← All credits
ahacker1
24 vulnerability records and advisories credit this contributor.
CVE-2026-3306
Improper authorization in GitHub Projects allows modification of issue and pull request metadata without repository write access
CVE-2026-1355
Missing Authorization Check in GitHub Enterprise Server Allows Unauthorized Uploads to Repository Migration Exports
CVE-2022-23738
Incomplete cache verification issue in GitHub Enterprise Server leading to exposure of private repo files
CVE-2022-23739
Incorrect authorization check in GitHub Enterprise Server leading to escalation of privileges in GraphQL API requests from GitHub Apps using scoped user-to-server tokens
CVE-2023-46646
Improper access control in all versions of GitHub Enterprise Server allows unauthorized users to view private repository names via the "Get a check run" API endpoint. This vulnerability did not allow unauthorized access to any repository content besides t
CVE-2024-8810
Privilege Management vulnerability was identified in GitHub Enterprise Server that allowed GitHub Apps to grant themselves write access
CVE-2024-7711
An Incorrect Authorization vulnerability was identified in GitHub Enterprise Server, allowing an attacker to update the title, assignees, and labels of any issue inside a public repository. This was only exploitable inside a public repository. This vulner
CVE-2024-1908
Improper Privilege Management vulnerability was identified in GitHub Enterprise Server that allowed Privilege Escalation
CVE-2023-6847
Improper Authentication in GitHub Enterprise Server leading to Authentication Bypass for Public Repository Data
CVE-2024-6395
GitHub Enterprise Server Information Disclosure Vulnerability Exposes Private Repository Names via Deploy Keys