Super-Vulnerable-Org/compromised-action

PoC

Test repo: simulates CVE-2025-30066 style compromised GitHub Action (for security research/testing chainradar)

view exploit source poc_in_githubauthor Super-Vulnerable-Orgpublished 2026-05-14catalog poc_in_github
01

exploited CVEs (1)

Known CVEs related to this entry.

IDseverity exploitable
CVE-2025-30066UShigh8.6OT criticalKEV
tj-actions changed-files before 46 allows remote attackers to discover secrets by reading actions logs. (The tags v1 through v45.0.7 were affected on 2025-03-14 and 2025-03-15 beca…
scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.

Free scan