Lucene search

GitHub Code Execution Bug Fetches $18,000 Bounty

🗓️ 17 Mar 2017 09:04:00Reported by Chris BrookType

GitHub awarded $18,000 to a researcher for finding a code execution bug in its Enterprise management consol

Reporter	Title	Published	Views	Family All 99
Tenable Nessus	Apache Struts CVE-2018-11776 Results With No Namespace Possible Remote Code Execution (S2-057)	22 Aug 201800:00	–	nessus
Tenable Nessus	Cisco Unified Communication Manager Apache Struts RCE (CSCvm14042)	5 Sep 201800:00	–	nessus
Tenable Nessus	Apache Struts CVE-2018-11776 Results With No Namespace Remote Code Execution (S2-057) (remote)	23 Aug 201800:00	–	nessus
Tenable Nessus	Cisco Identity Services Engine Struts2 Namespace Vulnerability	31 Aug 201800:00	–	nessus
Tenable Nessus	Cisco Unified Communications Manager IM & Presence Service Apache Struts RCE (CSCvm14049)	5 Sep 201800:00	–	nessus
Tenable Nessus	MySQL Enterprise Monitor 3.4.x < 3.4.10 / 4.x < 4.0.7 / 8.x < 8.0.3 Multiple Vulnerabilities (Oct 2018 CPU)	24 Jul 202000:00	–	nessus
Tenable Nessus	Oracle Enterprise Manager Cloud Control (Jul 2020 CPU)	16 Jul 202000:00	–	nessus
0day.today	Apache Struts 2.x Remote Code Execution Vulnerability	24 Aug 201800:00	–	zdt
0day.today	Apache Struts 2.3 < 2.3.34 / 2.5 < 2.5.16 - Remote Code Execution (2) Exploit	28 Aug 201800:00	–	zdt
0day.today	Apache Struts 2.3 < 2.3.34 / 2.5 < 2.5.16 - Remote Code Execution (1) Exploit	28 Aug 201800:00	–	zdt

Source	Link
exablue	www.exablue.de/blog/2017-03-15-github-enterprise-remote-code-execution.html
ruby-doc	www.ruby-doc.org/core-2.2.2/Marshal.html
ruby-doc	www.ruby-doc.org/core-2.2.0/Marshal.html
bodypil	www.bodypil.de/ueber-uns.html
blog	www.blog.orange.tw/2017/01/bug-bounty-github-enterprise-sql-injection.html
bounty	www.bounty.github.com/researchers/iblue.html
github	www.github.com/blog/2302-bug-bounty-anniversary-promotion-bigger-bounties-in-january-and-february
bounty	www.bounty.github.com/
github	www.github.com/blog/2332-bug-bounty-third-anniversary-wrap-up

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

17 Mar 2017 09:00Current

8.8High risk

Vulners AI Score8.8

EPSS0.973