Exploit for Code Injection in Gitlab

GitLab ExifTool RCE CVE-2021-22205 Vulhubhttps://vulhub...

CVE-2026-74866 vulnerabilities

Vulnerabilities for packages: commercial-gitlab-rails-ee, gitlab-rails-ce-fips, commercial-gitlab-rails-ee-fips, gitlab-rails-ce, langfuse-fips...

GHSA-GXM5-99CW-XJW9 vulnerabilities

Vulnerabilities for packages: commercial-gitlab-rails-ee, gitlab-rails-ce-fips, commercial-gitlab-rails-ee-fips, gitlab-rails-ce, langfuse-fips...

Microsoft Dynamics 365 Customer Engagement Code Execution

The vulnerability of the Microsoft Dynamics 365 Customer Engagement CE CRM system is related to improper code generation. Exploitation of this vulnerability could allow an attacker operating remotely to execute arbitrary code...

CVE-2026-92599 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce-fips, opensearch-dashboards-fips, opensearch-dashboards, thingsboard, unleash, thingsboard-fips...

GHSA-MRX9-2RRP-RHPX vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce-fips, opensearch-dashboards-fips, opensearch-dashboards, thingsboard, unleash, thingsboard-fips...

CVE-2026-19484 vulnerabilities

Vulnerabilities for packages: commercial-gitlab-rails-ee, gitlab-rails-ce-fips, commercial-gitlab-rails-ee-fips, langfuse, gitlab-rails-ce, langfuse-fips...

GHSA-XJH9-V7X6-24JW vulnerabilities

Vulnerabilities for packages: commercial-gitlab-rails-ee, gitlab-rails-ce-fips, commercial-gitlab-rails-ee-fips, langfuse, gitlab-rails-ce, langfuse-fips...

Gitlab-CVE-2026-19478

CVE-2026-19478 — GitLab GraphQL @glintroduced Directive Injection Unauthenticated Remote Code Injection via GraphQL Directive in GitLab CE/EE — Delete Any Public Project With a Single HTTP Request A hands-on penetration testing lab that reproduces CVE-2026-19478, a critical CVSS 9.4 vulnerability...

Review.CVE-2023-5612

CVE-2023-5612 – SSRF di GitLab tramite URL Webhook PoC e Analisi 📌 Panoramica CVE ID CVE: CVE-2023-5612 Gravità: Alta CVSS: 8.1 Punteggio Base Tipo: Server-Side Request Forgery SSRF Componente: Webhook di GitLab CE/EE Versioni Affette: GitLab CE/EE " \ --data-urlencode "url=http://127.0.0.1:8888"...

CVE-2026-66010 vulnerabilities

Vulnerabilities for packages: wazuh-dashboard-fips, gitlab-rails-ce-fips, nextcloud-server, awx, jupyter-base-notebook, kibana, wazuh-dashboard, opensearch-dashboards, langfuse, tensorflow-gpu-jupyter, gitlab-rails-ce, librechat, opensearch-dashboards-fips, langfuse-fips...

GHSA-JXRP-R7GX-Q4J8 vulnerabilities

Vulnerabilities for packages: wazuh-dashboard-fips, gitlab-rails-ce-fips, nextcloud-server, awx, jupyter-base-notebook, kibana, wazuh-dashboard, opensearch-dashboards, langfuse, tensorflow-gpu-jupyter, gitlab-rails-ce, librechat, opensearch-dashboards-fips, langfuse-fips...

actscene-ocr (>=0.1.3, <=0.1.5), adversarial-workflow (>=0.4.0, <=0.9.8) +288 more potentially affected by CVE-2026-104874 via multidict (>=6.3.0, <=6.8.0)

multidict PYPI version =6.3.0, =0.1.3, =0.4.0, =0.1.0, =0.1.0, =0.87.2.dev9, =0.80.1, =0.1.0.dev19, =1.3.0, =0.1.0, =1.0.5, =25.4.0, =26.5.0 and more Source cves: CVE-2026-104874 Source advisory: MEND:CVE-2026-104874...

GHSA-P98J-92PF-MC4P vulnerabilities

Vulnerabilities for packages: commercial-gitlab-rails-ee, wazuh-dashboard-fips, gitlab-rails-ce-fips, commercial-gitlab-rails-ee-fips, nextcloud-server, awx, wazuh-dashboard, opensearch-dashboards, langfuse, gitlab-rails-ce, librechat, opensearch-dashboards-fips, langfuse-fips...

GO-2026-6619 Portainer CE allows username enumeration through authentication response timing in github.com/portainer/portainer

Portainer CE allows username enumeration through authentication response timing in github.com/portainer/portainer...

CVE-2026-70650

GetSimple CMS is a content management system CMS, and GetSimple CMS CE is the community edition of that CMS. In versions 3.3.22 and prior, an authenticated stored Cross-Site Scripting XSS vulnerability exists in the page backup viewer admin/backup-edit.php. Page fields are correctly HTML-encoded...

CVE-2026-71542

GetSimple CMS is a content management system CMS, and GetSimple CMS CE is the community edition of that CMS. In versions 3.3.22 and prior, GetSimpleCMS-CE is vulnerable to stored Cross-Site Scripting XSS in the "Theme to Components" functionality admin/components.php via the title parameter. The...

CVE-2026-71426

GetSimple CMS is a content management system CMS, and GetSimple CMS CE is the community edition of that CMS. In versions 3.3.22 and prior, an authenticated user with page-editing rights can store an arbitrary filesystem path in a page's template attribute. On the public front-end, this value is...

CVE-2026-56660

GetSimple CMS is a content management system CMS, and GetSimple CMS CE is the community edition of that CMS. Prior to version 1.5, the update handler in UpdateCE.php downloads a ZIP archive and extracts its contents into the web root without validating file types or extraction paths. Because PHP...

CVE-2026-56661

GetSimple CMS is a content management system CMS, and GetSimple CMS CE is the community edition of that CMS. Prior to version 1.5, the update handler fetches a user-supplied URL with filegetcontents after only format validation FILTERVALIDATEURL — there is no validation of the request destination...