1794 matches found
Allstar Reviewbot has Authentication Bypass via Hard-coded Webhook Secret
A vulnerability in Allstar’s Reviewbot component caused inbound webhook requests to be validated against a hard-coded, shared secret: https://github.com/ossf/allstar/blob/294ae985cc2facd0918e8d820e4196021aa0b914/pkg/reviewbot/reviewbot.goL59 The value used for the secret token was compiled into t...
Use of Hard-coded Credentials
Overview Affected versions of this package are vulnerable to Use of Hard-coded Credentials via the reviewbot component. An attacker can gain unauthorized access to repository workflows by sending crafted webhook requests using a known, hard-coded secret. This allows triggering of automated review...
BBOT's git_clone.py can expose users' GitHub API keys to an attacker-controlled webserver
Summary Due to unsafe URL handling, bbot's gitclone.py can be made to leak a user's github.com API key to an attacker-controlled webserver. Impact A user who has placed their github.com API key in the configuration for any of the following modules: githubcodesearch githubworkflows gitlab gitclone...
GHSA-63WH-P5FX-H4VC BBOT's git_clone.py can expose users' GitHub API keys to an attacker-controlled webserver
Summary Due to unsafe URL handling, bbot's gitclone.py can be made to leak a user's github.com API key to an attacker-controlled webserver. Impact A user who has placed their github.com API key in the configuration for any of the following modules: githubcodesearch githubworkflows gitlab gitclone...
No Time to Waste: Embedding AI to Cut Noise and Reduce Risk
Artificial intelligence is reshaping cybersecurity on both sides of the battlefield. Cybercriminals are using AI-powered tools to accelerate and automate attacks at a scale defenders have never faced before. Security teams are overwhelmed by an explosion of vulnerability data, tool outputs, and...
EUVD-2017-14102
Malware in sbrugna...
EUVD-2021-1738
Malware in sbrugna...
EUVD-2009-1079
Malware in sbrugna...
EUVD-2021-0202
Malware in sbrugna...
EUVD-2018-0823
Malware in sbrugna...
EUVD-2025-25785
Malicious code in bioql PyPI...
EUVD-2024-37378
Malicious code in bioql PyPI...
EUVD-2025-14755
Malicious code in bioql PyPI...
EUVD-2025-6862
Malicious code in bioql PyPI...
EUVD-2023-59015
Malicious code in bioql PyPI...
EUVD-2024-3048
Malicious code in bioql PyPI...
EUVD-2025-10498
Malicious code in bioql PyPI...
EUVD-2023-1708
Malicious code in bioql PyPI...