比特币橙子Trader
比特币橙子Trader
卧槽，云安全服务商Wiz的研究团队披露了GitHub的一项高危远程代码执行（RCE）漏洞（CVE-2026-3854）。攻击者仅需利用基础的 git push 命令，即可绕过平台的安全沙箱，直接在GitHub的企业服务器（GHES）及云端主站的底层节点上执行任意代码，进而获取平台上数百万个跨租户代码仓库的读取权限。 目前GitHub已紧急部署修复，并要求企业客户立即升级至GHES 3.19.3及以上版本。
sagitz
sagitz @sagitz_ · 
We achieved Remote Code Execution on GitHub - and got access to millions of repositories belonging to other users and organizations 🤯 All it took was a single `git push` Here's how we did it (CVE-2026-3854) 🧵⬇️ https://t.co/CrnBRDoxL3
From X

Disclaimer: The above content reflects only the author's opinion and does not represent any stance of CoinNX, nor does it constitute any investment advice related to CoinNX.

0