Skip to content
Threat Feed
Subscribe

Tag

Code-Hosting

2 briefs RSS
medium advisory

Detection of PowerShell Downloads from Code Hosting Services

This detection identifies PowerShell activity using native cmdlets to fetch payloads from raw-content URLs on code hosting platforms, a technique frequently abused for stage-one payload delivery.

powershell staging initial-access code-hosting
1r 2t
critical advisory

Gitea Branch Protection Bypass via Pull Request Retargeting

An attacker with write access to a Gitea repository can bypass branch protection rules by exploiting a logic flaw, obtaining an 'official' approval on a pull request (PR) targeting an unprotected branch, then retargeting the PR to a protected branch, preserving the stale approval and leading to unauthorized code merges and privilege escalation.

Gitea branch-protection-bypass code-repository privilege-escalation persistence web-application vulnerability defense-evasion network +7
1r 7t