32152 matches found
PT-2025-34727
Name of the Vulnerable Software and Affected Versions: GitHub Enterprise Server versions prior to 3.18 GitHub Enterprise Server versions 3.14.17 GitHub Enterprise Server versions 3.15.12 GitHub Enterprise Server versions 3.16.8 GitHub Enterprise Server versions 3.17.5 Description: An improper...
github-workflows 安全漏洞
github-workflows is a shared reusable workflow for GitHub Actions for Kartverket individual developers. A security vulnerability exists in github-workflows that stems from a directory traversal in the downloadworkflow function in apiserver.py...
GitHub Enterprise Server 安全漏洞
GitHub Enterprise Server is an open source application from GitHub in the United States. It provides a platform for setting up your own GitHub instance as a virtual appliance, thus providing a scalable, easy-to-manage platform. A security vulnerability exists in GitHub Enterprise Server versions...
GHSA-5CMR-4PX5-23PC
creationtimestamp| type| source ---|---|--- 2025-08-25 21:59:34+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115091647432901046 2025-08-25 21:59:35+00:00| seen| https://bsky.app/profile/bluesky.awakari.com/post/3lxaypwc4jh2i...
GHSA-4GV9-MP8M-592R
creationtimestamp| type| source ---|---|--- 2025-08-25 16:46:41+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115090417265707541...
Remote Code Execution (RCE)
github.com/tnborg/panel is vulnerable to Remote Code Execution RCE. The vulnerability is due to improper path handling in the CleanPath middleware from the go-chi/chi package, which fails to process r.URL.Path, followed by flaws in backend login path exposure, which allows an attacker to bypass...
Linux Distros Unpatched Vulnerability : CVE-2016-2562
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The checkHTTP function in libraries/Config.class.php in phpMyAdmin 4.5.x before 4.5.5.1 does not verify X.509 certificates from api.github.com SSL servers, whic...
Linux Distros Unpatched Vulnerability : CVE-2015-3903
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - libraries/Config.class.php in phpMyAdmin 4.0.x before 4.0.10.10, 4.2.x before 4.2.13.3, 4.3.x before 4.3.13.1, and 4.4.x before 4.4.6.1 disables X.509 certifica...
CVE-2025-43960
creationtimestamp| type| source ---|---|--- 2025-08-23 15:08:15+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/48792...
GHSA-328Q-MJP3-HWMG vulnerabilities
Vulnerabilities for packages: openjdk...
GHSA-WPM9-MHXC-7HWJ vulnerabilities
Vulnerabilities for packages: openjdk...
Malicious code in github-socket-worker (npm)
The package communicates with a domain associated with malicious activity...
MAL-2025-41386 Malicious code in github-socket-worker (npm)
The package communicates with a domain associated with malicious activity...
GHSA-5269-8F5R-Q5C5 vulnerabilities
Vulnerabilities for packages: openjdk-21-openj9, openjdk-8-openj9, openjdk-11-openj9, openjdk-25-openj9, openjdk-26-openj9, openjdk-17-openj9...
GHSA-CMC3-3G59-RJPP vulnerabilities
Vulnerabilities for packages: openjdk-21-openj9, openjdk-8-openj9, openjdk-11-openj9, openjdk-25-openj9, openjdk-26-openj9, openjdk-17-openj9...
GHSA-33PW-H52R-5VPG vulnerabilities
Vulnerabilities for packages: openjdk-21-openj9, openjdk-8-openj9, openjdk-11-openj9, openjdk-25-openj9, openjdk-26-openj9, openjdk-17-openj9...
GHSA-M9WW-JJ36-FRJP vulnerabilities
Vulnerabilities for packages: openjdk-21-openj9, openjdk-8-openj9, openjdk-11-openj9, openjdk-25-openj9, openjdk-26-openj9, openjdk-17-openj9...
GHSA-FHMQ-H5FP-GQJW vulnerabilities
Vulnerabilities for packages: openjdk-21-openj9, openjdk-8-openj9, openjdk-11-openj9, openjdk-25-openj9, openjdk-26-openj9, openjdk-17-openj9...