35848 matches found
CVE-2026-39371
References https://nvd.nist.gov/vuln/detail/CVE-2026-39371 https://github.com/redwoodjs/sdk/security/advisories/GHSA-x8rx-789c-2pxq...
GitHub-gato
Gato Github Attack TOolkit Gato, or GitHub Attack Toolkit, is an enumeration and attack tool that allows both blue teamers and offensive security practitioners to evaluate the blast radius of a compromised personal access token within a GitHub organization. The tool also allows searching for and...
jakeajames-CVE-2021-30955
This repository does not have a README...
cve-2026-31431
CVE-2026-31431 Copy Fail Test This repository contains a workflow file for GitHub Actions to test whether the action runner is affected by CVE-2026-31431. You can do the test by yourself, just create a repository by this template and trigger the test.yml workflow manually remember to change the o...
GHSA-MM27-MWQ9-FR5G GitHub CLI allows attestation verification bypass through unescaped regex metacharacters
Summary A security vulnerability has been identified in GitHub CLI that could allow attestation verification bypass when using gh attestation verify with --signer-repo or --signer-workflow flags. GitHub CLI builds the certificate matcher from these flag values without escaping regex metacharacter...
GitHub CLI allows attestation verification bypass through unescaped regex metacharacters
Summary A security vulnerability has been identified in GitHub CLI that could allow attestation verification bypass when using gh attestation verify with --signer-repo or --signer-workflow flags. GitHub CLI builds the certificate matcher from these flag values without escaping regex metacharacter...
EUVD-2026-54222
GitHub CLI allows attestation verification bypass through unescaped regex metacharacters...
GHSA-4FJG-2H4Q-FWG3 GitHub CLI allows path traversal through unescaped request URL components
Summary A path traversal vulnerability has been identified in the GitHub CLI where some HTTP request URLs, REST API calls in particular, were built without properly escaping their variable path components. A value containing URL path metacharacters can alter the request path and cause gh to addre...
GitHub CLI allows path traversal through unescaped request URL components
Summary A path traversal vulnerability has been identified in the GitHub CLI where some HTTP request URLs, REST API calls in particular, were built without properly escaping their variable path components. A value containing URL path metacharacters can alter the request path and cause gh to addre...
EUVD-2026-54213
GitHub CLI allows path traversal through unescaped request URL components...
GHSA-CG6R-MPGC-H9MM GitHub CLI partially discloses authentication tokens in `gh auth status` output
Summary A security vulnerability has been identified in GitHub CLI where gh auth status could potentially print a portion of the authentication token in plaintext, depending on the lexical structure of the token. Affected users: - Authenticated users who ran gh auth status without the --show-toke...
EUVD-2026-54212
GitHub CLI partially discloses authentication tokens in gh auth status output...
cve-2026-0013-exploit
This repository does not have a README...
My-CVE
This repository does not have a README...
actions-secrets
SecureStack Secrets Analysis GitHub Action A GitHub Action that analyses your source code for secrets, credentials, API keys, server and database hostnames/URLS, and a lot more! When you add this to GitHub Actions we will analyze your source code to make sure there is no sensitive data in your...
JAKEYLOGGER
JAKEYLOGGER A great and stronge keylogger How to install 'git clone https://github.com/SOHEILTNT/JAKEYLOGGER.git'...
IPSpinner
🔁 IPSpinner IPSpinner is a local proxy which can be used to redirect all incoming requests through different chosen providers. The purpose is to create a pass-through proxy that rotates the source IP address of each request. As an example, running a bruteforce operation through IPSpinner will hel...
unauthscout
UnauthScout UnauthScout is a CLI tool for unauthenticated OSINT reconnaissance on public developer platforms such as GitHub and GitLab. It standardizes the collection of publicly available user data using a consistent interface and normalized JSON output contracts. Problem Statement Public...