CVE-2022-36804-PoC-Exploit

CVE-2022-36804-PoC-Exploit A somewhat reliable PoC exploit for CVE-2022-36804 BitBucket Critical Command Injection. This attack generally requires public repos to be enabled, however session cookies are also compatible with this exploit. Note: this exploit includes automatic repo detection which ...

Exploit for Argument Injection in Atlassian Bitbucket

Original Project https://github.com/BenHays142/CVE-2022-3680...

Exploit for Argument Injection in Atlassian Bitbucket

CVE-2022-36804-PoC-Exploit A somewhat reliable PoC exploit for...

Exploit for Argument Injection in Atlassian Bitbucket

CVE-2022-36804-PoC-Exploit A somewhat reliable PoC exploit for...

gitea -- multiple vulnerabilities

The Gitea Team reports for release 1.11.6: Fix missing authorization check on pull for public repos of private/limited org 11656 11683 Use session for retrieving org teams 11438 11439...

gitea -- multiple vulnerabilities

The Gitea Team reports: Hide credentials when submitting migration Never allow an empty password to validate Prevent redirect to Host Hide public repos owned by private orgs...