35352 matches found
EUVD-2026-41145
An incorrect authorization vulnerability was identified in GitHub Enterprise Server that allowed a user-to-server token scoped to a GitHub App installation to perform certain write operations on public repositories outside the token's intended scope. This was possible because the authorization...
Incorrect Implementation of Authentication Algorithm
Overview Affected versions of this package are vulnerable to Incorrect Implementation of Authentication Algorithm in the authentication provider's team membership evaluation process. An attacker can gain unauthorized access to resources or permissions assigned to other teams within the same...
Incorrect Implementation of Authentication Algorithm
Overview Affected versions of this package are vulnerable to Incorrect Implementation of Authentication Algorithm in the authentication provider's team membership evaluation process. An attacker can gain unauthorized access to resources or permissions assigned to other teams within the same...
Incorrect Implementation of Authentication Algorithm
Overview Affected versions of this package are vulnerable to Incorrect Implementation of Authentication Algorithm in the authentication provider's team membership evaluation process. An attacker can gain unauthorized access to resources or permissions assigned to other teams within the same...
Incorrect Implementation of Authentication Algorithm
Overview Affected versions of this package are vulnerable to Incorrect Implementation of Authentication Algorithm in the authentication provider's team membership evaluation process. An attacker can gain unauthorized access to resources or permissions assigned to other teams within the same...
GHSA-4J6X-2764-M8GH Rancher has over-inclusive team membership expansion in GitHub App authentication provider
Impact A vulnerability has been identified within Rancher Manager in the GitHub App authentication provider. When evaluating permissions, the provider incorrectly expands user team memberships to include all teams within the associated GitHub organization, rather than restricting access to the...
Rancher has over-inclusive team membership expansion in GitHub App authentication provider
Impact A vulnerability has been identified within Rancher Manager in the GitHub App authentication provider. When evaluating permissions, the provider incorrectly expands user team memberships to include all teams within the associated GitHub organization, rather than restricting access to the...
EUVD-2026-40297
Rancher has over-inclusive team membership expansion in GitHub App authentication provider...
CVE-2026-49864
creationtimestamp| type| source ---|---|--- 2026-07-01 20:35:13+00:00| published-proof-of-concept| https://github.com/butlerx/wetty/security/advisories/GHSA-p26j-h7wj-r568...
CVE-2026-49986
creationtimestamp| type| source ---|---|--- 2026-07-01 20:35:11+00:00| published-proof-of-concept| https://github.com/cdeust/Cortex/security/advisories/GHSA-gvpp-v77h-5w8g...
GHSA-Q64V-9MH2-3XCQ vulnerabilities
Vulnerabilities for packages: firefox-esr...
GHSA-6H2Q-2X4R-5652 vulnerabilities
Vulnerabilities for packages: firefox-esr...
GHSA-X945-JM33-F3QV vulnerabilities
Vulnerabilities for packages: firefox-esr...
GHSA-P6J5-JRMM-J3W6 vulnerabilities
Vulnerabilities for packages: firefox-esr...
GHSA-R6WJ-XMGR-MG33 vulnerabilities
Vulnerabilities for packages: firefox-esr...
GHSA-H6XQ-J8XX-3FV4 vulnerabilities
Vulnerabilities for packages: firefox-esr...
Malicious code in twrap-tool (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9903cc9163ada9951dee4ee1f364648cac0e492df9a32582ad3ed8303d29231 twraptool/init.py defines two public functions, formatblock and aligncolumns, whose real behavior is to fetch a Python file from...
ExploitKnowdledgebase
poc2detect Defense-first pipeline that discovers GitHub proof...