GitLab CE/EE <=19.1.7/19.2.5/19.3.1 - Arbitrary File Read

GitLab CE/EE contains an unauthenticated arbitrary file read. Workhorse, the reverse proxy in front of Rails, matches upload routes using EscapedPath and path.Clean without decoding percent sequences, while Puma decodes them before routing to Grape. Appending a trailing slash to commits or...

CVE-2026-110264

An issue has been discovered in GitLab CE/EE affecting all versions from 7.0 before 18.11.13, 19.0 before 19.0.10, 19.1 before 19.1.9, 19.2 before 19.2.9, 19.3 before 19.3.6, 19.4 before 19.4.3, and 19.5 before 19.5.1 that, under certain conditions, could have allowed an unauthenticated user to...

EUVD-2026-107696

An issue has been discovered in GitLab CE/EE affecting all versions from 7.0 before 18.11.13, 19.0 before 19.0.10, 19.1 before 19.1.9, 19.2 before 19.2.9, 19.3 before 19.3.6, 19.4 before 19.4.3, and 19.5 before 19.5.1 that, under certain conditions, could have allowed an unauthenticated user to...

CVE-2026-111758 vulnerabilities

Vulnerabilities for packages: kibana, vitess, commercial-gitlab-rails-ee-fips, renovate, gitlab-rails-ce, supabase...

CVE-2026-111766 vulnerabilities

Vulnerabilities for packages: kibana, vitess, commercial-gitlab-rails-ee-fips, renovate, gitlab-rails-ce, supabase...

GHSA-GFR2-RV44-R23C vulnerabilities

Vulnerabilities for packages: kibana, vitess, commercial-gitlab-rails-ee-fips, renovate, gitlab-rails-ce, supabase...

GHSA-VFGH-JCMW-G37Q vulnerabilities

Vulnerabilities for packages: kibana, vitess, commercial-gitlab-rails-ee-fips, renovate, gitlab-rails-ce, supabase...

GHSA-587H-7WMJ-H5PM vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce-fips, nextcloud-server, langfuse, arangodb, langfuse-fips, commercial-gitlab-rails-ee-fips, kubeflow-pipelines, gitlab-rails-ce...

GHSA-698V-4R3X-3VCV vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce-fips, nextcloud-server, langfuse, arangodb, langfuse-fips, commercial-gitlab-rails-ee-fips, kubeflow-pipelines, gitlab-rails-ce...

CVE-2026-112944 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce-fips, nextcloud-server, langfuse, arangodb, langfuse-fips, commercial-gitlab-rails-ee-fips, kubeflow-pipelines, gitlab-rails-ce...

GHSA-R825-W8MM-5PXW vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce-fips, nextcloud-server, langfuse, arangodb, langfuse-fips, commercial-gitlab-rails-ee-fips, kubeflow-pipelines, gitlab-rails-ce...

CVE-2026-112942 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce-fips, nextcloud-server, langfuse, arangodb, langfuse-fips, commercial-gitlab-rails-ee-fips, kubeflow-pipelines, gitlab-rails-ce...

CVE-2026-112943 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce-fips, nextcloud-server, langfuse, arangodb, langfuse-fips, commercial-gitlab-rails-ee-fips, kubeflow-pipelines, gitlab-rails-ce...

CVE-2019-5736

CVE-2019-5736 Reference: cve-2019-5736-poc 1. edit poc command in stage2.cve 2. build docker docker build -t cve . 3. run docker docker run -d cve /bin/bash -c "tail -f /dev/null" 4. backup docker-runc cp /usr/bin/docker-runc /usr/bin/docker-runc.bak 5. docker exec -it docker-id /bin/bash 6. edit...

CVE-2026-111759 vulnerabilities

Vulnerabilities for packages: kibana, vitess, commercial-gitlab-rails-ee-fips, renovate, gitlab-rails-ce...

GHSA-R7FV-28H4-CVQ7 vulnerabilities

Vulnerabilities for packages: kibana, vitess, commercial-gitlab-rails-ee-fips, renovate, gitlab-rails-ce...

CVE-2011-1571

CVE-2011-1571 Summary Unspecified vulnerability in the XSL Content portlet in Liferay Portal Community Edition CE 5.x and 6.x before 6.0.6 GA, when Apache Tomcat is used, allows remote attackers to execute arbitrary commands via unknown vectors. CVE Detail :...

pfsense-openvpn-wizard-crlf

abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · pfsense-openvpn-wizard-crlf pfsense-openvpn-wizard-crlf Class: RCE Reach: Remote pfSense CE 2.9.0-DEVELOPMENT 9363ac5 - pfsense.org OpenVPN wizard copies Default Domain / NetBIOS scope into dnsdomain / netbiosscope wi...

pfsense-ipsec-login-banner

abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · pfsense-ipsec-login-banner pfsense-ipsec-login-banner Class: RCE Reach: Remote pfSense CE 2.9.0-DEVELOPMENT 9363ac5 - pfsense.org IPsec Mobile login banner is stored with a length check only, then dumped unquoted into...

pfsense-carp-vhid

abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · pfsense-carp-vhid pfsense-carp-vhid Class: RCE Reach: Remote pfSense CE 2.9.0-DEVELOPMENT 9363ac5 - pfsense.org Virtual IP edit stores CARP VHID from POST with no 1-255 check. FormSelect options are HTML only. CARP...