4406 matches found
pfsense-vlan-parent-ioctl
abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · pfsense-vlan-parent-ioctl pfsense-vlan-parent-ioctl Class: ioctl leftover Reach: Remote pfSense CE 2.9.0-DEVELOPMENT 9363ac5 - pfsense.org interfacesvlanedit.php builds $portlist for FormSelect only. Save checks...
CVE-2026-112945 vulnerabilities
Vulnerabilities for packages: gitlab-rails-ce-fips, langfuse, langfuse-fips, kubeflow-pipelines, nextcloud-server, gitlab-rails-ce...
CVE-2026-112946 vulnerabilities
Vulnerabilities for packages: gitlab-rails-ce-fips, langfuse, langfuse-fips, kubeflow-pipelines, nextcloud-server, gitlab-rails-ce...
pfsense-voucher-expire-sqli
abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · pfsense-voucher-expire-sqli pfsense-voucher-expire-sqli Class: SQLi Reach: Remote pfSense CE 2.9.0-DEVELOPMENT 9363ac5 - pfsense.org voucher.inc captiveportalreaddb"WHERE username = '$voucher'" then first-row sessioni...
CVE-2026-44881_exploit
CVE-2026-44881 — Portainer Git Symlink → Arbitrary Host File Read Single-script exploit for CVE-2026-44881 , a Git symlink injection in Portainer's stack-deployment flow that lets any low-privilege authenticated user with stack-creation rights read arbitrary files reachable by the Portainer...
CVE-2023-2825-PoC
CVE-2023-2825-PoC Proof-of-concept for CVE-2023-2825, an arbitrary file read vulnerability in GitLab CE/EE 16.0.0. The script logs in with a valid GitLab account, creates the required public nested group structure, creates a public project, uploads an attachment, and uses the vulnerable upload pa...
CVE-2025-27407
CVE-2025-27407 GitLab Podman Lab Minimal local-only lab for proving the GitLab Direct Transfer HTTP path reaches the vulnerable graphql-ruby introspection schema loader. The lab runs one vulnerable GitLab CE container; the PoC script starts its fake GitLab source server in-process only while...
GitLab CE/EE <=19.1.7/19.2.5/19.3.1 - Arbitrary File Read
GitLab CE/EE contains an unauthenticated arbitrary file read. Workhorse, the reverse proxy in front of Rails, matches upload routes using EscapedPath and path.Clean without decoding percent sequences, while Puma decodes them before routing to Grape. Appending a trailing slash to commits or...
CVE-2026-110264
An issue has been discovered in GitLab CE/EE affecting all versions from 7.0 before 18.11.13, 19.0 before 19.0.10, 19.1 before 19.1.9, 19.2 before 19.2.9, 19.3 before 19.3.6, 19.4 before 19.4.3, and 19.5 before 19.5.1 that, under certain conditions, could have allowed an unauthenticated user to...
EUVD-2026-107696
An issue has been discovered in GitLab CE/EE affecting all versions from 7.0 before 18.11.13, 19.0 before 19.0.10, 19.1 before 19.1.9, 19.2 before 19.2.9, 19.3 before 19.3.6, 19.4 before 19.4.3, and 19.5 before 19.5.1 that, under certain conditions, could have allowed an unauthenticated user to...
GHSA-GFR2-RV44-R23C vulnerabilities
Vulnerabilities for packages: vitess, renovate, kibana, gitlab-rails-ce, supabase, commercial-gitlab-rails-ee-fips...
GHSA-VFGH-JCMW-G37Q vulnerabilities
Vulnerabilities for packages: vitess, renovate, kibana, gitlab-rails-ce, supabase, commercial-gitlab-rails-ee-fips...
CVE-2026-111758 vulnerabilities
Vulnerabilities for packages: vitess, renovate, kibana, gitlab-rails-ce, supabase, commercial-gitlab-rails-ee-fips...
CVE-2026-111766 vulnerabilities
Vulnerabilities for packages: vitess, renovate, kibana, gitlab-rails-ce, supabase, commercial-gitlab-rails-ee-fips...
CVE-2026-112944 vulnerabilities
Vulnerabilities for packages: arangodb, gitlab-rails-ce-fips, langfuse, langfuse-fips, kubeflow-pipelines, nextcloud-server, gitlab-rails-ce, commercial-gitlab-rails-ee-fips...
GHSA-698V-4R3X-3VCV vulnerabilities
Vulnerabilities for packages: arangodb, gitlab-rails-ce-fips, langfuse, langfuse-fips, kubeflow-pipelines, nextcloud-server, gitlab-rails-ce, commercial-gitlab-rails-ee-fips...
CVE-2026-112942 vulnerabilities
Vulnerabilities for packages: arangodb, gitlab-rails-ce-fips, langfuse, langfuse-fips, kubeflow-pipelines, nextcloud-server, gitlab-rails-ce, commercial-gitlab-rails-ee-fips...
GHSA-587H-7WMJ-H5PM vulnerabilities
Vulnerabilities for packages: arangodb, gitlab-rails-ce-fips, langfuse, langfuse-fips, kubeflow-pipelines, nextcloud-server, gitlab-rails-ce, commercial-gitlab-rails-ee-fips...