CVE-2026-3854-PoC

CVE-2026-3854 PoC — ثغرة RCE في GitHub عبر حقن خيار الدفع X-Stat لأغراض تعليمية وأبحاث أمنية مرخصة فقط. لا تستخدم ضد أي نظام دون إذن كتابي صريح. نظرة عامة CVE-2026-3854 هي ثغرة تنفيذ تعليمات برمجية عن بُعد في خط أنابيب الدفع git في GitHub Enterprise Server و GitHub.com. عندما يقدم عميل خيارات الد...

ghe-push-option-rce-scanner

CVE-2026-3854 — GitHub Enterprise Server RCE عبر حقن خيارات الدفع نظرة عامة تحييد غير صحيح لقيم خيارات الدفع في GHE. يمكن للمهاجم الذي يملك صلاحية الدفع push تحقيق تنفيذ تعليمات برمجية عن بُعد RCE على المثيل. الحقل| القيمة ---|--- CVE| CVE-2026-3854 الشدة| حرجة المنتج| GitHub Enterprise Server CI...

Exploit for Command Injection in Github Enterprise_Server

CVE-2026-3854 - GitHub Enterprise Server that allowed an Remot...

Exploit for Command Injection in Github Enterprise_Server

CVE-2026-3854 — GitHub Enterprise Server RCE via Push Option I...

Exploit for Command Injection in Github Enterprise_Server

CVE-2026-3854 PoC — GitHub RCE via X-Stat Push Option Injectio...

CVE-2026-3854 Remote code execution via git push option injection in GitHub Enterprise Server

An improper neutralization of special elements vulnerability was identified in GitHub Enterprise Server that allowed an attacker with push access to a repository to achieve remote code execution on the instance. During a git push operation, user-supplied push option values were not properly...

CVE-2026-3854 Remote code execution via git push option injection in GitHub Enterprise Server

An improper neutralization of special elements vulnerability was identified in GitHub Enterprise Server that allowed an attacker with push access to a repository to achieve remote code execution on the instance. During a git push operation, user-supplied push option values were not properly...

CVE-2026-3854: Improper Neutralization of Special Elements used in a Command

An improper neutralization of special elements vulnerability was identified in GitHub Enterprise Server that allowed an attacker with push access to a repository to achieve remote code execution on the instance. During a git push operation, user-supplied push option values were not properly...

GitHub Enterprise Server 安全漏洞

GitHub Enterprise Server is an open-source application developed by GitHub in the United States. It provides a scalable and easy-to-manage platform by allowing users to set their GitHub instances as virtual devices. Vulnerabilities exist in versions 3.14.24, 3.15.19, 3.16.15, 3.17.12, 3.18.6, and...