← 返回地图破甲

浏览报告

仅含 CVE

47 份报告 · 本页赏金 $14,000 · 清除筛选

Able to bypass authorization logic and gain more access then intended业务逻辑GitHub低危—2026-07-15 GitHub user to server tokens can create issues in any public repository访问控制GitHub低危—2026-07-22 GitHub scoped user to server tokens can escape their installation访问控制GitHub中危—2026-07-29 OAuth redirect uri validation bypass for :proxima_first_party_sync apps开放重定向GitHub中危—2026-07-21 Cross-repository IDOR in `/settings/security_analysis/bypass_reviewers` allows unauthorized delegated bypass reviewer modification不安全的直接对象引用GitHub低危—2026-05-19 Add labels to arbitrary issues/prs via Memex Bulk Update to compromise github actions label gating不安全的直接对象引用GitHub低危—2026-08-25 Add labels to arbitrary issues/prs & compromise github actions label checks不安全的直接对象引用GitHub低危—2026-03-19 PATs without the required scope can leak issues访问控制GitHub低危—2026-03-19 Missing Access Control in MigrationFile allows attacker to upload files to any Migration不安全的直接对象引用GitHub中危—2026-03-05 Sample report: Denial of service信息泄露GitHub低危—2025-08-07 Arbitrary Read of Another Users private repository without Authorization不安全的直接对象引用GitHub中危$10,0002025-09-23 SAML Signature verification bypass allows logging into any user (with specific conditions)访问控制GitHub高危—2024-10-10 Information Leakage via Clicked Link in GitHub Repository (Fingerprinting)信息泄露GitHub低危$4,0002024-10-17 Access body and title of Internal Repo Issues in Projects信息泄露GitHub低危—2024-07-31 GitHub Apps can access suspended installations via scoped user-to-server tokens访问控制GitHub低危—2024-07-31 View private repository NWO of deploy key via internal LFS API访问控制GitHub低危—2024-07-23 Source Code and data exfiltration via Github Copilot代码执行GitHub低危—2024-08-19 RC Between GitHub's Repo Update REST API and updateTeamsRepository GraphQL Mutation Results in Covert and Persistent Admin Access Retention错误配置GitHub低危—2024-09-17 Privilege Escalation to Root SSH Access via Pre-Receive Hook Environment in GitHub Enterprise Server访问控制GitHub中危—2024-09-13 Management Console Editor Privilege Escalation to Root SSH Access in GitHub Enterprise Server via nomad template injection and audit-forward代码执行GitHub中危—2024-09-13 Management Console Editor Privilege Escalation to Root SSH Access in GitHub Enterprise Server via nomad template injection代码执行GitHub中危—2024-09-13 Management Console Editor Privilege Escalation to Root SSH Access in GitHub Enterprise Server via RCE in collectd代码执行GitHub中危—2024-09-17 Management Console Editor Privilege Escalation to Root SSH Access in GitHub Enterprise Server via RCE in syslog-ng代码执行GitHub中危—2024-09-13 Management Console Editor Privilege Escalation to Root SSH Access in GitHub Enterprise Server via RCE in ghe-update-check代码执行GitHub中危—2024-09-17 Management Console Editor Privilege Escalation to Root SSH Access in GitHub Enterprise Server via RCE in actions-console代码执行GitHub中危—2024-09-17