GitHub Security Lab
@GHSecurityLab
GitHub Security Lab’s mission is to inspire and enable the community to secure the open source software we all depend on.
قد يعجبك
Find the GitHub Security Lab now on LinkedIn, Mastodon and Bluesky! 👇
GHSL-2024-323: Denial of Service (DoS) in snapcraft securitylab.github.com/advisories/GHS…
GHSL-2024-296: Deserialization of untrusted data in Kykms securitylab.github.com/advisories/GHS…
GHSL-2024-273: ReDoS in remove_html_tags of Gradio securitylab.github.com/advisories/GHS…
Last year, I committed to uncovering critical vulnerabilities in Maven repositories. Now it’s time to share the findings: RCE in Sonatype Nexus, Cache Poisoning in JFrog Artifactory, and more! Read it all below 🧵
GHSL-2024-327: Poisoned Pipeline Execution (PPE) in Microsoft FluentUI securitylab.github.com/advisories/GHS…
GHSL-2024-254: Poisoned Pipeline Execution (PPE) in Amplification leading to potential acccount takeover securitylab.github.com/advisories/GHS…
How to secure your GitHub Actions workflows with CodeQL. Dive into this actionable supply chain security research from @pwntester . This work resulted in dozens of high impact supply chain findings and, most importantly, added CodeQL support for your GitHub workflows!…
Ever wanted to learn fuzzing?!?! 🐛 Me and some other folks at @pbrucla recently ran a project where we taught folks about the basics of fuzzing with Honggfuzz. 👀 Some fun activities inspired by the Fuzzing101 repo from the folks at @GHSecurityLab! 🤗 github.com/pbrucla/fuzzin…
GHSL-2024-303: Code execution in trusted context via a GitHub Action of Tribler securitylab.github.com/advisories/GHS…
GHSL-2024-173: Environment Variable injection in a Feign GitHub Actions workflow securitylab.github.com/advisories/GHS…
🎉 Excited to announce the launch of CodeQL Community Packs for Security teams and researchers! 🚀 Supercharge your code analysis with new Query, Model, and Library packs, to find more vulnerabilities, accelerate codebases audit, and secure code effortlessly.…
GHSL-2024-091_GHSL-2024-092: DNS rebinding attacks against Home-gallery - CVE-2024-53275, CVE-2024-53276 securitylab.github.com/advisories/GHS…
GHSL-2024-075_GHSL-2024-076: Stored Cross-Site Scripting (XSS) and Remote Code Execution (RCE) via Velocity Template Evaluation in Sonatype Nexus 2 securitylab.github.com/advisories/GHS…
GHSL-2024-072_GHSL-2024-074: Stored Cross-Site Scripting (XSS), Arbitrary File Upload, and Arbitrary File Read/Write via Path Traversal in Reposilite - CVE-2024-36115, CVE-2024-36116, CVE-2024-36117 securitylab.github.com/advisories/GHS…
A new free tier of GitHub Copilot in @code. ✅ 2,000 code completions per month 💬 50 chat messages per month 💫 Models like Claude 3.5 Sonnet or GPT-4o ♥️ More fun for you Check it out today! Oh yeah, and we passed 150M developers on GitHub 💅 github.blog/news-insights/…
🎉 You can now enable code scanning in your GitHub Actions workflow files! ✅ By opting-in to this feature, you can enhance the security of repositories using GitHub Actions. github.blog/changelog/2024…
United States الاتجاهات
- 1. #BornOfStarlightHeeseung 6,955 posts
- 2. Happy Birthday Charlie 70.1K posts
- 3. #tuesdayvibe 4,165 posts
- 4. Good Tuesday 35.8K posts
- 5. Sandy Hook 3,278 posts
- 6. Pentagon 79.8K posts
- 7. #PortfolioDay 3,925 posts
- 8. Shilo 2,545 posts
- 9. #NationalDessertDay N/A
- 10. Dissidia 7,562 posts
- 11. Monad 205K posts
- 12. Victory Tuesday 1,206 posts
- 13. Happy Heavenly 10.4K posts
- 14. Janet Mills 2,163 posts
- 15. Standard Time 3,157 posts
- 16. #NBA2K26 1,761 posts
- 17. Happy 32nd 11.4K posts
- 18. Larry Fink 6,496 posts
- 19. Time Magazine 20.9K posts
- 20. $MON 16.6K posts
قد يعجبك
-
Google VRP (Google Bug Hunters)
@GoogleVRP -
PortSwigger Research
@PortSwiggerRes -
publiclyDisclosed
@disclosedh1 -
Trend Zero Day Initiative
@thezdi -
Burp Suite
@Burp_Suite -
GitHub Security
@GitHubSecurity -
James Kettle
@albinowax -
PortSwigger
@PortSwigger -
ProjectDiscovery
@pdiscoveryio -
Orange Tsai 🍊
@orange_8361 -
sakura
@eternalsakura13 -
LiveOverflow 🔴
@LiveOverflow -
Suraj
@PwnFunction -
payloadartist
@payloadartist -
Maddie Stone
@maddiestone
Something went wrong.
Something went wrong.