CVE-2021-22863 Improper access control in GitHub Enterprise Server leading to unauthorized changes to maintainer permissions on pull requests

An improper access control vulnerability was identified in the GitHub Enterprise Server GraphQL API that allowed authenticated users of the instance to modify the maintainer collaboration permission of a pull request without proper authorization. By exploiting this vulnerability, an attacker woul...

CVE-2021-22863

CVE-2021-22863 is an improper access control vulnerability in GitHub Enterprise Server’s GraphQL API. It allowed authenticated users to modify the maintainer collaboration permission on a pull request, potentially exposing head branches of repos where they are a maintainer. Affected versions span...

PT-2021-14899 · Gitlab · Gitlab

Name of the Vulnerable Software and Affected Versions: GitLab versions 13.0 and later Description: An issue has been discovered in GitLab where confidential issue titles were readable by an unauthorized user via branch logs. Recommendations: For GitLab versions 13.0 and later, consider restrictin...

GitLab 安全漏洞

GitLab is a Ruby on Rails-developed, self-hosted, Git version control system project repository application from the American company GitLab. The program can be used to access a project's file contents, commit history, bug lists, and more. A security vulnerability exists in GitLab versions after...

yeikos js.merge security vulnerability

yeikos js.merge is an application by the individual developers at Yeikos USA. It provides tools for merging js. A security vulnerability exists in yeikos js.merge. The vulnerability stems from the fact that all merges of related branches are susceptible to the prototype of this codebase. The...

CVE-2020-8625

BIND servers are vulnerable if they are running an affected version and are configured to use GSS-TSIG features. In a configuration which uses BIND's default settings the vulnerable code path is not exposed, but a server can be rendered vulnerable by explicitly setting valid values for the...

Debian: Security Advisory (DLA-2538-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Arbitrary Code Execution

git-big-picture before 1.0.0 mishandles ' characters in a branch name, leading to code execution...

git-big-picture code injection vulnerability

Git Big Ppicture is the Git Big Ppicture team of a Python based can be Git commit records for visual display of the software . A code injection vulnerability exists prior to version 1.0.0 of git-big-picture, which can be exploited to execute code because the program incorrectly handles characters...

CVE-2021-3028

git-big-picture before 1.0.0 mishandles ' characters in a branch name, leading to code execution...

DEBIAN-CVE-2021-3028

git-big-picture before 1.0.0 mishandles ' characters in a branch name, leading to code execution...

CVE-2021-3028

git-big-picture before 1.0.0 mishandles ' characters in a branch name, leading to code execution...

CVE-2021-3028

git-big-picture before 1.0.0 mishandles ' characters in a branch name, leading to code execution...

UBUNTU-CVE-2021-3028

git-big-picture before 1.0.0 mishandles ' characters in a branch name, leading to code execution...

Remote code execution

git-big-picture before 1.0.0 mishandles ' characters in a branch name, leading to code execution...

PYSEC-2021-15

git-big-picture before 1.0.0 mishandles ' characters in a branch name, leading to code execution...

PYSEC-2021-15

git-big-picture before 1.0.0 mishandles ' characters in a branch name, leading to code execution...

CVE-2021-3028

git-big-picture before 1.0.0 mishandles ' characters in a branch name, leading to code execution...

Git Big Ppicture 输入验证错误漏洞

Git Big Ppicture is the Git Big Ppicture team of a Python based can be Git commit records for visual display of the software . A code injection vulnerability exists prior to version 1.0.0 of git-big-picture, which can be exploited to execute code because the program incorrectly handles characters...

Multi Branch School Management System 3.5 - _Create Branch_ Stored XSS

Exploit Title: Multi Branch School Management System 3.5 - "Create Branch" Stored XSS Exploit Author: Kislay Kumar Date: 2020-12-21 Google Dork: N/A Vendor Homepage: https://www.ramomcoder.com/ Software Link: https://codecanyon.net/item/ramom-multi-branch-school-management-system/25182324 Affecte...