35847 matches found
gha-lab-f894926966
Automated research artifact — not the upstream project. This repository is a disposable lab built by an automated harness for a master's thesis at Université Laval on reproducing published GitHub Actions workflow vulnerabilities. It is a verbatim snapshot of astronomer/dag-factory at commit...
gha-lab-2f775f277c
Automated research artifact — not the upstream project. This repository is a disposable lab built by an automated harness for a master's thesis at Université Laval on reproducing published GitHub Actions workflow vulnerabilities. It is a verbatim snapshot of spotipy-dev/spotipy at commit...
CVE-2024-39700-PoC
CVE-2024-39700 Proof of Concept Repositories created using this template with test option include update-integration-tests.yml workflow which has an RCE vulnerability. PoC PR: https://github.com/LOURC0D3/CVE-2024-39700-PoC/pull/2 Commit Action Result:...
CVE-2020-36109-POC
CVE-2020-36109-POC Repository moved here:https://github.com/sunn1day/CVE-2020-36109-POC...
gha-lab-ba8e0c4217
Automated research artifact — not the upstream project. This repository is a disposable lab built by an automated harness for a master's thesis at Université Laval on reproducing published GitHub Actions workflow vulnerabilities. It is a verbatim snapshot of litestar-org/litestar at commit...
GuardModel
GuardModel Block malicious AI models in your pipeline with one line of YAML. GuardModel is a GitHub Action that automatically scans ML model files for malicious code, vulnerabilities, and security risks in CI/CD pipelines. It blocks dangerous models before they reach production by detecting pickl...
Partial-deobfuscated-sc-from-HackingTeam-Malware.-
This repository does not have a README...
agentic-workflow-injection
Agentic workflow injection: fixtures and a coverage comparison Reproducible vulnerable/fixed fixtures for the class of bug published as CVE-2026-44246 nnU-Net, agentic workflow injection, CVSS 7.2, CWE-1427, plus the measured output of three detectors against them. It exists because there was...
gha-lab-b1fe4918c0
Automated research artifact — not the upstream project. This repository is a disposable lab built by an automated harness for a master's thesis at Université Laval on reproducing published GitHub Actions workflow vulnerabilities. It is a verbatim snapshot of AdeptLanguage/Adept at commit...
gh-hijack-runner
gh-hijack-runner A python script to create a fake GitHub runner and hijack pipeline jobs to leak CI/CD secrets. Discover more details in the following blogpost: https://www.synacktiv.com/publications/hijacking-github-runners-to-compromise-the-organization Exploitation If you can obtain a...
sast-scan-action
Offensive360 SAST Scan — GitHub Action Run a full Offensive360 static application security scan SAST on every push or pull request. Deep taint and data-flow analysis across 60+ languages, results as SARIF for the GitHub code scanning tab, and a severity gate for your pipeline. Free for open sourc...
gha-lab-becf103a54
Automated research artifact — not the upstream project. This repository is a disposable lab built by an automated harness for a master's thesis at Université Laval on reproducing published GitHub Actions workflow vulnerabilities. It is a verbatim snapshot of wazuh/wazuh at commit...
gha-lab-23db52563c
Automated research artifact — not the upstream project. This repository is a disposable lab built by an automated harness for a master's thesis at Université Laval on reproducing published GitHub Actions workflow vulnerabilities. It is a verbatim snapshot of nrwl/nx at commit...
gha-lab-d9fd584b12
Automated research artifact — not the upstream project. This repository is a disposable lab built by an automated harness for a master's thesis at Université Laval on reproducing published GitHub Actions workflow vulnerabilities. It is a verbatim snapshot of DIYgod/RSSHub at commit...
gha-lab-6ab39df295
Automated research artifact — not the upstream project. This repository is a disposable lab built by an automated harness for a master's thesis at Université Laval on reproducing published GitHub Actions workflow vulnerabilities. It is a verbatim snapshot of espressif/arduino-esp32 at commit...
gha-lab-40e23db109
Automated research artifact — not the upstream project. This repository is a disposable lab built by an automated harness for a master's thesis at Université Laval on reproducing published GitHub Actions workflow vulnerabilities. It is a verbatim snapshot of gradio-app/gradio at commit...
gha-lab-ee08e207a8
Automated research artifact — not the upstream project. This repository is a disposable lab built by an automated harness for a master's thesis at Université Laval on reproducing published GitHub Actions workflow vulnerabilities. It is a verbatim snapshot of gradio-app/gradio at commit...
CVE-Ubiquiti
CVE-Ubiquiti Ubiquiti UniFi Security Vulnerabilities This repository contains information and resources related to the following Ubiquiti UniFi security vulnerabilities: CVE-2026-77542 CVE-2026-77543 CVE-2026-77545 CVE-2026-77550 CVE-2026-77551 CVE-2026-77552 CVE-2026-77553 CVE-2026-77554...
CVE-2026-31431_Kernel_Checker
For Free Internet Servers: curl -fsSL https://raw.githubusercontent.com/ShahaB108/CVE-2026-31431KernelChecker/main/kernelcheck.sh | bash For Iran servers: curl -fsSL https://raw.githubusercontent.com/ShahaB108/CVE-2026-31431KernelChecker/main/irkernelupdate.sh | bash...