CVE-2021-22214

CVE-2021-22214 GitLab CI Lint API Unauthorized SSRF Vulnerability CVE-2021-22214 This article and the tool are for technical sharing only. Strictly prohibited for illegal use, otherwise all consequences shall be borne by the user. Usage help $ python3 gitlabssrf.py...

CVE-2023-7028

CVE-2023-7028 An issue has been discovered in GitLab CE/EE affecting all versions from 16.1 prior to 16.1.6, 16.2 prior to 16.2.9, 16.3 prior to 16.3.7, 16.4 prior to 16.4.5, 16.5 prior to 16.5.6, 16.6 prior to 16.6.4, and 16.7 prior to 16.7.2 in which user account password reset emails could be...

CVE-2021-4191_Exploits

CVE-2021-4191Exploits pip install python-graphql-client Usage: python3 gitlabenum.py --rurl http://10.0.0.6/api/graphql Copyrights: https://www.rapid7.com/blog/post/2022/03/03/cve-2021-4191-gitlab-graphql-api-user-enumeration-fixed/...

CVE-2018-18649

CVE-2018-18649 CVE-2018-18649 EXP For the EXP description, see: Gitlab Wiki API Remote Command Execution Vulnerability CVE-2018-18649...

CVE-2021-22204-Gitlab

Gitlab-Exiftool-RCE Original repos : https://github.com/CsEnox/Gitlab-Exiftool-RCE Creds to CsEnox. RCE Exploit for Gitlab 13.10.3 GitLab Workhorse will pass any file to ExifTool. The current bug is in the DjVu module of ExifTool. Anyone with the ability to upload an image that goes through the...

Fern Pattern Scanner

Fern Pattern Scanner Welcome to Fern's Pattern Scanner. This scanner scans through your suggested files and finds any patterns stated within the rules/rules.yaml using regex. Then a report is generated with all the findings. This project is used to showcase how a custom security scanner can be...

CVE-2025-27407

CVE-2025-27407 GitLab Podman Lab Minimal local-only lab for proving the GitLab Direct Transfer HTTP path reaches the vulnerable graphql-ruby introspection schema loader. The lab runs one vulnerable GitLab CE container; the PoC script starts its fake GitLab source server in-process only while...

SCMKit

SCMKit Description S ource C ode M anagement Attack Toolkit - SCMKit is a toolkit that can be used to attack SCM systems. SCMKit allows the user to specify the SCM system and attack module to use, along with specifying valid credentials username/password or API key to the respective SCM system...

CVE-2025-67202 vulnerabilities

Vulnerabilities for packages: commercial-gitlab-rails-ee-fips, commercial-gitlab-rails-ee...

CVE-2026-44476 vulnerabilities

Vulnerabilities for packages: commercial-gitlab-rails-ee-fips, commercial-gitlab-rails-ee...

GHSA-M6VC-F87M-CC2H vulnerabilities

Vulnerabilities for packages: commercial-gitlab-rails-ee-fips, commercial-gitlab-rails-ee...

GHSA-XV9C-MJW8-79GF vulnerabilities

Vulnerabilities for packages: commercial-gitlab-rails-ee-fips, commercial-gitlab-rails-ee...

Exploiting-GitLab-CVE-2023-7028

Penetration test targeting CVE-2023-7028...

CVE-2022-2992

CVE-2022-2992 Authenticated Remote Command Execution in Gitlab via GitHub import. A vulnerability in GitLab CE/EE affecting all versions from 11.10 before 15.1.6, all versions starting from 15.2 before 15.2.4, all versions starting from 15.3 before 15.3.2. allows an authenticated user to achieve...

gitlab-watchman

GitLab Watchman About GitLab Watchman GitLab Watchman is an application that uses the GitLab API to detect exposed secrets and personal data. It also enumerates the GitLab instance for any useful information. Features Secrets Detection It searches GitLab for internally shared projects and looks a...

GitLab-CVE-2023-7028

GitLab CVE-2023-7028 — Mock 16.6.0 Host-only CVE-2023-7028 CVSS 10.0: POST /users/password accepted useremail array — server found user by email0 but sent the same reset token to every address → attacker with [email protected] hijacks [email protected]. Affected: GitLab CE/EE 16.5.6,...

GhostStrike

HEAD Project 2 is LIVE: GhostStrike Fully automated Spring4Shell CVE-2022-22965 + GitLab RCE framework 100% written from scratch • Python • 2025 Features: • Auto listener nc/tmux Modular design spring4shell.py, payloads/ Colorized output + banner Ready for future exploits LFI-to-RCE, Confluence,...

cve-2026-85706-poc-exploit-gitlab

cve-2026-85706 Unauthenticated arbitrary local file read in GitLab CE/EE. Affects 18.7–19.1.7, 19.2.0–19.2.5, 19.3.0–19.3.1. Fixed in 19.1.8 / 19.2.6 / 19.3.2 2026-09-10. CVSS 10.0, reportedly exploited in the wild. Original report by s3ntago and this repo is just my writeup + PoC. disclaimer Thi...

dcsgonefwbsp

dcsgonefwbsp Getting started To make it easy for you to get started with GitLab, here's a list of recommended next steps. Already a pro? Just edit this README.md and make it your own. Want to make it easy? Use the template at the bottom! Add your files Create or upload files Add files using the...

GitLab CE/EE - GraphQL @gl_introduced Arbitrary Method Invocation

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.2 before 18.11.11, 19.0 before 19.0.8, 19.1 before 19.1.6, and 19.2 before 19.2.4 that under certain conditions could allow an unauthenticated user to remotely modify or delete public projects and user data via a GraphQ...