Noam Dotan | writeups.xyz

Title	Vulnerabilities	Programs	Authors
How We Found Another GitHub Action Environment Injection Vulnerability in a Google Project	CI/CD RCE	Google (Orbit)	Noam Dotan
Novel Pipeline Vulnerability Discovered; Rust Found Vulnerable	Supply Chain Attack	GitHub Rust	Noam Dotan
Attackers Can Bypass GitHub Required Reviewers to Submit Malicious Code	Broken Authorization Logic Flaw	GitHub	Noam Dotan
Google & Apache Found Vulnerable to GitHub Environment Injection	Privilege Escalation CI/CD	Google Apache	Noam Dotan
Vulnerable GitHub Actions Workflows Part 2: Actions That Open the Door to CI/CD Pipeline Attacks	Privilege Escalation CI/CD	Undisclosed	Noam Dotan
Vulnerable GitHub Actions Workflows Part 1: Privilege Escalation Inside Your CI/CD Pipeline	Privilege Escalation CI/CD	GitHub	Noam Dotan

Page 1 of 1