Git Vulnerabilities
228 vulnerabilities related to Git
- PoC2026-08-19CVE-2026-19478: GitLab CE/EE - GraphQL @gl_introduced Arbitrary Method Invocation
- PoC2026-08-19CVE-2026-20896: Gitea Docker Image <= 1.26.2 - Reverse Proxy Header Authentication Bypass
- PoC2026-08-18ibm-websphere-ssrf: IBM WebSphere HCL Digital Experience - Server-Side Request Forgery
- PoC2026-08-16CVE-2026-59774: Gitea 1.22.1-1.27.0 - Unauthenticated Arbitrary File Read
- PoC2026-08-03CVE-2026-60004: Gitea <= 1.27.0 - Pre-Auth Remote Code Execution
- PoC2026-06-17CVE-2020-36884: BrightSign Digital Signage 8.2.26 - Server-Side Request Forgery
- PoC2026-06-17CVE-2026-27771: Gitea Container Registry - Unauthorized Private Image Access
- 2026-06-12Gitea /v2/_catalog 未授权访问漏洞（CVE-2026-27771）
- 2026-06-03gitea-forgejo存在身份认证绕过(CVE-2026-27771)
- PoC2026-05-19gitea-userenum: Gitea - User Enumeration
- 2026-05-19Gitea用户信息泄露
- PoC2026-05-09CVE-2021-45328: Gitea < 1.4.3 - Open Redirect
- PoC2026-05-09gitea-open-redirect-bypass: Gitea < 1.21.0 - Open Redirect
- PoC2026-04-09glitchtip-public-signup: Gitea Public Registration Enabled
- PoC2026-02-27gitness-default-login: Gitness - Default Login
- PoC2026-01-24gitea-public-repo-exposure: Gitea Public Repository - Exposure
- PoC2026-01-08CVE-2021-22175: GitLab CI Lint API - Server-Side Request Forgery
- PoC2026-01-08CVE-2024-5057: WordPress Easy Digital Downloads <= 3.2.12 - SQL Injection
- PoC2026-01-08exposed-gitmodules: .gitmodules File Exposed
- PoC2025-12-02CVE-2023-30869: Easy Digital Downloads - Privilege Escalation
- 2025-10-11GitLab GitLab CE/EE 权限管理不当漏洞
- 2025-10-09GitLab CE/EE GraphQL 身份验证缺陷漏洞
- 2025-09-26GitLab CE/EE 资源分配控制不当漏洞 可导致拒绝服务
- 2025-09-11西部数码 NAS sendLogToSupport.php 远程代码执行漏洞
- 2025-09-03Gitness LFS 需授权 路径遍历漏洞 可导致远程代码执行
- 2025-09-01gitlab-api-user-enum: GitLab - User Information Disclosure Via Open API
- 2025-09-01western-digital-mycloud-multi-uploadify-file-upload: Western Digital MyCloud Multi Uploadify File Upload
- PoC2025-08-01CVE-2024-45409: GitLab - SAML Authentication Bypass
- PoC2025-08-01CVE-2024-9487: GitHub Enterprise - SAML Authentication Bypass
- PoC2025-08-01CVE-2025-25291: GitLab - SAML Authentication Bypass
- PoC2025-08-01CVE-2010-2307: Motorola SBV6120E SURFboard Digital Voice Modem SBV6X2X-1.0.0.5-SCM - Directory Traversal
- PoC2025-08-01CVE-2016-10108: Western Digital MyCloud NAS - Command Injection
- PoC2025-08-01CVE-2018-1000533: GitList < 0.6.0 Remote Code Execution
- PoC2025-08-01CVE-2018-1000600: Jenkins GitHub Plugin <=1.29.1 - Server-Side Request Forgery
- PoC2025-08-01CVE-2018-14912: cgit < 1.2.1 - Directory Traversal
- PoC2025-08-01CVE-2018-17153: Western Digital MyCloud NAS - Authentication Bypass
- PoC2025-08-01CVE-2019-6793: GitLab Enterprise Edition - Server-Side Request Forgery
- PoC2025-08-01CVE-2020-14144: Gitea 1.1.0 - 1.12.5 - Remote Code Execution
- PoC2025-08-01CVE-2020-2096: Jenkins Gitlab Hook <=1.4.2 - Cross-Site Scripting
- PoC2025-08-01CVE-2020-26413: Gitlab CE/EE 13.4 - 13.6.2 - Information Disclosure
- PoC2025-08-01CVE-2021-22205: GitLab CE/EE - Remote Code Execution
- PoC2025-08-01CVE-2021-22214: Gitlab CE/EE 10.5 - Server-Side Request Forgery
- PoC2025-08-01CVE-2021-27748: IBM WebSphere HCL Digital Experience - Server-Side Request Forgery
- PoC2025-08-01CVE-2021-4191: GitLab GraphQL API User Enumeration
- PoC2025-08-01CVE-2022-0735: GitLab CE/EE - Information Disclosure
- PoC2025-08-01CVE-2022-1058: Gitea <1.16.5 - Open Redirect
- PoC2025-08-01CVE-2022-1162: GitLab CE/EE - Hard-Coded Credentials
- PoC2025-08-01CVE-2022-2185: GitLab CE/EE - Remote Code Execution
- PoC2025-08-01CVE-2022-31268: Gitblit 1.9.3 - Local File Inclusion
- PoC2025-08-01CVE-2022-34534: Digital Watchdog DW Spectrum Server 4.2.0.32842 - Information Disclosure
- PoC2025-08-01CVE-2022-36883: Jenkins Git <=4.11.3 - Missing Authorization
- PoC2025-08-01CVE-2023-23489: WordPress Easy Digital Downloads 3.1.0.2/3.1.0.3 - SQL Injection
- PoC2025-08-01CVE-2023-2825: GitLab 16.0.0 - Path Traversal
- PoC2025-08-01CVE-2023-7028: GitLab - Account Takeover via Password Reset
- PoC2025-08-01CVE-2024-0200: Github Enterprise - Remote Code Execution
- PoC2025-08-01CVE-2024-6886: Gitea 1.22.0 - Cross-Site Scripting
- PoC2025-08-01CVE-2018-1000533: GitList < 0.6.0 RCE
- PoC2025-08-01CVE-2020-26413: GitLab Information Disclosure
- PoC2025-08-01CVE-2021-22205: GitLab CE/EE Unauthenticated RCE Using ExifTool
- PoC2025-08-01CVE-2021-22214: Unauthenticated Gitlab SSRF - CI Lint API
- PoC2025-08-01CVE-2022-36883: Git Plugin up to 4.11.3 on Jenkins Build Authorization
- PoC2025-08-01gitlab-weak-login: Gitlab Default Login
- PoC2025-08-01dahua-dss-login-action-rce: 大华DSS Digital Surveillance System系统login_login.action存在远程命令执行漏洞
- PoC2025-08-01git-leak: Git 代码托管泄漏
- PoC2025-08-01gitlab-public-snippets: GitLab public snippets
- PoC2025-08-01gitlab-uninitialized-password: Uninitialized GitLab instances
- PoC2025-08-01qihang-media-disclosure: QiHang Media Web Digital Signage 3.0.9 - Cleartext Credentials Disclosure
- PoC2025-08-01qihang-media-lfi: QiHang Media Web (QH.aspx) Digital Signage 3.0.9 - Arbitrary File Disclosure
- PoC2025-08-01digitalocean-anchor-csp-bypass: Content-Security-Policy Bypass - DigitalOcean Anchor
- PoC2025-08-01github-gist-csp-bypass: Content-Security-Policy Bypass - GitHub Gist
- PoC2025-08-01gitlab-page-csp-bypass: Content-Security-Policy Bypass - GitLab Page
- PoC2025-08-01github-app-token: Github App Token
- PoC2025-08-01github-oauth-token: Github OAuth Access Token
- PoC2025-08-01github-personal-token: Github Personal Token
- PoC2025-08-01github-refresh-token: Github Refresh Token
- PoC2025-08-01CNVD-2023-96945: McVie Safety Digital Management Platform - Arbitrary File Upload
- PoC2025-08-01gitea-login-check: gitea.com Login Check
- PoC2025-08-01github-login-check: Github Login Check
- PoC2025-08-01gitlab-login-check-self-hosted: Gitlab Login Check Self Hosted
- PoC2025-08-01digital-watchdog-default-login: Digital Watchdog - Default Login
- PoC2025-08-01digitalrebar-default-login: RackN Digital Rebar Default Login
- PoC2025-08-01gitblit-default-login: Gitblit - Default Login
- PoC2025-08-01gitlab-weak-login: Gitlab Default Login
- PoC2025-08-01git-config-nginxoffbyslash: Nginx - Git Configuration Exposure
- PoC2025-08-01git-config: Git Configuration - Detect
- PoC2025-08-01git-credentials-disclosure: Git Credentials - Detect
- PoC2025-08-01github-workflows-disclosure: Github Workflow Disclosure
- PoC2025-08-01git-mailmap: Git Mailmap File Disclosure
- PoC2025-08-01gitlab-ci-yml: GitLab CI YAML - Exposure
- PoC2025-08-01git-exposure: Git Metadata Directory Exposure
- PoC2025-08-01redv-super-logs: RED-V Super Digital Signage System RXV-A740R - Log Information Disclosure
- PoC2025-08-01axiom-digitalocean-key-exposure: DigitalOcean Key Exposure via Axiom
- PoC2025-08-01github-personal-access: GitHub Personal Access Token
- PoC2025-08-01gitlab-personal-token: GitLab Personal Access Token
- PoC2025-08-01git-web-interface: Git web interface
- PoC2025-08-01gitea-public-signup: Gitea Public Registration Enabled
- PoC2025-08-01gitlab-api-user-enum: GitLab - User Information Disclosure Via Open API
- PoC2025-08-01gitlab-uninitialized-password: Uninitialized GitLab instances
- PoC2025-08-01gitlist-disclosure: GitList Disclosure
- PoC2025-08-01gitea-installer: Gitea Installer Exposure
- PoC2025-08-01setup-github-enterprise: Setup GitHub Enterprise - Detect
- PoC2025-08-01metadata-service-digitalocean: DigitalOcean Metadata Service Check
- PoC2025-08-01sony-bravia-disclosure: Sony BRAVIA Digital Signage 1.7.8 System API Information Disclosure
- PoC2025-08-01gitbook-takeover: gitbook takeover detection
- PoC2025-08-01github-takeover: Github Takeover Detection
- PoC2025-08-01gitea-rce: Gitea 1.4.0 - Remote Code Execution
- PoC2025-08-01gitlab-rce: GitLab CE/EE Unauthenticated RCE Using ExifTool
- PoC2025-08-01brightsign-dsdws-ssrf: BrightSign Digital Signage Diagnostic Web Server 8.2.26 Unauthenticated - SSRF
- PoC2025-08-01castel-digital-sqli: Castel Digital - Authentication Bypass
- PoC2025-08-01digital-ocean-ssrf: Digital Ocean - Server-side request forgery (SSRF)
- PoC2025-08-01digitalrebar-traversal: Digital Rebar - Local File Inclusion
- PoC2025-08-01eibiz-lfi: Eibiz i-Media Server Digital Signage 3.8.0 - Local File Inclusion
- PoC2025-08-01qihang-media-disclosure: QiHang Media Web Digital Signage 3.0.9 - Cleartext Credentials Disclosure
- PoC2025-08-01gitlab-panel: GitLab Panel
- 2025-06-08Western Digital My Cloud NAS multi_uploadify.php 文件上传漏洞
- 2025-06-04Western Digital My Cloud NAS chk_vv_sharename.php 命令执行漏洞
- 2025-05-29（CVE-2025-4670）Easy Digital Downloads插件存储型跨站脚本漏洞
- 2025-01-16Git Credential Manager 信息泄露漏洞
- 2025-01-09go-git 参数注入漏洞
- 2024-12-10GitLab 权限提升漏洞
- 2024-11-27GitLab CE/EE 权限管理不当漏洞 可导致敏感信息泄露
- 2024-11-27GitLab CE/EE 输入验证不当漏洞 可导致拒绝服务
- 2024-11-27GitLab CE/EE 需授权 访问控制不当漏洞 可导致权限提升
- 2024-11-14GitLab CE/EE 需授权 访问控制不当漏洞
- 2024-10-25GitLab /users/sign_in 默认口令漏洞
- 2024-10-25GitLab /users/sign_in 默认口令漏洞
- 2024-10-14GitHub GitHub Enterprise Server 签名验证不当漏洞
- 2024-10-10GitLab EE 需授权 访问控制不当漏洞
- 2024-10-10GitLab CE/EE 需授权 身份验证缺陷漏洞
- 2024-10-10GitLab EE 需授权 服务端请求伪造漏洞
- 2024-10-10GitLab CE/EE 需授权 输入验证不当漏洞
- 2024-10-10GitLab CE/EE 需授权 跨站脚本漏洞
- 2024-09-27Western Digital MyCloud NAS Cookie 命令注入漏洞（CVE-2016-10108）
- 2024-09-27Western Digital MyCloud NAS Cookie 命令注入漏洞（CVE-2016-10108）
- 2024-09-26GitLab EE 需授权 输入验证不当漏洞 可导致敏感信息泄露
- 2024-09-19Gitlab SAML 身份认证绕过漏洞
- 2024-09-12GitLab CE/EE 未授权 拒绝服务漏洞
- 2024-09-12GitLab EE 需授权 代码注入漏洞
- 2024-09-12GitLab CE/EE 权限管理不当漏洞
- 2024-08-14GitLab社区与企业版Label Color存储型跨站脚本漏洞
- 2024-08-07Anmei Digital Hotel Broadband OS 命令注入漏洞
- 2024-07-12GitList searchTree方法远程命令执行漏洞
- 2024-07-11Gitlab 访问控制不当漏洞
- 2024-06-29GitLab 身份验证缺陷
- 2024-06-11GitStack 远程命令执行漏洞（CVE-2018-5955）
- 2024-06-11Gitea 弱口令漏洞
- 2024-05-31GitLab Community and Enterprise Edition Web IDE 存储型XSS漏洞
- 2024-05-23GitHub Enterprise Server 未授权 身份验证缺陷漏洞
- 2024-05-20Git 远程代码执行漏洞
- 2024-05-18Git 远程命令执行漏洞
- 2024-04-03Gitlab 未授权访问漏洞
- 2024-04-03Gitlab 未授权访问漏洞
- 2024-03-22GitHub Enterprise Server 远程代码执行漏洞
- 2024-03-21GitLab Community and Enterprise Edition CVE-2023-0921 拒绝服务漏洞
- 2024-03-14GitLab CE/EE 任意用户密码重置漏洞
- 2024-02-29GitLab Community and Enterprise Edition 拒绝服务漏洞
- 2024-02-22Gitlab CVE-2022-1162 认证绕过漏洞
- 2024-02-22GitLab CE/EE CVE-2022-3572 跨站脚本漏洞
- 2024-02-22GitLab社区和企业版笔记存储型跨站脚本漏洞
- 2024-02-22GitLab Community and Enterprise Edition GitHub Import 远程代码执行漏洞
- 2024-02-22Sourcegraph Gitserver CVE-2022-23642 代码执行漏洞
- 2024-02-22GitLab社区和企业版Milestone References跨站脚本漏洞
- 2024-02-22GitLab Community and Enterprise Edition GitHub Import CVE-2022-2992 远程代码执行漏洞
- 2024-02-22GitLab 社区和企业版 Project Settings 存储型XSS漏洞
- 2024-02-22GitLab EE/CE CVE-2022-3486 重定向漏洞
- 2024-02-22Digital Watchdog DW MEGApix IP cameras 命令注入漏洞
- 2024-02-22Jenkins Plugin GitLab 存储型跨站脚本漏洞
- 2024-02-22Gitblit CVE-2022-31268 目录遍历漏洞
- 2024-02-22GitLab CVE-2022-2185 远程代码执行漏洞
- 2024-02-22GitLab CVE-2022-2185 远程代码执行漏洞
- 2024-02-07GitLab CE/EE CVE-2022-3573 跨站脚本漏洞
- 2024-02-07Digital China Networks 远程代码执行漏洞
- 2024-02-07GitLab CVE-2023-2825任意文件读取漏洞
- 2024-02-07GitLab Community and Enterprise Edition Merge Requests 存储型跨站脚本漏洞
- 2024-02-07WordPress 插件 Easy Digital Downloads SQL注入漏洞
- 2024-02-07Git Git Source Code Management gitattributes 整数型溢出漏洞
- 2024-02-07Git Git Source Code Management gitattributes 整数型溢出漏洞
- 2024-01-11GitLab 任意用户密码重置漏洞(CVE-2023-7028)
- 2023-12-23GitHub Enterprise Server 日志信息泄露漏洞
- 2023-09-29(CVE-2023-3906) GitLab EE资产代理输入验证绕过漏洞
- 2023-09-29Gitlab 安全漏洞(CVE-2023-3914)
- 2023-08-28GitPython 命令执行漏洞(CVE-2023-40590)
- 2023-08-19Western Digital My Cloud /cgi-bin/nas_sharing.cgi 远程命令执行漏洞
- 2023-08-02Gitlab 跨站脚本攻击漏洞(CVE-2023-3500)
- 2023-06-12Western Digital MyCloud snmp_mgr.cgi 文件多参数命令执行漏洞
- 2023-05-24GitLab 路径遍历漏洞(CVE-2023-2825)
- 2023-03-27Western Digital MyCloud /chk_vv_sharename.php 路径存在远程命令执行
- 2023-03-27Western Digital MyCloud /web/backups/usb_backup.php 路径存在远程命令执行
- 2023-03-27Western Digital MyCloud /web/php/noHDD.php 路径存在远程命令执行
- 2023-03-27Western Digital MyCloud /internal_backup.php 路径存在远程命令执行
- 2023-03-27Western Digital MyCloud /cgi-bin/login_mgr.cgi 路径存在远程命令执行
- 2023-03-27Western Digital MyCloud /php/modUserName.php 路径存在远程命令执行
- 2023-03-27Western Digital MyCloud /setting/recycle_bin.php 路径存在远程命令执行
- 2023-03-27Western Digital MyCloud /php/remoteBackups.php 路径存在远程命令执行
- 2023-03-27Western Digital MyCloud /users.php 路径存在远程命令执行
- 2023-03-23GitStack /rest/repository/ 路径存在鉴权绕过
- 2023-03-23GitStack /rest/repository/ 路径存在敏感信息泄露
- 2022-10-17（CVE-2022-2992）GitLab CE/EE 远程代码执行漏洞
- 2022-09-06GitLab CE/EE import api 远程代码执行漏洞
- 2022-08-24GitLab CE/EE import api 远程代码执行漏洞
- 2022-07-19Digital Watchdog DW MEGApix IP cameras A7.2.2_20211029 命令注入漏洞(CVE-2022-34538)
- 2022-07-19Digital Watchdog DW MEGApix IP cameras A7.2.2_20211029 命令注入漏洞(CVE-2022-34539)
- 2022-07-19Digital Watchdog DW MEGApix IP cameras A7.2.2_20211029 命令注入漏洞(CVE-2022-34540)
- 2022-07-07GitBlit系统 路径遍历漏洞(CVE-2022-31268)
- 2022-07-06Gitlab Project import 远程代码执行漏洞
- 2022-04-27western digital mycloud upload任意文件上传漏洞
- 2022-04-27western digita mycloud multi uploadify 任意文件上传漏洞
- 2022-04-08GitBlit系统默认口令
- 2022-04-04gitlabgitlab 使用硬编码凭据漏洞
- 2022-02-17GitBlit未授权源代码访问漏洞
- 2021-12-10Gitlab Wiki API 远程命令执行漏洞(CVE-2018-18649)
- 2021-11-01GitLab 远程命令执行漏洞（CVE-2021-22205）
- 2021-09-24B-swiss 3 Digital Signage数据库泄露
- 2021-07-01gitlab commit 邮箱信息泄露
- 2021-06-24Gitlab CI lint API 前台SSRF(CVE-2021-22214)
- 2021-03-25Gitlab markdown 远程代码执行漏洞
- 2021-03-10GitLab Graphql邮箱信息泄露漏洞(CVE-2020-26413)
- 2021-01-19Western Digital WD My Book World 无效身份验证漏洞
- 2021-01-19Western Digital MyCloud云存储设备DsdkProxy.php-命令执行(CVE-2018-17153)
- 2021-01-19Western Digital My Cloud network_mgr.cgi-身份验证绕过(CVE-2018-17153)
- 2021-01-19GitStack可视化应用的user页面-用户信息泄漏
- 2021-01-19Digital Watchdog摄像头-默认口令
- 2018-06-27GitList <= 0.6 POST请求远程代码执行漏洞
- 2014-07-22GitList 远程代码执行漏洞
- 2014-05-13GitLab gitlab-shell Repository Import Feature 远程代码执行漏洞
- 2014-05-13GitLab gitlab-shell ‘SSH key upload’功能远程代码执行漏洞
- 2014-05-12GitLab 远程代码执行漏洞
- 2011-06-01Walrus_Digit WalRack文件扩展处理任意文件上传漏洞