534 matches found
sqlmap
sqlmap sqlmap is an open source penetration testing tool that automates the process of detecting and exploiting SQL injection flaws and taking over of database servers. It comes with a powerful detection engine, many niche features for the ultimate penetration tester, and a broad range of switche...
weave-gitops
Weave GitOps Weave GitOps is a simple, open source developer platform for people who want cloud native applications but who don't have Kubernetes expertise. Experience how easy it is to enable GitOps and run your apps in a cluster. Use Git to collaborate with team members making new deployments...
CVE-2026-85706
CVE-2026-85706 GitLab unauthenticated arbitrary file read ★ CVE-2026-85706 GitLab unauthenticated arbitrary file read PoC ★ https://github.com/user-attachments/assets/026749ec-04e9-4dd5-9453-cb7c1f6e823d Overview CVE-2026-85706 is an unauthenticated arbitrary file read in GitLab CE/EE CVSS 10.0,...
CVE-2026-85706-PoC-Toolkit
CVE‑2026‑85706 – GitLab Unauthenticated File Read Toolkit ETHICAL USE ONLY – AUTHORIZED SECURITY TESTING This repository provides tools for authorized security professionals, blue teams, and penetration testers only. Unauthorized access to computer systems is illegal under CFAA US, Computer Misus...
gitlab-cve-2026-85706-ioc
CVE-2026-85706 — GitLab Path Traversal IOC Scanner & Detection Toolkit GitLab CE/EE Repository Commits API Unauthenticated Path Traversal CVSS 3.1: 10.0, Critical Status: Actively exploited in the wild · Listed in CISA KEV 2026-09-11, due 2026-09-14 · Patched by GitLab 2026-09-10 A free,...
CVE-2024-31497-POC
CVE-2024-31497 POC This vulnerability exploits the biased ECDSA nonce generation in the ecc-ssh.c file. The nonce is generated with $sha512ID\ ||\ sha512privKey\ ||\ sha1data\ mod\ q$ leaving the top 9 bits to zero. In order to recover the private key we need 60 signatures but with 58 we still ha...
CVE-2026-85706_docker_exp
1. Pull docker git clone https://github.com/FlowerWitch/CVE-2026-85706dockerexp docker compose up -d 2. Write LFI test information docker exec gitlab-vuln bash -c 'echo "SECRET-CANARY-85706-%%%" /tmp/canary.txt' 3. Read and verify Bypass method 1: .json suffix curl -s -w "\nHTTP %httpcode\n" -X...
CVE-2026-85706
CVE-2026-85706: GitLab CE/EE Unauthenticated Path Traversal CVE : CVE-2026-85706, CVSS 3.1 10.0 AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N Component : GitLab CE/EE Repository Commits API Workhorse body-upload variant Affected : 18.7 ≤ version 19.1.8, 19.2.0–19.2.5, 19.3.0–19.3.1 Fixed : 19.1.8 / 19.2.6 ...
Astra Linux – Vulnerability in Linux 6.1
In the Linux kernel, the following vulnerability has been resolved: drm/vc4: Do not check if plane-state-fb == state-fb Currently, when using non-blocking commits, the following kernel warnings can be observed: 110.908514 ------------ Cut here ------------ 110.908529 refcountt: Underflow; Use aft...
CVE-2026-85706-PoC
CVE-2026-85706: GitLab CE/EE unauthenticated arbitrary local file read CVE-2026-85706 is a critical path-traversal / missing-authentication issue in the GitLab CE/EE Repository Commits and Repository Files APIs: an unauthenticated attacker can make the server read arbitrary files and obtain their...
gitbleed_tools
GitBleed Tools - para extraer datos de repositorios git reflejados Acerca de Este repositorio contiene scripts de shell que se pueden usar para descargar y analizar diferencias entre repositorios Git clonados y reflejados. Para más información sobre la peculiaridad subyacente en el comportamiento...
GitLab Commits API file.path LFI (CVE-2026-85706)
Exploits CVE-2026-85706 in self-managed GitLab CE/EE: unauthenticated multipart POST to /api/v4/projects/id/repository/commits with attacker-controlled file.path reads arbitrary host files outside Workhorse temp directories. !/usr/bin/env python3 -- coding: utf-8 -- """GitLab unauthenticated...
GitLab CVE-2026-85706 File Path LFI Detect
Detects CVE-2026-85706 in self-managed GitLab CE/EE before patched releases 17.11.7, 18.0.4, 18.1.2, 18.2.2, 18.3.2, 18.4.0: unauthenticated multipart uploads can supply file.path or metadata.path outside Workhorse temp dirs, leading to arbitrary file read. Sends a benign absolute-path probe only...
Exploit for Path Traversal in Gitlab
CVE-2026-85706 GitLab unauthenticated arbitrary file read ★ C...
CVE-2026-85706
Laboratorio de validación de CVE-2026-85706 en GitLab Este directorio construye un laboratorio de GitLab aislado y exclusivamente local para pruebas defensivas autorizadas de CVE-2026-85706. El CVE afecta la API repository-commits de GitLab CE/EE en el confinamiento de rutas y la aplicación de...
Exploit for Path Traversal in Gitlab
CVE‑2026‑85706 – GitLab Unauthenticated F...
GitLab 18.7 < 18.11.12 / 19.0 < 19.0.9 / 19.1 < 19.1.8 / 19.2 < 19.2.6 / 19.3 < 19.3.2 (CVE-2026-85706)
The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - GitLab has remediated an issue that, under certain conditions, an unauthenticated user could have read arbitrary files from the GitLab server due to improper path confinement and missing authenticatio...
BIT-GITLAB-2026-85706 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in GitLab
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.7 before 18.11.12, 19.0 before 19.0.9, 19.1 before 19.1.8, 19.2 before 19.2.6, and 19.3 before 19.3.2 that, under certain conditions, an unauthenticated user could have read arbitrary files from the GitLab server due to...
CVE-2026-85706: Critical GitLab Path Traversal Exploited in the Wild
Overview On September 10, 2026, GitLab published a critical patch release for GitLab Community Edition CE and Enterprise Edition EE. The release addresses CVE-2026-85706, a critical path traversal vulnerability CWE-22 in the repository commits API with a CVSSv3.1 score of 10.0. According to GitLa...