CVE-2022-2185

CVE-2022-2185 wo ee cve-2022-2185 gitlab authenticated rce read: https://starlabs.sg/blog/2022/07-gitlab-project-import-rce-analysis-cve-2022-2185/ how to use First spawn a gitlab instance. Log in, create a group and project with a unique name. Create an access token. Edit these lines in main.go...

CVE-2023-7028

CVE-2023-7028 ⚠️ This exploit is for defensive purposes and should be used by cybersecurity professionals to identify possible vulnerable GitLab servers. Description CVE-2023-7028 - Account Takeover via Password Reset without user interactions in GitLab Community Edition and Enterprise Edition...

GitLabSniper

GitLabSniper CVE-2026-85706 — GitLab CE/EE unauthenticated arbitrary file read detect · public project enum · loot · interactive shell · subfinder/httpx pipeline Author: Yunus Emre Öztaş mitsec X: x.com/ynsmroztas GitHub: github.com/ynsmroztas Site: ynsmroztas.github.io Mail: [email protected]...

CVE-2021-22205

Vuln Impact An issue has been discovered in GitLab CE/EE affecting all versions starting from 11.9. GitLab was not properly validating image files that were passed to a file parser which resulted in a remote command execution. Vuln Product Gitlab CE/EE 13.10.3 Gitlab CE/EE 13.9.6 Gitlab CE/EE...

CVE-2026-85706_docker_exp

1. Pull docker git clone https://github.com/FlowerWitch/CVE-2026-85706dockerexp docker compose up -d 2. Write LFI test information docker exec gitlab-vuln bash -c 'echo "SECRET-CANARY-85706-%%%" /tmp/canary.txt' 3. Read and verify Bypass method 1: .json suffix curl -s -w "\nHTTP %httpcode\n" -X...

GHSA-7PQW-9J4J-H8Q3 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce-fips...

GHSA-M4GQ-X24J-JPMF vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce-fips...

GHSA-4W3W-2RP5-G8JM vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce-fips...

CVE-2026-83607 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce-fips...

GHSA-G84C-RXFJ-3J2C vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce-fips...

CVE-2026-83605 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce-fips...

CVE-2026-19693 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce-fips...

CVE-2026-76844 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce-fips...

GHSA-CG87-WMX4-V546 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce-fips...

GHSA-P3F5-W63M-MXPH vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce-fips...

GHSA-W2RR-34G9-RVRJ vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce-fips...

CVE-2025-23207 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce-fips...

cve-2026-85706

cve-2026-85706 Unauthentifiziertes beliebiges lokales Dateilesen in GitLab CE/EE. Betrifft 18.7–19.1.7, 19.2.0–19.2.5, 19.3.0–19.3.1. Behoben in 19.1.8 / 19.2.6 / 19.3.2 2026-09-10. CVSS 10.0, Berichten zufolge in freier Wildbahn ausgenutzt. Ursprünglicher Bericht von s3ntago, und dieses Repo ist...

CVE-2023-7028

CVE-2023-7028 | Account-Take-Over Gitlab Disclamer This code is a proof of concept of the vulnerability, I'm not pushing anyone to use it on gitlab instances they don't own. This tool has been developed for research and educational purposes only and I will not be held responsible for any use you...

CVE-2023-7028

CVE-2023-7028 Gitlab CVE-2023-7028: Account Takeover via Password Reset without user interactions A critical vulnerability in GitLab CE/EE CVE-2023-7028 can be easily exploited by attackers to reset GitLab user account passwords. While also vulnerable, users who have two-factor authentication...