CVE-2022-36804-PoC-Exploit

CVE-2022-36804-PoC-Exploit A somewhat reliable PoC exploit for CVE-2022-36804 BitBucket Critical Command Injection. This attack generally requires public repos to be enabled, however session cookies are also compatible with this exploit. Note: this exploit includes automatic repo detection which ...

git-alerts v1.8.0

GitAlerts What problem does it solve? GitHub repositories created under any organization can be controlled by the GitHub administrators. However any repository created under an organization's user account is not controllable unless the organisation has adopted the GitHub enterprise-managed user E...

Exploit for Argument Injection in Atlassian Bitbucket

Original Project https://github.com/BenHays142/CVE-2022-3680...

Exploit for Argument Injection in Atlassian Bitbucket

CVE-2022-36804-PoC-Exploit A somewhat reliable PoC exploit for...

Exploit for Argument Injection in Atlassian Bitbucket

CVE-2022-36804-PoC-Exploit A somewhat reliable PoC exploit for...

gitea -- multiple vulnerabilities

The Gitea Team reports for release 1.11.6: Fix missing authorization check on pull for public repos of private/limited org 11656 11683 Use session for retrieving org teams 11438 11439...

gitea -- multiple vulnerabilities

The Gitea Team reports: Hide credentials when submitting migration Never allow an empty password to validate Prevent redirect to Host Hide public repos owned by private orgs...