35882 matches found
PT-2026-81860
Name of the Vulnerable Software and Affected Versions GitHub CLI gh versions 2.28.0 through 2.97.0 Description The local listener created by the gh codespace ports forward command binds to all available network interfaces by default. This allows services within a Codespace to be accessible via th...
PT-2026-82021
Pipelines-as-Code GitHub App token request can be redirected via untrusted Enterprise Host header in github.com/openshift-pipelines/pipelines-as-code...
JetBrains TeamCity < 2020.2.1 Multiple Vulnerabilities
The version of JetBrains TeamCity installed on the remote host is prior to 2020.2.1. It is, therefore, affected by multiple vulnerabilities: - In JetBrains TeamCity before 2020.2.1, a user could get access to the GitHub access token of another user. CVE-2021-25774 - In JetBrains TeamCity before...
CVE-2026-55477
creationtimestamp| type| source ---|---|--- 2026-08-24 22:35:03+00:00| published-proof-of-concept| https://github.com/MHSanaei/3x-ui/security/advisories/GHSA-jm48-m3rr-9hgg 2026-08-25 12:31:18+00:00| seen| https://gist.github.com/alon710/782a9d0e0a33092c615e2219299ab6e3...
GHSA-4PH6-MJV7-3FQ6
creationtimestamp| type| source ---|---|--- 2026-08-24 21:31:53+00:00| seen| https://gist.github.com/alon710/420bec7ea2d482fe6de8ec25ca5555ea...
CVE-2026-54049
creationtimestamp| type| source ---|---|--- 2026-08-24 20:35:02+00:00| published-proof-of-concept| https://github.com/sakaiproject/sakai/security/advisories/GHSA-w2x5-gv52-9ccv 2026-10-02 17:20:38+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mwvv24trmq24 2026-10-02...
GHSA-3GJW-F78C-VVPW
creationtimestamp| type| source ---|---|--- 2026-08-24 20:31:44+00:00| seen| https://gist.github.com/alon710/0cbc434c452f0a0b70aa20e1c14d18f0...
CVE-2026-57863
creationtimestamp| type| source ---|---|--- 2026-08-24 19:33:13+00:00| seen| https://gist.github.com/sermikr0/cc58727e6a777b6ea1104e923803a0ba 2026-08-25 14:00:20+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mtvy4xujeb27...
GHSA-63CW-57P8-FM3P
creationtimestamp| type| source ---|---|--- 2026-08-24 15:42:13+00:00| seen| https://gist.github.com/rahulXs/33981c9d91701115bb44ac406396c782...
CVE-2026-76847 act 0.2.81 through 0.2.89 Missing Authorization in the Artifacts V4 Backend
act starts an HTTP Artifacts V4 backend whenever a workflow uses actions/upload-artifact@v4 or actions/download-artifact@v4. The control-plane RPCs of that backend, including CreateArtifact, GetSignedArtifactURL, ListArtifacts, FinalizeArtifact and DeleteArtifact, accept a caller-supplied...
CVE-2026-76847
act starts an HTTP Artifacts V4 backend whenever a workflow uses actions/upload-artifact@v4 or actions/download-artifact@v4. The control-plane RPCs of that backend, including CreateArtifact, GetSignedArtifactURL, ListArtifacts, FinalizeArtifact and DeleteArtifact, accept a caller-supplied...
CVE-2025-37654
creationtimestamp| type| source ---|---|--- 2026-08-24 08:00:03+00:00| seen| https://t.me/GithubRedTeam/99424 2026-08-24 21:00:05+00:00| seen| Telegram/0Lzh2WjQOWsuTydOWekHZzZKDiwWQ3jcpMbWJHlr9UUA 2026-08-25 00:00:08+00:00| published-proof-of-concept|...
CVE-2026-52394
creationtimestamp| type| source ---|---|--- 2026-08-23 01:15:28+00:00| seen| https://gist.github.com/CAPTAIN1275/48a0b7d67d0e58cb05c607e0d715447c 2026-10-13 17:32:33+00:00| seen| https://infosec.exchange/users/cve/statuses/117434794183240104 2026-10-13 20:09:08+00:00| seen|...
GHSA-RRMM-9V76-H3P4
creationtimestamp| type| source ---|---|--- 2026-08-22 19:00:06+00:00| seen| https://t.me/GithubRedTeam/98676 2026-08-23 00:00:11+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/98676...
GHSA-3P69-M8GG-FWMF
creationtimestamp| type| source ---|---|--- 2026-08-22 14:51:29+00:00| seen| https://gist.github.com/sl4x0/f22a1e5c94ebe3c82b21e85010eb6e32...
GHSA-R5PQ-6CHH-J3XP
creationtimestamp| type| source ---|---|--- 2026-08-22 12:31:57+00:00| seen| https://gist.github.com/alon710/31e18879d387aa16512f599cadd2f7a1...
GHSA-5VF6-JRQR-78FJ
creationtimestamp| type| source ---|---|--- 2026-08-22 11:31:40+00:00| seen| https://gist.github.com/alon710/d92488505ce17a941a9b8015b1dda8cf...
CVE-2026-63466
creationtimestamp| type| source ---|---|--- 2026-08-22 10:31:15+00:00| seen| https://gist.github.com/alon710/2b3f0356900578390c8450f33458882e...