Docusaurus Gists Plugin < 4.0.0 - GitHub Personal Access Token Exposure

The Docusaurus gists plugin adds a page to your Docusaurus instance, displaying all public gists of a GitHub user. docusaurus-plugin-content-gists versions prior to 4.0.0 are vulnerable to exposing GitHub Personal Access Tokens in production build artifacts when passed through plugin configuratio...

gitlab_rce_cve-2022-2884

gitlabrcecve-2022-2884 Este es un programa Python3 que explota la vulnerabilidad de RCE autenticada de GitLab conocida como CVE-2022-2884. DESCARGO DE RESPONSABILIDAD Esta herramienta está destinada a ingenieros de seguridad y personal de appsec para evaluaciones de seguridad. Úsela de manera...

gimmepatz

😼 gimmePATz 😼 - Personal Access Token PAT recon tool Have you ever found a GitHub or a NPM personal access token PAT and wondered "Is this valid?" or "I wonder what a bad guy could do with this?" Well, if so, I've got the tool for you! Introducing gimmePatz, a comprehensive reconnaissance tool fo...

lightweight_static_analysis

Lightweight Static Analysis This repo contains the PoC code for a ShellCon 2019 talk, "Rolling Your Own: How to Write Custom, Lightweight Static Analysis Tools" slides. In a nutshell, this repo demonstrates a few concrete examples of how you can build some interesting static analyses using open...

backdoor-learning-resources

Recursos de Backdoor Learning Este repositorio de Github resume una lista de recursos de Backdoor Learning. Para más detalles y los criterios de categorización, consulte nuestro estudio. Haremos todo lo posible por mantener continuamente este repositorio de Github de forma mensual. ¿Por qué...

CVE-2024-4367_test

This project is used to test CVE-2024-4367, POC access address: https://j1nksc.github.io/CVE-2024-4367test/poc.pdf...

gha-lab-232af4821f

Automated research artifact — not the upstream project. This repository is a disposable lab built by an automated harness for a master's thesis at Université Laval on reproducing published GitHub Actions workflow vulnerabilities. It is a verbatim snapshot of BraveUX/for-the-badge at commit...

tko-subs

tko-subs This tool allows: To check whether a subdomain can be taken over because it has: a dangling CNAME pointing to a CMS provider Heroku, Github, Shopify, Amazon S3, Amazon CloudFront, etc. that can be taken over. a dangling CNAME pointing to a non-existent domain name one or more wrong/typoe...

CVE-2026-105767

Improper Neutralization of Special Elements used in an OS Command in the integrate-platform-docs composite GitHub Action of Chainguard Academy edu from commit 7375a80caabcc31c33ec90f29687ed78c13d16ff before commit fb0efb2537d326ab18c07d620875b8ed2a4b39f3 allows an actor who controls the projectid...

EUVD-2026-92780

Improper Neutralization of Special Elements used in an OS Command in the integrate-platform-docs composite GitHub Action of Chainguard Academy edu from commit 7375a80caabcc31c33ec90f29687ed78c13d16ff before commit fb0efb2537d326ab18c07d620875b8ed2a4b39f3 allows an actor who controls the projectid...

CVE-2026-105767 Chainguard Academy (edu) integrate-platform-docs composite action interpolates inputs into shell commands

Improper Neutralization of Special Elements used in an OS Command in the integrate-platform-docs composite GitHub Action of Chainguard Academy edu from commit 7375a80caabcc31c33ec90f29687ed78c13d16ff before commit fb0efb2537d326ab18c07d620875b8ed2a4b39f3 allows an actor who controls the projectid...

CVE-2026-105767

The integrate-platform-docs composite GitHub Action in Chainguard Academy (edu) is vulnerable to OS Command Injection (CWE-78). The issue arises because the project_id or storage_bucket inputs are interpolated directly into Bash gcloud storage cp commands using ${{ inputs.* }} expressions between...

CVE-2026-105767 Chainguard Academy (edu) integrate-platform-docs composite action interpolates inputs into shell commands

Improper Neutralization of Special Elements used in an OS Command in the integrate-platform-docs composite GitHub Action of Chainguard Academy edu from commit 7375a80caabcc31c33ec90f29687ed78c13d16ff before commit fb0efb2537d326ab18c07d620875b8ed2a4b39f3 allows an actor who controls the projectid...

CVE-2024-31819

Installation and Execution of the script 💻 Prerequisites Before starting, make sure you have the following tools installed on your machine: Python 3.x Git pip to manage Python dependencies Installation Steps 1. Clone the repository Use git to clone the repository: git clone...

ImageTragick_CVE-2023-34152

ImageTragickCVE-2023-34152 CVE-2023-34152 https://github.com/overgrowncarrot1/ImageTragickCVE-2023-34152/assets/78485709/5db0501a-1e7a-43d4-9a36-777f12d9e090...

CVE-2017-1000117-sl

CVE-2017-1000117-sl Experiment of CVE-2017-1000117 usage $ git clone --recursive https://github.com/ieee0824/CVE-2017-1000117-sl.git...

heisenberg-ssc-gha

Heisenberg Dependency Health Check GitHub Action Una guardia ligera para PRs en actualizaciones de dependencias. Escanea solo las dependencias nuevas o modificadas de tu archivo de bloqueo/manifiesto, obtiene señales de salud y riesgo deps.dev + heurísticas, marca publicaciones recientes, comenta...

dirtyc0w

dirtyc0w Checkout the Website for more details : https://dirtycow.ninja/ Wiki : https://github.com/h3x0v3rl0rd/dirtyc0w/wiki...

gha-lab-5511dc3f73

Automated research artifact — not the upstream project. This repository is a disposable lab built by an automated harness for a master's thesis at Université Laval on reproducing published GitHub Actions workflow vulnerabilities. It is a verbatim snapshot of CloudPirates-io/helm-charts at commit...

CVE-2026-74469

CVE-2026-7469 Donate Help maintain this project If you find this project useful, please consider supporting its ongoing maintenance through PayPal or ABA Mobile. ❤️ ១០% នៃការបរិច្ចាគរបស់អ្នក នឹងត្រូវបានបរិច្ចាគជូនមន្ទីរពេទ្យគន្ធបុប្ផា។ ❤️ Ten percent of every donation is contributed to Kantha Bopha...