支持本站 — 捐款将帮助我们持续运营

目标: 1000 元，已筹: 1000 元

100.0%
立即捐款
获取后续新漏洞提醒登录后订阅
一、 漏洞 CVE-2024-32002 基础信息
漏洞信息
对漏洞内容有疑问？看看神龙的深度分析是否有帮助！
查看神龙十问 ↗

尽管我们使用了先进的大模型技术，但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性，但请您根据实际情况进行核实和判断。

Vulnerability Title
Git's recursive clones on case-insensitive filesystems that support symlinks are susceptible to Remote Code Execution
来源: 美国国家漏洞数据库 NVD
Vulnerability Description
Git is a revision control system. Prior to versions 2.45.1, 2.44.1, 2.43.4, 2.42.2, 2.41.1, 2.40.2, and 2.39.4, repositories with submodules can be crafted in a way that exploits a bug in Git whereby it can be fooled into writing files not into the submodule's worktree but into a `.git/` directory. This allows writing a hook that will be executed while the clone operation is still running, giving the user no opportunity to inspect the code that is being executed. The problem has been patched in versions 2.45.1, 2.44.1, 2.43.4, 2.42.2, 2.41.1, 2.40.2, and 2.39.4. If symbolic link support is disabled in Git (e.g. via `git config --global core.symlinks false`), the described attack won't work. As always, it is best to avoid cloning repositories from untrusted sources.
来源: 美国国家漏洞数据库 NVD
CVSS Information
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
来源: 美国国家漏洞数据库 NVD
Vulnerability Type
对路径名的限制不恰当(路径遍历)
来源: 美国国家漏洞数据库 NVD
Vulnerability Title
Microsoft Visual Studio 安全漏洞
来源: 中国国家信息安全漏洞库 CNNVD
Vulnerability Description
Microsoft Visual Studio是美国微软（Microsoft）公司的一款开发工具套件系列产品，也是一个基本完整的开发工具集，它包括了整个软件生命周期中所需要的大部分工具。 Microsoft Visual Studio存在安全漏洞的相关信息，请随时关注CNNVD或厂商公告。
来源: 中国国家信息安全漏洞库 CNNVD
CVSS Information
N/A
来源: 中国国家信息安全漏洞库 CNNVD
Vulnerability Type
N/A
来源: 中国国家信息安全漏洞库 CNNVD
受影响产品
厂商产品影响版本CPE订阅
gitgit = 2.45.0 -
二、漏洞 CVE-2024-32002 的公开POC
#POC 描述源链接神龙链接
1Nonehttps://github.com/Disseminator/CVE-2024-32002POC详情
2A submodule for exploiting CVE-2024-32002 vulnerability.https://github.com/markuta/hookyPOC详情
3Exploit PoC for CVE-2024-32002https://github.com/amalmurali47/git_rcePOC详情
4Hook for the PoC for exploiting CVE-2024-32002https://github.com/amalmurali47/hookPOC详情
5local poc for CVE-2024-32002https://github.com/M507/CVE-2024-32002POC详情
6CVE-2024-32002 RCE PoChttps://github.com/safebuffer/CVE-2024-32002POC详情
7Nonehttps://github.com/10cks/CVE-2024-32002-POCPOC详情
8Nonehttps://github.com/10cks/CVE-2024-32002-hulkPOC详情
9Nonehttps://github.com/10cks/CVE-2024-32002-submodPOC详情
10Nonehttps://github.com/10cks/CVE-2024-32002-smashPOC详情
11Nonehttps://github.com/10cks/CVE-2024-32002-linux-hulkPOC详情
12Nonehttps://github.com/10cks/CVE-2024-32002-linux-submodPOC详情
13Nonehttps://github.com/10cks/CVE-2024-32002-linux-smashPOC详情
14Nonehttps://github.com/aitorcastel/poc_CVE-2024-32002POC详情
15Nonehttps://github.com/aitorcastel/poc_CVE-2024-32002_submodulePOC详情
16CVE-2024-32002-hookhttps://github.com/10cks/hookPOC详情
17Nonehttps://github.com/jweny/CVE-2024-32002_HOOKPOC详情
18Nonehttps://github.com/jweny/CVE-2024-32002_EXPPOC详情
19Nonehttps://github.com/CrackerCat/CVE-2024-32002_EXPPOC详情
20Nonehttps://github.com/KiranKumarK20/CVE-2024-32002POC详情
21Nonehttps://github.com/jerrydotlam/cve-2024-32002-1POC详情
22Nonehttps://github.com/jerrydotlam/cve-2024-32002-2POC详情
23Nonehttps://github.com/jerrydotlam/cve-2024-32002-3POC详情
24Nonehttps://github.com/1mxml/CVE-2024-32002-pocPOC详情
25CVE-2024-32002 hook POChttps://github.com/Roronoawjd/hookPOC详情
26Nonehttps://github.com/JakobTheDev/cve-2024-32002-submodule-rcePOC详情
27Nonehttps://github.com/JakobTheDev/cve-2024-32002-poc-rcePOC详情
28CVE-2024-32002 POChttps://github.com/Roronoawjd/git_rcePOC详情
29Este script demuestra cómo explotar la vulnerabilidad CVE-2024-32002 para obtener una reverse shell, proporcionando acceso remoto al sistema afectado. Úselo con precaución en entornos controlados y solo con fines educativos o de pruebas de seguridad.https://github.com/JJoosh/CVE-2024-32002-Reverse-ShellPOC详情
30Nonehttps://github.com/YuanlooSec/CVE-2024-32002-pocPOC详情
31Nonehttps://github.com/bfengj/CVE-2024-32002-hookPOC详情
32Nonehttps://github.com/ycdxsb/CVE-2024-32002-hulkPOC详情
33Nonehttps://github.com/ycdxsb/CVE-2024-32002-submodPOC详情
34Nonehttps://github.com/bfengj/CVE-2024-32002-ExploitPOC详情
35Repo for testing CVE-2024-32002https://github.com/vincepsh/CVE-2024-32002POC详情
36CVE-2024-32002-hookhttps://github.com/vincepsh/CVE-2024-32002-hookPOC详情
37Nonehttps://github.com/10cks/CVE-2024-32002-EXPPOC详情
38PoC Exploit for CVE-2024-32002https://github.com/WOOOOONG/CVE-2024-32002POC详情
39PoC Exploit for CVE-2024-32002https://github.com/WOOOOONG/hookPOC详情
40poc of git rce using cve-2024-32002https://github.com/fadhilthomas/poc-cve-2024-32002POC详情
41part of poc cve-2024-32002https://github.com/fadhilthomas/hookPOC详情
42A submodule to demonstrate CVE-2024-32002. Demonstrates arbitrary write into .git.https://github.com/JakobTheDev/cve-2024-32002-submodule-awPOC详情
43A POC for CVE-2024-32002 demonstrating arbitrary write into the .git directory.https://github.com/JakobTheDev/cve-2024-32002-poc-awPOC详情
44Nonehttps://github.com/markuta/CVE-2024-32002POC详情
45Nonehttps://github.com/Goplush/CVE-2024-32002-git-rcePOC详情
46Nonehttps://github.com/TanMolk/CVE-2024-32002-subPOC详情
47Nonehttps://github.com/TanMolk/CVE-2024-32002POC详情
48CVE-2024-32002wakuwakuhttps://github.com/AD-Appledog/CVE-2024-32002POC详情
49cve-2024-32002yahhhhttps://github.com/AD-Appledog/wakuwakuPOC详情
50https://www.cve.org/CVERecord?id=CVE-2024-32002https://github.com/tobelight/cve_2024_32002POC详情
51CVE-2024-32002 poc testhttps://github.com/431m/rcetestPOC详情
52nonehttps://github.com/Basyaact/CVE-2024-32002-PoC_ChinesePOC详情
53Nonehttps://github.com/alimuhammedkose/CVE-2024-32002-linux-smashPOC详情
54Nonehttps://github.com/Hector65432/cve-2024-32002-1POC详情
55Nonehttps://github.com/Hector65432/cve-2024-32002-2POC详情
56exploit for CVE-2024-32002https://github.com/bonnettheo/CVE-2024-32002POC详情
57Nonehttps://github.com/AmbroseCdMeng/CVE-2024-32002POC详情
58Nonehttps://github.com/AmbroseCdMeng/CVE-2024-32002-HookPOC详情
59Nonehttps://github.com/sysonlai/CVE-2024-32002-hookPOC详情
60Nonehttps://github.com/TSY244/CVE-2024-32002-git-rce-father-pocPOC详情
61Nonehttps://github.com/TSY244/CVE-2024-32002-git-rcePOC详情
62Nonehttps://github.com/blackninja23/CVE-2024-32002POC详情
63A Reverse shell generator for gitlab-shell vulnerability cve 2024-32002https://github.com/daemon-reconfig/CVE-2024-32002POC详情
64RCE through git recursive cloning. https://github.com/HexDoesRandomShit/CVE-2024-32002POC详情
65GIT RCE CVE-2024-32002https://github.com/charlesgargasson/CVE-2024-32002POC详情
66PoC of CVE-2024-32002 - Remote Code Execution while cloning special-crafted local repositorieshttps://github.com/NishanthAnand21/CVE-2024-32002-PoCPOC详情
67Just small script to exploit CVE-2024-32002https://github.com/tiyeume25112004/CVE-2024-32002POC详情
68Nonehttps://github.com/mprunet/cve-2024-32002-maliciousPOC详情
69Nonehttps://github.com/mprunet/cve-2024-32002-pullPOC详情
70Nonehttps://github.com/chrisWalker11/CVE-2024-32002POC详情
71RCE through git recursive cloning. https://github.com/h3xm4n/CVE-2024-32002POC详情
72adapting CVE-2024-32002 for running offline and locallyhttps://github.com/chrisWalker11/running-CVE-2024-32002-locally-for-tesingPOC详情
73POChttps://github.com/sanan2004/CVE-2024-32002POC详情
74Nonehttps://github.com/FlojBoj/CVE-2024-32002POC详情
75This is the main repository for CVE 2024-32002, and requires recursive cloning because it contains the submodels necessary for execution.https://github.com/JJoosh/CVE-2024-32002POC详情
76git clone rce CVE-2024-32002https://github.com/EQSTLab/git_rcePOC详情
77This is a demo for CVE-2024-32002 POChttps://github.com/Masamuneee/hookPOC详情
78This is a demo for CVE-2024-32002 POChttps://github.com/Masamuneee/CVE-2024-32002-POCPOC详情
79Proof of Concept for CVE-2024-32002https://github.com/th4s1s/CVE-2024-32002-PoCPOC详情
80hihihihaahttps://github.com/Julian-gmz/hook_CVE-2024-32002POC详情
81Nonehttps://github.com/grecosamuel/CVE-2024-32002POC详情
82CVE-2024-32002 是 Git 中的一个严重漏洞，允许攻击者在用户执行 git clone 操作时远程执行任意代码（RCE）。https://github.com/XiaomingX/CVE-2024-32002-pocPOC详情
83CVE-2024-32002 是 Git 中的一个严重漏洞，允许攻击者在用户执行 git clone 操作时远程执行任意代码（RCE）。https://github.com/XiaomingX/cve-2024-32002-pocPOC详情
84Just small script to exploit CVE-2024-32002https://github.com/SpycioKon/CVE-2024-32002POC详情
85An example of a repo that would make use of the CVE-2024-32002https://github.com/jolibb55/donaldPOC详情
86Nonehttps://github.com/Katherine-song/CVE-2024-32002POC详情
87Este script demuestra cómo explotar la vulnerabilidad CVE-2024-32002 para obtener una reverse shell, proporcionando acceso remoto al sistema afectado. Úselo con precaución en entornos controlados y solo con fines educativos o de pruebas de seguridad.https://github.com/YukaFake/CVE-2024-32002-Reverse-ShellPOC详情
88This is the main repository for CVE 2024-32002, and requires recursive cloning because it contains the submodels necessary for execution.https://github.com/YukaFake/CVE-2024-32002POC详情
89Repository for demonstrating CVE-2024-32002https://github.com/razenkovv/captainPOC详情
90Repository for demonstrating CVE-2024-32002 - 2https://github.com/razenkovv/hookPOC详情
91This repository contains a PoC for exploiting CVE-2024-32002, a vulnerability in Git that allows RCE during a git clone operation. By crafting repositories with submodules in a specific way, an attacker can exploit symlink handling on case-insensitive filesystems to write files into the .git/ directory, leading to the execution of malicious hooks.https://github.com/ashutosh0408/CVE-2024-32002POC详情
92This repository contains a PoC for exploiting CVE-2024-32002, a vulnerability in Git that allows RCE during a git clone operation. By crafting repositories with submodules in a specific way, an attacker can exploit symlink handling on case-insensitive filesystems to write files into the .git/ directory, leading to the execution of malicious hooks.https://github.com/ashutosh0408/Cve-2024-32002-pocPOC详情
93cve-2024-32002https://github.com/Dre4m017/fuzzyPOC详情
94Nonehttps://github.com/JoaoLeonello/cve-2024-32002-pocPOC详情
95Nonehttps://github.com/srakkk/cve-2024-32002-demoPOC详情
96Nonehttps://github.com/srakkk/cve-2024-32002-hookPOC详情
97Nonehttps://github.com/mystxcal/cve-2024-32002-demoPOC详情
98nonehttps://github.com/BasyacatX/CVE-2024-32002-PoC_ChinesePOC详情
99CVE-2024-32002 是 Git 中的一个严重漏洞，允许攻击者在用户执行 git clone 操作时远程执行任意代码（RCE）。https://github.com/BohemianHacks/CVE-2024-32002-pocPOC详情
100Submodule repo for Backup Exec CVE-2024-32002 exploithttps://github.com/DayDayDayDreaming/backup-exec-hookPOC详情
101Superproject repo for Backup Exec CVE-2024-32002 exploithttps://github.com/DayDayDayDreaming/backup-exec-cve-32002POC详情
AI 生成 POC高级

未找到公开 POC。

登录以生成 AI POC
三、漏洞 CVE-2024-32002 的情报信息
Please 登录 to view more intelligence information
四、漏洞 CVE-2024-32002 的评论

暂无评论

发表评论