CVE-2024-32002

CVE-2024-32002 A Reverse shell generator for gitlab-shell vulnerability cve 2024-32002 This is still in the testing phase and I will update it once done...

CLEANSTART-2026-EL80803 Security fix for CVE-2024-10041 applied in: gitlab-shell 14.45.5-r0, gitlab-shell-fips 14.45.5-r0

CVE-2024-10041 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-UX00872 Security fixes in gitlab-shell-fips 14.45.5-r0

Package gitlab-shell-fips version 14.45.5-r0 fixes 3 vulnerabilities: CVE-2024-10041, ghsa-f6x5-jh6r-wrfv, ghsa-j5w8-q4qc-rx2x...

CLEANSTART-2026-AX77726 vulnerability was found in PAM

Multiple security vulnerabilities affect the gitlab-shell-fips package. A vulnerability was found in PAM. See references for individual vulnerability details...

CVE-2021-22254

Under very specific conditions a user could be impersonated using Gitlab shell. This vulnerability affects GitLab CE/EE 13.1 and later through 14.1.2, 14.0.7 and 13.12.9...

EUVD-2021-9323

Malicious code in bioql PyPI...

Linux Distros Unpatched Vulnerability : CVE-2021-22177

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Potential DoS was identified in gitlab-shell in GitLab CE/EE version 12.6.0 or above, which allows an attacker to spike the server resource utilization via...

CVE-2021-22177

Potential DoS was identified in gitlab-shell in GitLab CE/EE version 12.6.0 or above, which allows an attacker to spike the server resource utilization via gitlab-shell command...

GHSA-V6V8-XJ6M-XWQH vulnerabilities

Vulnerabilities for packages: k3s, bank-vaults, src-fingerprint, snyk-cli, kubernetes-event-exporter, goreleaser, falcoctl, rekor, kubescape, crossplane-provider-azure-authorization, pulumi-kubernetes-operator, flux-image-reflector-controller, rabbitmq-messaging-topology-operator, gitsign, tkn,...

CVE-2024-6104 vulnerabilities

Vulnerabilities for packages: k3s, bank-vaults, src-fingerprint, snyk-cli, kubernetes-event-exporter, goreleaser, falcoctl, rekor, kubescape, crossplane-provider-azure-authorization, pulumi-kubernetes-operator, flux-image-reflector-controller, rabbitmq-messaging-topology-operator, gitsign, tkn,...

BIT-GITLAB-2021-22177

Potential DoS was identified in gitlab-shell in GitLab CE/EE version 12.6.0 or above, which allows an attacker to spike the server resource utilization via gitlab-shell command...

CVE-2023-39325 vulnerabilities

Vulnerabilities for packages: flux-source-controller, k8sgpt-operator, terraform, kpt, minio, apko, frp, metacontroller, caddy, gke-gcloud-auth-plugin, kind, kubernetes-ingress-defaultbackend, prometheus-stackdriver-exporter, dgraph, src, falcoctl, flux-helm-controller, bom, aws-efs-csi-driver,...

GHSA-QPPJ-FM5R-HXR3 vulnerabilities

Vulnerabilities for packages: ollama, secrets-store-csi-driver-provider-gcp, kubeflow-katib, pulumi-kubernetes-operator, weaviate, grype, kubernetes-csi-livenessprobe, flux-helm-controller, kaf, minio, mc, fuse-overlayfs-snapshotter, terraform-provider-sendgrid, kots, nginx-mainline,...

UBUNTU-CVE-2021-22254

Under very specific conditions a user could be impersonated using Gitlab shell. This vulnerability affects GitLab CE/EE 13.1 and later through 14.1.2, 14.0.7 and 13.12.9...

CVE-2021-22254

Under very specific conditions a user could be impersonated using Gitlab shell. This vulnerability affects GitLab CE/EE 13.1 and later through 14.1.2, 14.0.7 and 13.12.9...

GitLab 安全漏洞

GitLab is a self-hosted, Git version control system project repository application developed in Ruby on Rails by GitLab, Inc. The application can be used to access a project's file content, commit history, bug list, etc. A security vulnerability exists in Gitlab, which stems from the product's la...

CVE-2021-22254: Improper Encoding or Escaping of Output

Under very specific conditions a user could be impersonated using Gitlab shell. This vulnerability affects GitLab CE/EE 13.1 and later through 14.1.2, 14.0.7 and 13.12.9...

CVE-2021-22177

Potential DoS was identified in gitlab-shell in GitLab CE/EE version 12.6.0 or above, which allows an attacker to spike the server resource utilization via gitlab-shell command...

CVE-2021-22177

Potential DoS was identified in gitlab-shell in GitLab CE/EE version 12.6.0 or above, which allows an attacker to spike the server resource utilization via gitlab-shell command...

UBUNTU-CVE-2021-22177

Potential DoS was identified in gitlab-shell in GitLab CE/EE version 12.6.0 or above, which allows an attacker to spike the server resource utilization via gitlab-shell command...