Exploit for CVE-2026-110264

PoC CVE-2026-110264 — GitLab Org-mode / Onigmo Unauthenticated...

CLSA-2026-1792801476 ruby: Fix of 3 CVEs

CVE-2026-110264: regexp: fix out-of-bounds repeat stack access in Onigmo by rejecting patterns whose range-repeat or null-check count overflows the internal ID type - CVE-2026-93577, CVE-2026-97229: regexp: fix wrapped jump offsets in Onigmo by checking the quantifier expansion size without...

CLSA-2026-1792800480 ruby: Fix of 3 CVEs

CVE-2026-110264: regexp: fix out-of-bounds repeat stack access in Onigmo by rejecting patterns whose range-repeat or null-check count overflows the internal ID type - CVE-2026-93577, CVE-2026-97229: regexp: fix wrapped jump offsets in Onigmo by checking the quantifier expansion size without...

CLSA-2026-1792795786 Fix CVE(s): CVE-2026-110264, CVE-2026-93577, CVE-2026-97229

SECURITY UPDATE: out-of-bounds repeat stack access in Onigmo - debian/patches/CVE-2026-110264.patch: reject patterns whose range-repeat or null-check count overflows the internal ID type in include/ruby/onigmo.h, regcomp.c, regerror.c. - CVE-2026-110264 SECURITY UPDATE: wrapped jump offsets in...

Ruby Fixes Three Regex Engine Bugs Responsible for Four Critical GitLab RCE Flaws

Ruby has released versions 4.0.9, 3.4.12, and 3.3.13 to fix three bugs in Onigmo, the regular expression engine built into the language. The bugs lie behind four critical security flaws that GitLab patched over the past month. GitLab found that a specially crafted pattern could corrupt memory whi...

Exploit for CVE-2026-110264

CVE-2026-110264 — reproduction lab GitLab CE/EE, CVSS 10.0,...

Exploit for CVE-2026-110264

gitlab-firing-range Authorized security-research firing range...

Exploit for CVE-2026-110264

gitlab-firing-range Authorized security-research firing range...

Exploit for CVE-2026-110264

CVE-2026-110264 — GitLab Onigmo Regex Repeat-ID Overflow !se...

Exploit for CVE-2026-110264

gitlab-onigmo-check !statushttps://img.shields.io/badge/st...

Exploit for CVE-2026-110264

CVE-2026-110264: GitLab Unauthenticated RCE via Onigmo Regex I...

CVE-2026-110264

An issue has been discovered in GitLab CE/EE affecting all versions from 7.0 before 18.11.13, 19.0 before 19.0.10, 19.1 before 19.1.9, 19.2 before 19.2.9, 19.3 before 19.3.6, 19.4 before 19.4.3, and 19.5 before 19.5.1 that, under certain conditions, could have allowed an unauthenticated user to...

PT-2026-120800

Name of the Vulnerable Software and Affected Versions GitLab CE/EE versions 7.0 through 18.11.13 GitLab CE/EE versions 19.0 through 19.0.10 GitLab CE/EE versions 19.1 through 19.1.9 GitLab CE/EE versions 19.2 through 19.2.9 GitLab CE/EE versions 19.3 through 19.3.6 GitLab CE/EE versions 19.4...

Exploit for Integer Overflow or Wraparound in Gitlab

CVE-2026-97229: Unauthenticated remote code execution via Gi...

Rapid7 Analysis: GitLab CI/CD Regex Integer Overflow (CVE-2026-97229)

Overview On October 12, 2026, GitLab released 19.4.2, 19.3.5, and 19.2.8 to fix CVE-2026-97229, an integer overflow in its CI/CD regular-expression handling. The issue was reported through HackerOne by joaxcar. GitLab assigned it a CVSS score of 10.0 and described possible code execution by an...

CVE-2026-97229

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.2 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an unauthenticated user to execute arbitrary code on the GitLab server via a specially crafted regular...

EUVD-2019-6981

Malware in sbrugna...

EUVD-2019-6982

Malware in sbrugna...

EUVD-2017-15246

Malware in sbrugna...

RHEL 8 : ruby (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 8 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - onigmo: out-of-bounds read in nextstateval in regparse.c CVE-2019-16162 - Onigmo through 6.2.0 has a NULL...