1128 matches found
CVE-2023-7028
CVE-2023-7028 An issue has been discovered in GitLab CE/EE affecting all versions from 16.1 prior to 16.1.6, 16.2 prior to 16.2.9, 16.3 prior to 16.3.7, 16.4 prior to 16.4.5, 16.5 prior to 16.5.6, 16.6 prior to 16.6.4, and 16.7 prior to 16.7.2 in which user account password reset emails could be...
GitLab CE/EE <=19.1.7/19.2.5/19.3.1 - Arbitrary File Read
GitLab CE/EE contains an unauthenticated arbitrary file read. Workhorse, the reverse proxy in front of Rails, matches upload routes using EscapedPath and path.Clean without decoding percent sequences, while Puma decodes them before routing to Grape. Appending a trailing slash to commits or...
CVE-2021-22205
CVE-2021-22205 Description - POC for CVE-2021-22205: Gitlab CE/EE RCE 未授权远程代码执行漏洞 POC && EXP - create by antx at 2021-10-29. Detail - An issue has been discovered in GitLab CE/EE affecting all versions starting from 11.9. GitLab was not properly validating image files that were passed to a file...
CVE-2021-22205
CVE-2021-22205 GitLab fails to properly verify image files passed to the file parser, leading to command execution. An attacker can craft malicious requests to exploit this vulnerability and execute arbitrary commands on the target system, ultimately taking control of the GitLab server. Since mos...
gitlab-exploit
gitlab-exploit GitLab CVE-2023-7028 GitLab CVE-2023-7028 The vulnerability was caused by a bug in how GitLab handled email verification during password reset. An attacker could provide two email addresses during a password reset request, and the reset code would be sent to both addresses. This...
CVE-2021-22205
Vuln Impact An issue has been discovered in GitLab CE/EE affecting all versions starting from 11.9. GitLab was not properly validating image files that were passed to a file parser which resulted in a remote command execution. Vuln Product Gitlab CE/EE 13.10.3 Gitlab CE/EE 13.9.6 Gitlab CE/EE...
CVE-2021-22214
CVE-2021-22214 Description - POC for CVE-2021-22214: Gitlab CI Lint API未授权 SSRF漏洞 - create by antx at 2021-11-01. Detail - When requests to the internal network for webhooks are enabled, a server-side request forgery vulnerability in GitLab CE/EE affecting all versions starting from 10.5 was...
CVE-2021-22205
CVE-2021-22205 Affected versions: Gitlab CE/EE 13.10.3 Gitlab CE/EE 13.9.6 Gitlab CE/EE 13.8.8 Usage root@kitploit: python3 CVE-2021-22205.py target "curl \whoami.dnslog" Get csrf-token: Obtain the csrf-token via /users/signin, then use the previous CVE-2021-22205 POC to construct and execute an...
CVE-2023-2825-PoC
CVE-2023-2825-PoC Proof-of-concept for CVE-2023-2825, an arbitrary file read vulnerability in GitLab CE/EE 16.0.0. The script logs in with a valid GitLab account, creates the required public nested group structure, creates a public project, uploads an attachment, and uses the vulnerable upload pa...
gitlab_rce_cve-2022-2884
gitlabrcecve-2022-2884 This is a Python3 program that exploits GitLab authenticated RCE vulnerability known as CVE-2022-2884. DISCLAIMER This tool is intended for security engineers and appsec people for security assessments. Please use this tool responsibly. I do not take responsibility for the...
CVE-2023-2825
CVE-2023-2825 Unauthenticated Directory traversal leads to file read. Summary of the CVE An issue has been discovered in GitLab CE/EE affecting only version 16.0.0. An unauthenticated malicious user can use a path traversal vulnerability to read arbitrary files on the server when an attachment...
CVE-2021-22205
CVE-2021-22205 Preauth RCE via exiftool on Gitlab CE/EE Summary of the CVE GitLab uses ExifTool to scan every tiff/jpeg/jpg file to remove any tags that are not whitelisted. But because ExifTool doesn't use file extensions to determine filetype but it rather uses the content of the file, which...
CVE-2021-4191-EXPLOIT
CVE-2021-4191 - GitLab User Enumeration GitLab is a widely-used web-based DevOps lifecycle tool that offers a Git-repository manager with integrated features for continuous integration, issue tracking, code reviews, and more. The GraphQL API is a powerful interface that enables users to interact...
gitlab-RCE-11.4.7
gitlab-RCE-11.4.7 GitLab 11.4.7 CE RCE exploit with different reverse shells. CVE-2018-19571: https://nvd.nist.gov/vuln/detail/CVE-2018-19571 CVE-2018-19585: https://nvd.nist.gov/vuln/detail/CVE-2018-19585 Modification of the version from Sam Redmond and Tam Lai Yin in order to learn and practice...
Gitlab-CVE-2026-19478
CVE-2026-19478 — GitLab GraphQL @glintroduced 指令注入 GitLab CE/EE 中通过 GraphQL 指令实现的未认证远程代码注入 — 仅需一个 HTTP 请求即可删除任意公共项目 这是一个实战渗透测试实验环境，用于复现 CVE-2026-19478——GitLab GraphQL API 中的一个严重（CVSS 9.4）漏洞。@glintroduced 指令允许未认证攻击者在服务器端对象上执行任意 Ruby 方法——包括项目删除、数据外泄和所有权转移——全程无需任何认证。 该实验环境在 Docker 中运行一个真实存在漏洞的 GitLa...
CVE-2022-2992
CVE-2022-2992 Authenticated Remote Command Execution in Gitlab via GitHub import. A vulnerability in GitLab CE/EE affecting all versions from 11.10 before 15.1.6, all versions starting from 15.2 before 15.2.4, all versions starting from 15.3 before 15.3.2. allows an authenticated user to achieve...
CVE-2021-22205
Vuln Impact An issue has been discovered in GitLab CE/EE affecting all versions starting from 11.9. GitLab was not properly validating image files that were passed to a file parser which resulted in a remote command execution. Vuln Product Gitlab CE/EE 13.10.3 Gitlab CE/EE 13.9.6 Gitlab CE/EE...
CVE-2026-85706
CVE-2026-85706 — Lectura Arbitraria de Archivos sin Autenticación en GitLab Solo para pruebas de penetración autorizadas y operaciones de Red Team. El uso no autorizado constituye un delito penal. Consulte Aviso Legal. Descripción General CVE-2026-85706 es una vulnerabilidad de path traversal con...
CVE-2026-85706-gitlab-poc
CVE-2026-85706 Descripción Vulnerabilidad de lectura arbitraria de archivos sin autenticación en GitLab CE/EE CVE-2026-85706. Versiones afectadas: GitLab CE/EE 18.7 – 19.1.7 GitLab CE/EE 19.2.0 – 19.2.5 GitLab CE/EE 19.3.0 – 19.3.1 Versiones parcheadas: GitLab 19.1.8 GitLab 19.2.6 GitLab 19.3.2...