Date archives: September 14, 2024

Management Console Editor Privilege Escalation to Root SSH Access in GitHub Enterprise Server via nomad template injection and audit-forward

GitHub disclosed a bug submitted by inspector-ambitious: https://hackerone.com/reports/2332623 - Bounty: $10000 [Source]

Privilege Escalation to Root SSH Access via Pre-Receive Hook Environment in GitHub Enterprise Server

GitHub disclosed a bug submitted by inspector-ambitious: https://hackerone.com/reports/2336236 - Bounty: $10000 [Source]

Management Console Editor Privilege Escalation to Root SSH Access in GitHub Enterprise Server via nomad template injection

GitHub disclosed a bug submitted by inspector-ambitious: https://hackerone.com/reports/2332551 - Bounty: $10000 [Source]

Management Console Editor Privilege Escalation to Root SSH Access in GitHub Enterprise Server via RCE in syslog-ng

GitHub disclosed a bug submitted by inspector-ambitious: https://hackerone.com/reports/2329466 - Bounty: $10000 [Source]