32213 matches found
BBOT 安全漏洞
BBOT is a recursive Internet scanner open-sourced by Black Lantern Security. BBOT suffers from a security vulnerability that originates in the gitclone module, where a maliciously formatted git URL could lead to the disclosure of GitHub API keys to an attacker-controlled server...
PT-2025-41394
Name of the Vulnerable Software and Affected Versions BBOT affected versions not specified Description The git clone module in BBOT may allow an attacker to disclose a GitHub API key to a server they control by using a maliciously formatted git URL. The issue involves the potential exposure of th...
CVE-2025-61773
creationtimestamp| type| source ---|---|--- 2025-10-08 23:26:16+00:00| published-proof-of-concept| https://github.com/pyload/pyload/security/advisories/GHSA-cjjf-27cc-pvmv...
JLSEC-2025-2 Command injection in `withpasswd()` function in Registrator.jl
Impact If the clone URL returned by GitHub is malicious or can be injected using upstream vulnerabilities, a shell script injection can occur within the withpasswd function. This can then lead to a potential RCE. Patches Users should upgrade immediately to v1.9.5. All prior versions are vulnerabl...
JLSEC-2025-5 Lack of validation for user-provided fields in GitHub.jl
There is a lack of input validation for user-provided values in certain functions. In the GitHub.repo function, the user can provide any string for the reponame field. These inputs are not validated or safely encoded and are sent directly to the server. Impact This means a user can add path...
JLSEC-2025-3 Lack of validation for user-provided fields in GitForge.jl
Description There is a lack of input validation for user-provided values in certain functions. In the GitForge.getrepo function for GitHub, the user can provide any string for the owner and repo fields. These inputs are not validated or safely encoded and are sent directly to the server. Impact...
GHSA-XM96-38VJ-H28H
creationtimestamp| type| source ---|---|--- 2025-10-07 20:21:46+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115334742402730338...
completedPoCs
Enhanced PoC Dataset for Security Research This repository hos...
How a top bug bounty researcher got their start in security
As we kick off Cybersecurity Awareness Month, the GitHub Bug Bounty team is excited to spotlight one of the top performing security researchers who participates in the GitHub Security Bug Bounty Program, @xiridium! GitHub is dedicated to maintaining the security and reliability of the code that...
EUVD-2021-0202
Malware in sbrugna...
EUVD-2021-16062
Malware in sbrugna...
EUVD-2020-7274
Malware in sbrugna...
EUVD-2021-10002
Malware in sbrugna...
EUVD-2021-27172
Malware in sbrugna...
EUVD-2021-20632
Malware in sbrugna...
EUVD-2018-0192
Malware in sbrugna...
EUVD-2021-27067
Malware in sbrugna...
EUVD-2021-19580
Malware in sbrugna...