nuvola

nuvola nuvola with the lowercase n is a tool to dump and perform automatic and manual security analysis on AWS environments configurations and services using predefined, extensible and custom rules created using a simple Yaml syntax. The general idea behind this project is to create an abstracted...

ninjasworkout

Damn Vulnerable NodeJS Application Quick Start Download the Repo = run npm i Afer Installing all dependency just run the application node app.js or nodemon app.js ADDED BUGS Prototype Pollution ✅1 No SQL Injection ✅2 Cross site Scripting ✅3 Broken Access Control ✅4 Broken Session Management ✅5 We...

Attacker Used 4,837 Hijacked GitHub Accounts to Run a CI Secret Stealer in 1,806+ Repositories

Starting Tuesday, an attacker used stolen credentials for 4,837 GitHub accounts to plant a secret stealer in repositories those accounts could write to, according to Aikido Security, a security software company. The stealer is built to take the secrets and cloud credentials that a repository's CI...

layne

Layne Layne is a self-hosted GitHub App that centralizes security scanning across our repositories. Since we don't use commercial SAST/secrets scanning tools, nor we have access to GitHub Enterprise, it can get hard to maintain different GitHub Actions workflow files across different repositories...

CVE-2024-37051

CVE-2024-37051 Analysis Overview CVE-2024-37051 is a vulnerability found in JetBrains' IntelliJ-based IDEs, affecting the GitHub plugin. It allows unauthorized exposure of GitHub access tokens when a malicious pull request PR is loaded. Technical Details The vulnerability occurs during the...

CVE-2026-125123

The compose-lint Docker Compose security linter (version 0.31.0 ) is vulnerable to a command injection-like behavior via its argument parser. When a path is passed without a preceding -- separator, the parser writes rejected repository paths to stderr without sanitization. An attacker can supply ...

compose-lint: A committed symlink makes compose-lint quote a file from outside the project into its output

Impact Like Docker Compose, compose-lint follows symlinks when it reads a project's files. Unlike Compose, compose-lint up to 0.24.0 could then put the contents of a file from outside the project into its output, where the author of a pull request can read it. A pull request can commit a symlink,...

compose-lint: A pull request can make compose-lint quote a secret from a CI-generated `.env` into its findings

Impact Since 0.22.0, compose-lint fills in $VAR references from the .env beside the Compose file, as Compose does. The documentation says values under environment: are never resolved from a .env, "that is where secrets live". But image: values are resolved, and CL-0004 and CL-0019 quote the...

GHSA-JF3H-8JVX-VCRG compose-lint: A pull request can make compose-lint quote a secret from a CI-generated `.env` into its findings

Impact Since 0.22.0, compose-lint fills in $VAR references from the .env beside the Compose file, as Compose does. The documentation says values under environment: are never resolved from a .env, "that is where secrets live". But image: values are resolved, and CL-0004 and CL-0019 quote the...

CVE-2026-114134

A flaw was found in the Black GitHub Action. When configured to read project settings from a configuration file, the action fails to validate the specified version identifier. A remote attacker capable of submitting a pull request can supply a reference to external malicious code, leading to...

CVE-2026-118386

A flaw was found in Gitea. An authenticated user with read access can achieve arbitrary code execution and access sensitive repository credentials by submitting a pull request review that references an unverified commit containing malicious workflow definitions. Because the commit is not validate...

CVE-2026-118386

Workflows triggered by a pull request review were read from the commit named in the review's commitid, while the fork restrictions were decided by the reviewed pull request, and the commit was not checked to belong to that pull request. A user with read access to a repository could place a commit...

CVE-2026-119533 Gitea private pull request disclosure on project boards

Repository and organization project boards listed the pull requests that reference each issue on the board without checking whether the viewer can read them. When a private pull request mentions an issue on a board the viewer can open, the board revealed the private repository's path and the pull...

EUVD-2026-114806

Repository and organization project boards listed the pull requests that reference each issue on the board without checking whether the viewer can read them. When a private pull request mentions an issue on a board the viewer can open, the board revealed the private repository's path and the pull...

CVE-2026-119533

Gitea versions prior to 28.3.0 are vulnerable to an information disclosure flaw in project boards. The application fails to verify read permissions when listing pull requests associated with board issues. Consequently, an anonymous visitor viewing a public board can see metadata from private pull...

CVE-2026-119533 Gitea private pull request disclosure on project boards

Repository and organization project boards listed the pull requests that reference each issue on the board without checking whether the viewer can read them. When a private pull request mentions an issue on a board the viewer can open, the board revealed the private repository's path and the pull...

CVE-2026-118386 Gitea Actions fork workflow trust through pull request review commit

Workflows triggered by a pull request review were read from the commit named in the review's commitid, while the fork restrictions were decided by the reviewed pull request, and the commit was not checked to belong to that pull request. A user with read access to a repository could place a commit...

CVE-2026-118386 Gitea Actions fork workflow trust through pull request review commit

Workflows triggered by a pull request review were read from the commit named in the review's commitid, while the fork restrictions were decided by the reviewed pull request, and the commit was not checked to belong to that pull request. A user with read access to a repository could place a commit...

EUVD-2026-114789

Workflows triggered by a pull request review were read from the commit named in the review's commitid, while the fork restrictions were decided by the reviewed pull request, and the commit was not checked to belong to that pull request. A user with read access to a repository could place a commit...

CVE-2026-118386

A vulnerability in Gitea allows an authenticated user with read access to achieve arbitrary code execution and access sensitive credentials. The flaw exists because review-triggered workflows read from a commit_id provided in a pull request review without verifying that the commit belongs to that...