Most recent entries from all

BREW-bbot-CVE-2025-10283 — BBOT's insufficient sanitization issues in gitdumper.py can lead to RCE

2026-10-02T16:28:04.997530+00:00

Affected: Homebrew: bbot

### Summary

bbot's `gitdumper.py` insufficiently sanitises a `.git/config` file, leading to Remote Code Execution (RCE).

bbot's `gitdumper.py` can be made to consume a malicious `.git/index` file, leading to arbitrary file write which can be used to achieve Remote Code Execution (RCE).

### Impact

A user who uses bbot to scan a malicious webserver may have arbitrary code executed on their system.

EUVD-2026-254548

2026-10-02T16:28:04.997589+00:00

EUVD-2026-254548

fkie_cve-2025-10283

2026-10-02T16:28:04.997606+00:00

BBOT's gitdumper module could be abused to execute commands through a malicious git repository.

GHSA-h6m2-r6h9-4c44 — BBOT's insufficient sanitization issues in gitdumper.py can lead to RCE

2026-10-02T16:28:04.997629+00:00

Affected: PyPI: bbot

### Summary

bbot's `gitdumper.py` insufficiently sanitises a `.git/config` file, leading to Remote Code Execution (RCE).

bbot's `gitdumper.py` can be made to consume a malicious `.git/index` file, leading to arbitrary file write which can be used to achieve Remote Code Execution (RCE).

### Impact

A user who uses bbot to scan a malicious webserver may have arbitrary code executed on their system.

PYSEC-2026-293 — BBOT's insufficient sanitization issues in gitdumper.py can lead to RCE

2026-10-02T16:28:04.997654+00:00

Affected: PyPI: bbot

### Summary

bbot's `gitdumper.py` insufficiently sanitises a `.git/config` file, leading to Remote Code Execution (RCE).

bbot's `gitdumper.py` can be made to consume a malicious `.git/index` file, leading to arbitrary file write which can be used to achieve Remote Code Execution (RCE).

### Impact

A user who uses bbot to scan a malicious webserver may have arbitrary code executed on their system.