50 matches found
CVE-2023-7028-Account-Take-Over-Gitlab
CVE-2023-7028 | GitLab 계정 탈취 Account-Take-Over 면책 조항 Disclaimer 이 코드는 취약점의 개념 증명PoC이며, 본인이 소유하지 않은 GitLab 인스턴스에 사용하도록 권장하는 것이 아닙니다. 이 도구는 연구 및 교육 목적으로만 개발되었으며, 이 도구를 사용함으로써 발생하는 모든 책임은 사용자 본인에게 있습니다. 설명 Description: CVE-2023-7028은 사용자 상호작용 없이 GitLab 관리자 계정을 탈취할 수 있게 해주는 계정 탈취Account-Take-Over...
CVE-2023-7028
CVE-2023-7028 | Account-Take-Over Gitlab Отказ от ответственности Этот код является доказательством концепции уязвимости, я не призываю никого использовать его на экземплярах Gitlab, которые им не принадлежат. Данный инструмент разработан исключительно для исследовательских и образовательных целе...
CVE-2023-7028
CVE-2023-7028 | 계정 탈취 Gitlab 면책 조항 이 코드는 취약점의 개념 증명이며, 소유하지 않은 Gitlab 인스턴스에서 사용하도록 권장하는 것이 아닙니다. 이 도구는 연구 및 교육 목적으로만 개발되었으며, 이 도구를 사용하여 발생하는 모든 행위에 대해 책임을 지지 않습니다. 설명 이 저장소는https://github.com/Vozec/CVE-2023-7028의 포크입니다. 저는 단지 익스플로잇 사용법을 개선했을 뿐입니다. CVE-2023-7028은 사용자 상호작용 없이 Gitlab 관리자 계정을 장악할 수 있...
POC_CVE-2024-40492
CVE-2024-40492: Межсайтовый скриптинг с сохранением Stored XSS до получения контроля над учетной записью ATO Описание Stored Cross-Site Scripting XSS — это тип уязвимости безопасности, обычно встречающийся в веб-приложениях. Она возникает, когда злоумышленник может внедрить вредоносные скрипты в...
CVE-2025-1908
An issue has been discovered in GitLab EE/CE that could allow an attacker to track users' browsing activities, potentially leading to full account take-over, affecting all versions from 16.6 before 17.9.7, 17.10 before 17.10.5, and 17.11 before 17.11.1...
EUVD-2025-12125
Malicious code in bioql PyPI...
EUVD-2022-36161
Malicious code in bioql PyPI...
Exploit for Weak Password Recovery Mechanism for Forgotten Password in Gitlab
CVE-2023-7028 | Account-Take-Over Gitlab Disclamer This c...
CVE-2022-33106
WiJungle NGFW Version U250 was discovered to be vulnerable to No Rate Limit attack, allowing the attacker to brute force the admin password leading to Account Take Over...
CVE-2021-43991
The Kentico Xperience CMS version 13.0 – 13.0.43 is vulnerable to a persistent Cross-Site Scripting XSS vulnerability also known as Stored or Second-Order XSS. Persistent XSS vulnerabilities occur when the application stores and retrieves client supplied data without proper handling of dangerous...
BIT-GITLAB-2025-1908 Business Logic Errors in GitLab
An issue has been discovered in GitLab EE/CE that could allow an attacker to track users' browsing activities, potentially leading to full account take-over, affecting all versions from 16.6 before 17.9.7, 17.10 before 17.10.5, and 17.11 before 17.11.1...
CVE-2025-1908 Business Logic Errors in GitLab
An issue has been discovered in GitLab EE/CE that could allow an attacker to track users' browsing activities, potentially leading to full account take-over, affecting all versions from 16.6 before 17.9.7, 17.10 before 17.10.5, and 17.11 before 17.11.1...
CVE-2025-1908
GitLab CVE-2025-1908 affects GitLab EE/CE. The issue could allow an attacker to track users’ browsing activities, potentially enabling full account takeover. Affected versions are 16.6 before 17.9.7, 17.10 before 17.10.5, and 17.11 before 17.11.1. Root-cause details and remediation/fix informatio...
GitLab 16.6 < 17.9.7 / 17.10 < 17.10.5 / 17.11 < 17.11.1 (CVE-2025-1908)
The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - An issue has been discovered in GitLab EE/CE that could allow an attacker to track users' browsing activities, potentially leading to full account take-over, affecting all versions from 16.6 before...
CVE-2024-45586 Account Take Over Vulnerability
This vulnerability exists due to improper access controls on APIs in the Authentication module of Symphony XTS Web Trading and Mobile Trading platforms version 2.0.0.1P160. An authenticated remote attacker could exploit this vulnerability by manipulating parameters through HTTP request which coul...
Exploit for Weak Password Recovery Mechanism for Forgotten Password in Gitlab
CVE-2023-7028 | Account-Take-Over Gitlab Disclamer This co...
Lost and Found Information System v1.0 - ( IDOR ) leads to Account Take over Exploit
Exploit Title: Lost and Found Information System v1.0 - idor leads to Account Take over Exploit Author: OR4NG.M4N Category : webapps CVE : CVE-2023-38965 Python p0c : import argparse import requests import time parser = argparse.ArgumentParserdescription='Send a POST request to the target server'...
Exploit for Weak Password Recovery Mechanism for Forgotten Password in Gitlab
CVE-2023-7028 | Account-Take-Over Gitlab Disclamer This co...
Account Take Over
gitlab is vulnerable to Account Take Over. The vulnerability is caused due to a missing validation of email addresses provided while resetting account passwords. An attacker can exploit this vulnerability to send reset emails to an unverified email address and can effectively reset the...