27724 matches found
Exploit for CVE-2026-110264
gitlab-firing-range Authorized security-research firing range...
Exploit for CVE-2026-110264
gitlab-firing-range Authorized security-research firing range...
GitLab 19.5.0 Security Exposure Scanner
GitLab versions prior to the specified patched releases contain an integer overflow issue in the regular expression compiler. This tool passively fingerprints GitLab instances, identifies exposed versions, and reports their CVE-2026-110264 patch status...
GitLab 19.5.0 Regular Expression Compiler Integer Overflow
GitLab version 19.5.0 and prior affected versions contain an integer overflow in the regular expression compiler that can allow unauthenticated code execution. This proof of concept triggers the vulnerable Onigmo regular expression path. https://packetstorm.news/download/237296...
Rocky Linux 9.6 [TuxCare] Security Update: ruby / ruby-default-gems / ruby-devel / ruby-doc / ruby-libs / etc Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1792801476)
The Rocky Linux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1792801476 advisory. - An issue has been discovered in GitLab CE/EE affecting all versions from 7.0 before 18.11.13, 19.0 before 19.0.10, 19.1 before...
GitLab Integer Overflow Code Execution
The vulnerability of the Git-based software platform for collaborative code development on GitLab is related to a numerical overflow condition. Exploiting this vulnerability allows a malicious actor, operating remotely, to execute arbitrary code...
GitLab 19.5.0 Integer Overflow Remote Code Execution
GitLab CE/EE versions 7.0 through 19.5.0 contain an integer overflow in the regular expression compiler that may allow unauthenticated remote code execution. This proof of concept triggers the issue through a crafted org file rendered by the blob viewer. https://packetstorm.news/download/237263...
AlmaLinux 9.6 [TuxCare] Security Update: ruby / ruby-default-gems / ruby-devel / ruby-doc / ruby-libs / etc Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1792801476)
The AlmaLinux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1792801476 advisory. - An issue has been discovered in GitLab CE/EE affecting all versions from 7.0 before 18.11.13, 19.0 before 19.0.10, 19.1 before...
AlmaLinux 9.2 [TuxCare] Security Update: ruby / ruby-default-gems / ruby-devel / ruby-doc / ruby-libs / etc Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2026:1792800480)
The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1792800480 advisory. - An issue has been discovered in GitLab CE/EE affecting all versions from 7.0 before 18.11.13, 19.0 before 19.0.10, 19.1 before...
Exploit for CVE-2026-110264
GitLab CVE-2026-110264 Security Exposure Auditor !Go Versio...
GHSA-RQ7H-C2JC-7F22 vulnerabilities
Vulnerabilities for packages: nextcloud-server, langfuse-fips, gitlab-rails-ce-fips, langfuse, kubeflow-pipelines, gitlab-rails-ce...
GHSA-9JRQ-W75R-8GCW vulnerabilities
Vulnerabilities for packages: nextcloud-server, langfuse-fips, gitlab-rails-ce-fips, langfuse, kubeflow-pipelines, gitlab-rails-ce...
CVE-2022-51026
Bytebase 0.12.0 before 1.0.1 contains an authentication bypass vulnerability that allows unauthenticated attackers to log in as any user. The flaw stems from trusting client-supplied GitLab provider configuration in the POST /api/auth/login/GITLABSELFHOST endpoint. Attackers can set instanceUrl t...
CVE-2022-51026
Bytebase 0.12.0 before 1.0.1 contains an authentication bypass vulnerability that allows unauthenticated attackers to log in as any user. The flaw stems from trusting client-supplied GitLab provider configuration in the POST /api/auth/login/GITLABSELFHOST endpoint. Attackers can set instanceUrl t...
EUVD-2022-56076
Bytebase 0.12.0 before 1.0.1 contains an authentication bypass vulnerability that allows unauthenticated attackers to log in as any user. The flaw stems from trusting client-supplied GitLab provider configuration in the POST /api/auth/login/GITLABSELFHOST endpoint. Attackers can set instanceUrl t...
Exploit for CVE-2026-110264
CVE-2026-110264 — GitLab Onigmo Regex Repeat-ID Overflow !se...
elemeno-ai-sdk (>=0.0.5, <=0.0.20), foresthog (>=0.9.0, <=1.3.6) +7 more potentially affected by CVE-2026-114145 via gitpython (2.1.1)
gitpython PYPI version 2.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on gitpython and may be impacted: - elemeno-ai-sdk =0.0.5, =0.9.0, =0.1.0, =0.4.0, =0.0.5, =0.0.1, =1.0.0, =1.0.4, =1.0.10 Source cves: CVE-2026-114145 Source advisory:...
dotcli (>=0.1.4, <=0.1.7), giraumon (0.0.1) +3 more potentially affected by CVE-2026-114145 via gitpython (2.1.5)
gitpython PYPI version 2.1.5 is affected by a known vulnerability. The following packages have a transitive dependency on gitpython and may be impacted: - dotcli =0.1.4, =1.0.1, =1.0.0, =1.0.18 Source cves: CVE-2026-114145 Source advisory: OSV:GHSA-83VG-56QC-22M7...
bentodev (>=0.1.17, <=2018.11.2), confsave (>=0.1.0, <=0.3.0) +3 more potentially affected by CVE-2026-114145 via gitpython (2.1.3)
gitpython PYPI version 2.1.3 is affected by a known vulnerability. The following packages have a transitive dependency on gitpython and may be impacted: - bentodev =0.1.17, =0.1.0, =0.9.0, =0.53.0 - reckoner 1.1.1 Source cves: CVE-2026-114145 Source advisory: OSV:GHSA-83VG-56QC-22M7...