Lucene search
+L

6 matches found

Kitploit
Kitploit
•added 2026/09/28 11:32 p.m.•13 views

gha-lab-232af4821f

자동화된 연구 산출물 — 상위 프로젝트가 아님. 이 저장소는 Université Laval의 석사 논문에서 게시된 GitHub Actions 워크플로우 취약점을 재현하기 위해 자동화된 하네스가 구축한 일회용 실험실입니다. 이는 커밋 409c1fda3477b8dd05f3289926e08d88edd5a6642021-07-20 시점의 BraveUX/for-the-badge를 그대로 스냅샷한 것이며, 해당 프로젝트의 자체 라이선스에 따라 재배포됩니다. 상위 프로젝트는 관여하지 않으며 , 결코 공격 대상이 아닙니다. 여기서 연구된 취약...

6AI score
SaveExploits0References4
NVD
NVD
•added 2022/12/26 8:15 p.m.•27 views

CVE-2021-4281

A vulnerability was found in Brave UX for-the-badge and classified as critical. Affected by this issue is some unknown functionality of the file .github/workflows/combine-prs.yml. The manipulation leads to os command injection. The name of the patch is 55b5a234c0fab935df5fb08365bc8fe9c37cf46b. It...

9.8CVSS0.01783EPSS
SaveExploits0References4
CVE
CVE
•added 2022/12/26 7:38 p.m.•68 views

CVE-2021-4281

CVE-2021-4281 affects Brave UX for-the-badge. The vulnerability involves manipulation of an unknown functionality in the file .github/workflows/combine-prs.yml, leading to OS command injection. A patch is named 55b5a234c0fab935df5fb08365bc8fe9c37cf46b, with recommendations to apply the fix. Conne...

9.8CVSS7.4AI score0.01783EPSS
SaveExploits0References4Affected Software1
Cvelist
Cvelist
•added 2022/12/26 7:38 p.m.•38 views

CVE-2021-4281 Brave UX for-the-badge combine-prs.yml os command injection

A vulnerability was found in Brave UX for-the-badge and classified as critical. Affected by this issue is some unknown functionality of the file .github/workflows/combine-prs.yml. The manipulation leads to os command injection. The name of the patch is 55b5a234c0fab935df5fb08365bc8fe9c37cf46b. It...

4.6CVSS10AI score0.01783EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2022/12/26 12:00 a.m.•16 views

PT-2022-11695 · Brave · Brave Ux

Name of the Vulnerable Software and Affected Versions: Brave UX for-the-badge affected versions not specified Description: A critical issue was found in Brave UX for-the-badge, affecting some unknown functionality of the file .github/workflows/combine-prs.yml. The manipulation leads to os command...

9.8CVSS5.5AI score0.01783EPSS
SaveExploits0References8
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/12/26 12:00 a.m.•5 views

CVE-2021-4281: Improper Neutralization of Special Elements used in an OS Command

A vulnerability was found in Brave UX for-the-badge and classified as critical. Affected by this issue is some unknown functionality of the file .github/workflows/combine-prs.yml. The manipulation leads to os command injection. The name of the patch is 55b5a234c0fab935df5fb08365bc8fe9c37cf46b. It...

9.8CVSS5.4AI score0.01783EPSS
SaveExploits0References2
Rows per page
Query Builder