31957 matches found
CVE-2025-10281 Insecure URL Handling in git_clone Leading to Leaked API Key
BBOT's gitclone module could be abused to disclose a GitHub API key to an attacker controlled server with a malicious formatted git URL...
CVE-2025-10281 Insecure URL Handling in git_clone Leading to Leaked API Key
BBOT's gitclone module could be abused to disclose a GitHub API key to an attacker controlled server with a malicious formatted git URL...
CVE-2025-10281
BBOT’s git_clone vulnerability stems from unsafe URL handling that can cause exposure of GitHub API keys to an attacker-controlled server when processing a specially crafted git URL. The CVE description and multiple advisories (Red Hat, GHSA, EUVD, OSV, NVD, CVELIST, and Snyk) consistently refere...
GHSA-MM7P-FCC7-PG87 vulnerabilities
Vulnerabilities for packages: jitsucom-jitsu...
BBOT 安全漏洞
BBOT is a recursive Internet scanner open-sourced by Black Lantern Security. BBOT suffers from a security vulnerability that originates in the gitclone module, where a maliciously formatted git URL could lead to the disclosure of GitHub API keys to an attacker-controlled server...
PT-2025-41394
Name of the Vulnerable Software and Affected Versions BBOT affected versions not specified Description The git clone module in BBOT may allow an attacker to disclose a GitHub API key to a server they control by using a maliciously formatted git URL. The issue involves the potential exposure of th...
CVE-2025-61773
creationtimestamp| type| source ---|---|--- 2025-10-08 23:26:16+00:00| published-proof-of-concept| https://github.com/pyload/pyload/security/advisories/GHSA-cjjf-27cc-pvmv...
JLSEC-2025-2 Command injection in `withpasswd()` function in Registrator.jl
Impact If the clone URL returned by GitHub is malicious or can be injected using upstream vulnerabilities, a shell script injection can occur within the withpasswd function. This can then lead to a potential RCE. Patches Users should upgrade immediately to v1.9.5. All prior versions are vulnerabl...
JLSEC-2025-5 Lack of validation for user-provided fields in GitHub.jl
There is a lack of input validation for user-provided values in certain functions. In the GitHub.repo function, the user can provide any string for the reponame field. These inputs are not validated or safely encoded and are sent directly to the server. Impact This means a user can add path...
JLSEC-2025-3 Lack of validation for user-provided fields in GitForge.jl
Description There is a lack of input validation for user-provided values in certain functions. In the GitForge.getrepo function for GitHub, the user can provide any string for the owner and repo fields. These inputs are not validated or safely encoded and are sent directly to the server. Impact...
GHSA-XM96-38VJ-H28H
creationtimestamp| type| source ---|---|--- 2025-10-07 20:21:46+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115334742402730338...
completedPoCs
Enhanced PoC Dataset for Security Research This repository hos...
How a top bug bounty researcher got their start in security
As we kick off Cybersecurity Awareness Month, the GitHub Bug Bounty team is excited to spotlight one of the top performing security researchers who participates in the GitHub Security Bug Bounty Program, @xiridium! GitHub is dedicated to maintaining the security and reliability of the code that...
EUVD-2020-7233
Malware in sbrugna...
EUVD-2021-27172
Malware in sbrugna...
EUVD-2020-2972
Malware in sbrugna...
EUVD-2021-20632
Malware in sbrugna...
EUVD-2021-16062
Malware in sbrugna...