-concept for CVE-2023-51385: demonstrates command injection via malicious git submodule URLs when cloning with --recurse-submodules,…
vulapps/cve-2017-1000117Proof-of-concept exploit for CVE-2017-1000117, demonstrating command injection via git clone to write arbitrary output to a web directory.