GitHub Security Lab: Java (Maven): Use of insecure protocol to download/upload artifacts

This bug was reported directly to GitHub Security Lab...

GitHub Security Lab: Netty HTTP Response Splitting (CRLF Injection) due to disabled header validation

This bug was reported directly to GitHub Security Lab...

GitHub Security Lab: CodeQL query to detect insecure MaxLengthRequest values in ASP.NET applications

This bug was reported directly to GitHub Security Lab...

GitHub Security Lab: CodeQL query to detect pages with validationRequest disabled

This bug was reported directly to GitHub Security Lab...

GitHub Security Lab: Adds CodeQL query to check for insecure RequestValidationMode in ASP.NET

This bug was reported directly to GitHub Security Lab...

Exploit for CVE-2018-11776

GitHub Security Lab This is the main git repository of GitHu...

abeja-sdk (>=0.2.0rc1 <=1.1.0rc1), abejacli (>=1.0.2 <=1.0.2rc1) +816 more potentially affected by CVE-2019-11324 via urllib3 (>=1.10.2 <=1.24.1)

urllib3 PYPI version =1.10.2, =0.2.0rc1, =1.0.2, =0.18.0.3, =0.5.0, =0.70.0, =0.0.1, =0.5.0, =1.1.0rc6, =0.8.0, =0.0.2, =1.1.2 and more Source cves: CVE-2019-11324 Source advisory: OSV:GHSA-MH33-7RRQ-662W...

Cross-origin brute-forcing of Github SAML and 2FA recovery codes

Yesterday while reading my Twitter stream I found this interesting article about downloading GitHub SSO bypass codes. Same as Yasin Soliman I was invited to a Github pre-release of the organisation SAML single sign-on SSO private program. And same as him I found an issue in the same endpoint. So ...