https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 15:35:29 +0000 https://cve.radiocsirt.org/vuln/cnvd-2016-10738 cnvd-2016-10738 https://cve.radiocsirt.org/vuln/cnvd-2016-10738 https://cve.radiocsirt.org/vuln/euvd-2026-96084 EUVD-2026-96084 https://cve.radiocsirt.org/vuln/euvd-2026-96084 https://cve.radiocsirt.org/vuln/fkie_cve-2015-8968 <p>git-fastclone before 1.0.1 permits arbitrary shell command execution from .gitmodules. If an attacker can instruct a user to run a recursive clone from a repository they control, they can get a client to run an arbitrary shell command. Alternately, if an attacker can MITM an unencrypted git clone, they could exploit this. The ext command will be run if the repository is recursively cloned or if submodules are updated. This attack works when cloning both local and remote repositories.</p> <p>git-fastclone before 1.0.1 permits arbitrary shell command execution from .gitmodules. If an attacker can instruct a user to run a recursive clone from a repository they control, they can get a client to run an arbitrary shell command. Alternately, if an attacker can MITM an unencrypted git clone, they could exploit this. The ext command will be run if the repository is recursively cloned or if submodules are updated. This attack works when cloning both local and remote repositories.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2015-8968 https://cve.radiocsirt.org/vuln/ghsa-8gg6-3r63-25m8 <p><strong>Affected:</strong> RubyGems: git-fastclone</p> <p>git-fastclone before 1.0.1 permits arbitrary shell command execution from .gitmodules. If an attacker can instruct a user to run a recursive clone from a repository they control, they can get a client to run an arbitrary shell command. Alternately, if an attacker can MITM an unencrypted git clone, they could exploit this. The ext command will be run if the repository is recursively cloned or if submodules are updated. This attack works when cloning both local and remote repositories.</p> <p><strong>Affected:</strong> RubyGems: git-fastclone</p> <p>git-fastclone before 1.0.1 permits arbitrary shell command execution from .gitmodules. If an attacker can instruct a user to run a recursive clone from a repository they control, they can get a client to run an arbitrary shell command. Alternately, if an attacker can MITM an unencrypted git clone, they could exploit this. The ext command will be run if the repository is recursively cloned or if submodules are updated. This attack works when cloning both local and remote repositories.</p> https://cve.radiocsirt.org/vuln/ghsa-8gg6-3r63-25m8 https://cve.radiocsirt.org/vuln/gsd-2015-8968 gsd-2015-8968 https://cve.radiocsirt.org/vuln/gsd-2015-8968