CoFeed

GitHub

Attacking browser extensions

Learn about browser extension security and secure your extensions with the help of CodeQL.

GitHub

Securing the open source supply chain: The essential role of CVEs

Vulnerability data has grown in volume and complexity over the past decade, but open source and programs like the Github Security Lab have h...

GitHub

From object transition to RCE in the Chrome renderer

In this post, I'll exploit CVE-2024-5830, a type confusion in Chrome that allows remote code execution (RCE) in the renderer sandbox of Chro...

GitHub

3 ways to get Remote Code Execution in Kafka UI

In this blog post, we'll explain how we discovered three critical vulnerabilities in Kafka UI and how they can be exploited.

GitHub

3 ways to get Remote Code Execution in Kafka UI

In this blog post, we'll explain how we discovered three critical vulnerabilities in Kafka UI and how they can be exploited.

GitHub

Attack of the clones: Getting RCE in Chrome’s renderer with duplicate object properties

In this post, I'll exploit CVE-2024-3833, an object corruption bug in v8, the Javascript engine of Chrome, that allows remote code execution...

GitHub

Execute commands by sending JSON? Learn how unsafe deserialization vulnerabilities work in Ruby projects

Can an attacker execute arbitrary commands on a remote server just by sending JSON? Yes, if the running code contains unsafe deserialization...

GitHub

CodeQL zero to hero part 3: Security research with CodeQL

Learn how to use CodeQL for security research and improve your security research workflow.

GitHub

Security research without ever leaving GitHub: From code scanning to CVE via Codespaces and private vulnerability reporting

This blog post is an in-depth walkthrough on how we perform security research leveraging GitHub features, including code scanning, CodeQL, a...

GitHub

Gaining kernel code execution on an MTE-enabled Pixel 8

In this post, I’ll look at CVE-2023-6241, a vulnerability in the Arm Mali GPU that allows a malicious app to gain arbitrary kernel code exec...

GitHub

GitHub and the Ekoparty 2023 Capture the Flag

The GitHub Security Lab teamed up with Ekoparty once again to create some challenges for its yearly Capture the Flag competition! The post G...

GitHub

Securing our home labs: Frigate code review

This blog post describes two linked vulnerabilities found in Frigate, an AI-powered security camera manager, that could have enabled an atta...

GitHub

Cueing up a calculator: an introduction to exploit development on Linux

Using CVE-2023-43641 as an example, I’ll explain how to develop an exploit for a memory corruption vulnerability on Linux.

GitHub

Securing our home labs: Home Assistant code review

The GitHub Security Lab examined the most popular open source software running on our home labs, with the aim of enhancing its security.

GitHub

Getting RCE in Chrome with incomplete object initialization in the Maglev compiler

In this post, I'll exploit CVE-2023-4069, a type confusion in Chrome that allows remote code execution (RCE) in the renderer sandbox of Chro...

GitHub

Coordinated Disclosure: 1-Click RCE on GNOME (CVE-2023-43641)

CVE-2023-43641 is a vulnerability in libcue, which can lead to code execution by downloading a file on GNOME.

GitHub

Getting RCE in Chrome with incorrect side effect in the JIT compiler

In this post, I'll exploit CVE-2023-3420, a type confusion in Chrome that allows remote code execution (RCE) in the renderer sandbox of Chro...

GitHub

The GitHub Security Lab’s journey to disclosing 500 CVEs in open source projects

The GitHub Security Lab audits open source projects for security vulnerabilities and helps maintainers fix them.

GitHub

mTLS: When certificate authentication is done wrong

In this post, we'll deep dive into some interesting attacks on mTLS authentication.

GitHub

Closing vulnerabilities in Decidim, a Ruby-based citizen participation platform

This blog post describes two security vulnerabilities in Decidim, a digital platform for citizen participation.

GitHub

Introduction to SELinux

SELinux is the most popular Linux Security Module used to isolate and protect system components from one another.

GitHub

New tool to secure your GitHub Actions

Introducing a new tool to monitor and control the permissions of the repository token for GitHub Actions.

GitHub

CodeQL zero to hero part 2: getting started with CodeQL

Learn the basics of CodeQL and how to use it for security research! In this blog, we will teach you how to leverage GitHub’s static analysis...