← 返回地图破甲

浏览报告

仅含 CVE

47 份报告 · 本页赏金 $32,617 · 清除筛选

Self XSS in Tag name pattern field /<username>/<reponame>/settings/tag_protection/new跨站脚本GitHub低危—2024-04-15 RC Between GitHub's Repo Transfer REST API and updateTeamsRepository GraphQL Mutation Results in Covert and Persistent Admin Access Retention错误配置GitHub低危—2024-01-12 View Repo and Title of Any Private Check Run不安全的直接对象引用GitHub低危—2024-01-08 [PATs] Token with Read-Only permissions on Issues able to modify issue comments using content write permission访问控制GitHub低危—2024-01-03 Invite tokens have Insufficient entropy in GHES Management Console密码学缺陷GitHub低危—2024-01-12 GHES Management console EoP (editor to site admin)访问控制GitHub中危—2024-01-08 Bypassing Collaborator Restrictions: Retaining Admin Access Post-Repository Transfer访问控制GitHub低危—2024-03-15 Persistent Unauthorized Administrative Access on All Organization Repositories via RC in User Conversion to Organization身份认证GitHub低危—2024-03-15 [PATs] Ability to leak comments from issues without ANY "Issues" repo permissions by utilizing "Pull Request" permissions访问控制GitHub低危—2024-01-03 Git Reference Ambiguity in GitHub - Commit Smuggling, Account Takeover, and Remote Code Execution注入与走私GitHub低危—2023-11-29 Smuggling content in PR with refs/replace in GitHub注入与走私GitHub低危—2023-08-01 Authentication bypass on gist.github.com through SSH Certificates访问控制GitHub中危$10,0002023-04-20 Rogue collaborators and ambiguous branch names in GitHub业务逻辑GitHub未评级—2023-12-05 Improper handling of null bytes in GitHub Actions Runner allows an attacker to set arbitrary environment variables注入与走私GitHub低危—2023-03-09 Github app Privilege Escalation to Administrator/Owner of the Organization访问控制GitHub中危—2023-01-13 Github Apps can use Scoped-User-To-Server Tokens to Obtain Full Access to User's Projects in Project V2 GraphQL api访问控制GitHub中危—2023-01-26 Managing Pages访问控制GitHub低危—2022-12-22 Command injection in GitHub Actions ContainerStepHost注入与走私GitHub低危$4,0002022-11-03 Delimiter injection in GitHub Actions core.exportVariable错误配置GitHub低危$4,6172022-08-18 DoS via markdown API from unauthenticated user拒绝服务GitHub低危$4,0002022-12-13 [Git Gud] GitHub.com Svnbridge memcached deserialization vulnerability chain leading to Remote Code Execution代码执行GitHub低危—2022-11-16 CSRF protection bypass in GitHub Enterprise management console跨站请求伪造GitHub中危$10,0002022-04-13