1032 matches found
clusterfuzzlite
ClusterFuzzLite ClusterFuzzLite는 지속적인 퍼징 솔루션으로, 지속적 통합CI 워크플로의 일부로 실행되어 그 어느 때보다 빠르게 취약점을 찾아냅니다. 몇 줄의 코드만으로 GitHub 사용자는 ClusterFuzzLite를 워크플로에 통합하고 풀 리퀘스트를 퍼징하여 커밋되기 전에 버그를 잡을 수 있습니다. ClusterFuzzLite는 ClusterFuzz를 기반으로 합니다. 기능 코드 변경풀 리퀘스트 퍼징으로 버그가 배포되기 전에 신속하게 발견 크래시를 유발하는 테스트 케이스 다운로드 더 오래 실행되는...
layne
Layne Layneは、リポジトリ全体のセキュリティスキャンを一元化するセルフホスト型GitHub Appです。市販のSAST・シークレットスキャンツールを使用しておらず、GitHub Enterpriseにもアクセスできないため、特にリポジトリの数が増えるにつれて、異なるリポジトリ間で複数のGitHub Actionsワークフローファイルを維持管理することが難しくなります。そこで、Layneを一度インストールすれば、プルリクエストイベントをリッスンし、セキュリティツールをサーバー側で実行し、結果をネイティブなGitHub Check...
nuvola
nuvola nuvola with the lowercase n is a tool to dump and perform automatic and manual security analysis on AWS environments configurations and services using predefined, extensible and custom rules created using a simple Yaml syntax. The general idea behind this project is to create an abstracted...
ninjasworkout
Damn Vulnerable NodeJS Application Quick Start root@kitploit: Download the Repo = run npm i Afer Installing all dependency just run the application root@kitploit: node app.js or nodemon app.js ADDED BUGS Prototype Pollution ✅1 No SQL Injection ✅2 Cross site Scripting ✅3 Broken Access Control ✅4...
CVE-2024-37051
CVE-2024-37051 分析 概要 CVE-2024-37051 は、JetBrains の IntelliJ ベースの IDE に見つかった脆弱性で、GitHub プラグインに影響を与えます。悪意のあるプルリクエスト PR が読み込まれると、GitHub アクセストークンが不正に露出される可能性があります。 技術詳細 この脆弱性は、IDE 内で PR をレンダリングする際に発生します。悪意のある PR により、IDE が攻撃者の指定した URL に GitHub トークンを送信する可能性があります。パッチにはホスト検証が含まれており、トークンが認可された GitHub...
CVE-2026-53507
oasdiff-action , a GitHub Action that detects breaking changes in OpenAPI specs and posts reviews on pull requests, contained a flaw prior to version 0.0.51 where external $refs in the spec were resolved by default (allow-external-refs: true). On a fork pull request in a public repository, an att...
CVE-2026-52806
Gogs RCE — git rebase 인수 주입 CWE-88 Gogs라는 이름의 브랜치는 Git에서 위치 인수 대신 --exec 플래그로 해석되며, 리베이스 중 재생된 각 커밋 후에 sh -c 가 실행됩니다. 익스플로잇 작동 방식 1. 사전 점검 — 대상이 Gogs를 실행 중인지 확인하고, 정적 자산의 ?v= 매개변수를 통해 버전을 식별하며, 사용자 등록이 열려 있는지, 캡차로 보호되는지, 비활성화되었는지 확인합니다. 2. 인증 — 자격 증명이 제공되지 않으면 자동 등록캡차 없음을 시도하고, 캡차가 활성화된 경우 대상의 가입...
CVE-2026-55378
JS Recon is a JavaScript enumeration and SAST tool. From 1.2.1-beta.1 until 1.3.1-beta.2, the PR Branch Checker workflow in .github/workflows/prchecker.yml places github.headref and github.event.pullrequest.head.repo.fullname into BRANCHNAME and SOURCEREPO and interpolates those untrusted values...
CVE-2026-55378 JS Recon: Command injection in PR Branch Checker workflow via untrusted pull request context values
JS Recon is a JavaScript enumeration and SAST tool. From 1.2.1-beta.1 until 1.3.1-beta.2, the PR Branch Checker workflow in .github/workflows/prchecker.yml places github.headref and github.event.pullrequest.head.repo.fullname into BRANCHNAME and SOURCEREPO and interpolates those untrusted values...
CVE-2019-25766
A flaw was found in Renovate. During certain Go Modules update failure scenarios, temporary repository tokens are inadvertently leaked into pull request comments. A remote attacker able to view these comments could obtain the exposed tokens, leading to unauthorized access to repositories. This...
CVE-2026-71494
Infracost provides cloud cost intelligence for engineers, AI coding agents, and CI/CD. Prior to 0.10.45, internal/hcl/remotevariablesloader.go and related Terraform Cloud, remote-plan, and Terragrunt registry request paths can attach a configured Terraform Cloud or registry token to a destination...
CVE-2026-58439
A flaw was found in Gitea. This vulnerability allows an attacker to bypass branch protection by retargeting a Pull Request PR that has a stale 'official' approval flag. This could lead to unauthorized code being merged into a protected branch, compromising code integrity. Mitigation Mitigation fo...
CVE-2026-63187
Logto is the modern, open-source auth infrastructure for SaaS and AI apps. From 1.40.1 until 1.41.0, Logto's .github/workflows/commitlint.yml directly interpolated github.event.pullrequest.title into the Commitlint on PR title step's inline echo command before piping the title to npx commitlint. ...
CVE-2026-63187
Logto (open-source auth infrastructure) versions 1.40.1 through 1.41.0 contain an OS command injection in the .github/workflows/commitlint.yml workflow. The github.event.pull_request.title value was directly interpolated into an inline echo command before being piped to npx commitlint. A pull req...
CVE-2026-63187 Logto: OS command injection vulnerability exists in the Commitlint workflow
Logto is the modern, open-source auth infrastructure for SaaS and AI apps. From 1.40.1 until 1.41.0, Logto's .github/workflows/commitlint.yml directly interpolated github.event.pullrequest.title into the Commitlint on PR title step's inline echo command before piping the title to npx commitlint. ...
CVE-2019-25766
Renovate versions = 13.87.0 and = 19.38.6 leak temporary repository tokens into pull request comments during certain Go Modules update failure scenarios. The issue is fixed in version 19.38.7. Anyone able to view the affected pull request comments could obtain the exposed tokens...
CVE-2019-25766
Renovate (dependency update automation) versions >= 13.87.0 and
EUVD-2019-20202
Renovate versions = 13.87.0 and = 19.38.6 leak temporary repository tokens into pull request comments during certain Go Modules update failure scenarios. The issue is fixed in version 19.38.7. Anyone able to view the affected pull request comments could obtain the exposed tokens...
CVE-2019-25766 Renovate before 19.38.7 Credential Exposure via Go Modules
Renovate versions = 13.87.0 and = 19.38.6 leak temporary repository tokens into pull request comments during certain Go Modules update failure scenarios. The issue is fixed in version 19.38.7. Anyone able to view the affected pull request comments could obtain the exposed tokens...