Snowflake GitHub Actions Flaw Lets Crafted Issues Trigger Command Injection
Cybersecurity researchers at Wiz have disclosed a new GitHub Actions workflow injection vulnerability in Snowflake’s public snowflakedb/snowflake-connector-net repository that it said could be exploited through a crafted GitHub issue to execute commands in a workflow containing internal Jira credentials.
The issue was present in .github/workflows/jira_issue.yml, which ran when a
Source: The Hacker News
Watchtower Attack Update. Hier die aktuellen Top 5 Attack-IPs, die auf doode.info klopfen. 193.32.162.135 — 974 requests (recent log) 89.167.35.212 — 447 requests (recent log) 80.94.95.211 — 198 requests (recent
Researcher Publishes GitLab RCE PoC Letting Authenticated Users Run Commands as Git Security researchers at depthfirst published working exploit code on July 24 for a GitLab flaw that GitLab patched six
Critical Unbound DNSSEC Validator Flaw Could Allow RCE via a Malicious DNS Zone Every release of the Unbound DNS resolver before 1.26.1 has a critical heap overflow in its DNSSEC