Metasploit Wrap-Up

Cisco RV Series Auth Bypass and Command Injection Thanks to community contributor neterum, Metasploit framework just gained an awesome new module which targets Cisco Small Business RV Series Routers. The module actually exploits two vulnerabilities, an authentication bypass CVE-2022-20705 and a...

GitLab GitHub Repo Import Deserialization Remote Code Execution Exploit

An authenticated user can import a repository from GitHub into GitLab. If a user attempts to import a repo from an attacker-controlled server, the server will reply with a Redis serialization protocol object in the nested defaultbranch. GitLab will cache this object and then deserialize it when...

Exploit for Injection in Gitlab

This is a PoC exploit for CVE-2022-2992, an authenticated remote...

CVE-2022-2992

creationtimestamp| type| source ---|---|--- 2022-10-09 14:07:43+00:00| published-proof-of-concept| https://t.me/intelexch/25958 2022-10-10 07:03:55+00:00| published-proof-of-concept| https://t.me/proxybar/1026 2022-10-11 02:32:29+00:00| exploited| https://t.me/CyberSecurityTechnologies/6946...

Exploit for Injection in Gitlab

CVE-2022-2992 Authenticated Remote Command Execution in Gitlab...