31502 matches found
CVE-2026-3136 Google Cloud Build Comment Control Bypass
An improper authorization vulnerability in GitHub Trigger Comment Control in Google Cloud Build prior to 2026-1-26 allows a remote attacker to execute arbitrary code in the build environment. This vulnerability was patched on 26 January 2026, and no customer action is needed...
CVE-2026-3136
CVE-2026-3136 describes an improper authorization vulnerability in GitHub Trigger Comment Control within Google Cloud Build. Affected component: Trigger Comment Control in Google Cloud Build (prior to 2026-01-26). Root cause: improper authorization allows a remote attacker to execute arbitrary co...
GHSA-RX3G-MVC3-QFJF
creationtimestamp| type| source ---|---|--- 2026-03-03 00:40:08+00:00| seen| https://gist.github.com/alon710/7ac7ac6833d08e598a54fcec635175e4...
Google Cloud Build 安全漏洞
Google Cloud Build is a fully managed CI/CD platform provided by Google, Inc. Versions of Google Cloud Build prior to version 2026-1-26 contained security vulnerabilities. These vulnerabilities were due to improper authorization in the GitHub Trigger Comment Control mechanism, which could allow...
PT-2026-22755
An improper authorization vulnerability in GitHub Trigger Comment Control in Google Cloud Build prior to 2026-1-26 allows a remote attacker to execute arbitrary code in the build environment. This vulnerability was patched on 26 January 2026, and no customer action is needed...
GHSA-MW96-CPMX-2VGC vulnerabilities
Vulnerabilities for packages: vitess, langfuse, vite, nextcloud-server...
Microsoft GitHub Copilot for JetBrains Command Injection Vulnerability
Microsoft GitHub Copilot for JetBrains is an AI programming assistant plugin from Microsoft USA that can be installed in various IDEs produced by JetBrains. A command injection vulnerability exists in Microsoft GitHub Copilot for JetBrains. The vulnerability stems from the application failing to...
Uncontrolled Recursion
Overview Affected versions of this package are vulnerable to Uncontrolled Recursion in the FunctionPushPop. An attacker can cause excessive resource consumption and application instability by triggering deep or infinite recursion through crafted input to the affected process. Remediation There is...
GHSA-V52C-386H-88MC
creationtimestamp| type| source ---|---|--- 2026-03-01 08:10:22+00:00| seen| https://gist.github.com/alon710/8ab283edb74cdc48bd86d05f78d0166b...
GHSA-XF7R-HGR6-V32P
creationtimestamp| type| source ---|---|--- 2026-03-01 07:40:22+00:00| seen| https://gist.github.com/alon710/4e7c76effa1548ba67f0464733eb7344...
GHSA-XFX2-PRG5-JQ3G
creationtimestamp| type| source ---|---|--- 2026-03-01 07:10:22+00:00| seen| https://gist.github.com/alon710/748a43a550acf66c2103297189dfb986 2026-03-01 07:30:03+00:00| seen| https://bsky.app/profile/flarestart.bsky.social/post/3mfy7s5omvb24...
CVE-2026-28415
creationtimestamp| type| source ---|---|--- 2026-03-01 04:10:22+00:00| seen| https://gist.github.com/alon710/794157ac4402be5b97d405f38441e2cb 2026-03-01 04:25:33+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3mfxvi7zur4c2 2026-03-01...
GHSA-H3H8-3V2V-RG7M
creationtimestamp| type| source ---|---|--- 2026-03-01 01:10:21+00:00| seen| https://gist.github.com/alon710/b9cbc8bb91819a5e8479c60ca815f5c4...
GHSA-RFJG-6M84-CRJ2
creationtimestamp| type| source ---|---|--- 2026-02-28 09:10:10+00:00| seen| https://gist.github.com/alon710/e6e1d06f45ead4fd6adc1a03157a349c...
GHSA-FPG4-JHQR-589C
creationtimestamp| type| source ---|---|--- 2026-02-28 08:10:11+00:00| seen| https://gist.github.com/alon710/c9a9aad02e1c4d2d715228e3279389cd...
GHSA-945P-3JHM-6RCP
creationtimestamp| type| source ---|---|--- 2026-02-28 03:40:10+00:00| seen| https://gist.github.com/alon710/43a4ce973e7deb9cb22c759bda6c4252...
GHSA-5C6J-R48X-RMVQ
creationtimestamp| type| source ---|---|--- 2026-02-28 03:10:11+00:00| seen| https://gist.github.com/alon710/d1eb861b7784463c434753842ee96c85 2026-04-03 15:44:39+00:00| seen| https://gist.github.com/kbellioum/2aaedb76430c4e5fc2f81d1185d752b6 2026-04-21 11:56:50+00:00| seen|...
Exploit for CVE-2024-9999
ExploitRank - Exploit Intelligence Engine EIE v1.0.0 !Pyt...