bbot

vulnerable: 1.0.0 ... 2.6.1.6915rc0 (625 versions)

BBOT's git_clone module could be abused to disclose a GitHub API key to an attacker controlled server with a malicious formatted git URL.

vulnerable: 2.7.0.6919rc0 ... 2.7.1.7212rc0 (36 versions)

BBOT's gitlab module could be abused to disclose a GitLab API key to an attacker controlled server with a malicious formatted git URL.

vulnerable: 1.0.0 ... 2.6.1.6915rc0 (625 versions)

BBOT's gitdumper module could be abused to execute commands through a malicious git repository.

vulnerable: 1.0.0 ... 2.6.1.6915rc0 (625 versions)

BBOT's unarchive module could be abused by supplying malicious archives files and when extracted can then perform an arbitrary file write, resulting in remote code execution.

vulnerable: 2.3.1 ... 2.8.4.7578rc0 (218 versions)

The unarchive internal module's archive extraction commands perform no code-level validation on extracted file paths, relying entirely on the behavior of external tools (e.g. GNU tar) which varies by platform. While CVE-2025-10284 addresse…

vulnerable: 2.0.0 ... 2.8.4.7578rc0 (387 versions)

The docker_pull module uses the realm parameter from a Docker registry's WWW-Authenticate response header as the authentication endpoint without validation. An attacker in a man-in-the-middle position between bbot and a Docker registry cou…

vulnerable: 2.0.0 ... 2.8.4.7578rc0 (387 versions)

The github_workflows module constructs local directory paths from user-controlled repository names without validating for symlinks. A local attacker sharing the scan directory can plant a symlink at the predictable output path, causing wor…

vulnerable: 2.1.0 ... 2.8.5 (334 versions)

The postman_download module uses the workspace name field from the Postman API to construct the local directory path without sanitization. If a malicious workspace has a name containing path traversal characters, pathlib resolves the path …