27783 matches found
LeitWacht
GitLab Runner Leitwacht Control de salida de red para contenedores CI/CD de GitLab Runner. Leitwacht previene ataques a la cadena de suministro que exfiltran secretos, controlando lo que cada contenedor de trabajo puede acceder en la red. Cómo Funciona Leitwacht es un agente independiente que se...
GO-2026-6599 vulnerabilities
Vulnerabilities for packages: crossplane-provider-aws-redshift-fips, smarter-device-manager, crossplane-provider-aws-inspector2-fips, commercial-gitlab-workhorse-ee-fips, flux-image-automation-controller-fips, multicluster-controlplane-fips, tflint-fips, thanos-receive-controller-fips, trufflehog...
GO-2026-6604 vulnerabilities
Vulnerabilities for packages: zitadel, commercial-gitlab-rails-ee, tempo-fips, commercial-gitlab-workhorse-ee-fips, aactl, karpenter-fips, commercial-grafana, nvidia-nsight-compute-12.8, nvidia-nsight-compute-13.2, tigera-operator, nvidia-nsight-compute-13.3, nvidia-nsight-compute-13.4,...
GHSA-WPFX-QCH4-Q5J2 vulnerabilities
Vulnerabilities for packages: crossplane-provider-aws-redshift-fips, smarter-device-manager, crossplane-provider-aws-inspector2-fips, commercial-gitlab-workhorse-ee-fips, flux-image-automation-controller-fips, multicluster-controlplane-fips, tflint-fips, thanos-receive-controller-fips, trufflehog...
GHSA-874M-FCC5-9GQF vulnerabilities
Vulnerabilities for packages: crossplane-provider-aws-redshift-fips, flux-image-automation-controller-fips, nrdot-collector-fips, crossplane-provider-aws-eks-fips, buildkite-agent, azurefile-csi, aws-otel-collector, kubernetes-dashboard-fips, llm-d-router-fips,...
GHSA-C3Q7-M35P-9QQ7 vulnerabilities
Vulnerabilities for packages: zitadel, commercial-gitlab-rails-ee, tempo-fips, commercial-gitlab-workhorse-ee-fips, aactl, karpenter-fips, commercial-grafana, nvidia-nsight-compute-12.8, nvidia-nsight-compute-13.2, tigera-operator, nvidia-nsight-compute-13.3, nvidia-nsight-compute-13.4,...
CVE-2026-94440 vulnerabilities
Vulnerabilities for packages: crossplane-provider-aws-redshift-fips, flux-image-automation-controller-fips, nrdot-collector-fips, crossplane-provider-aws-eks-fips, buildkite-agent, azurefile-csi, aws-otel-collector, kubernetes-dashboard-fips, llm-d-router-fips,...
GHSA-22JX-P735-QCPM vulnerabilities
Vulnerabilities for packages: crossplane-provider-aws-redshift-fips, smarter-device-manager, crossplane-provider-aws-inspector2-fips, commercial-gitlab-workhorse-ee-fips, flux-image-automation-controller-fips, multicluster-controlplane-fips, tflint-fips, thanos-receive-controller-fips, trufflehog...
CVE-2026-56857 vulnerabilities
Vulnerabilities for packages: zitadel, commercial-gitlab-rails-ee, tempo-fips, commercial-gitlab-workhorse-ee-fips, aactl, karpenter-fips, commercial-grafana, nvidia-nsight-compute-12.8, nvidia-nsight-compute-13.2, tigera-operator, nvidia-nsight-compute-13.3, nvidia-nsight-compute-13.4,...
GO-2026-6609 vulnerabilities
Vulnerabilities for packages: rclone, aactl, flux-source-controller, argo-workflows, atlantis, cert-manager, temporal-ui-server, argo-cd, gitlab-pages, hubble-ui, spire-server, zarf, grafana, kyverno-policy-reporter, cloudprober, step, openbao, prometheus-adapter, cert-manager-webhook-pdns,...
GHSA-F4XW-M386-M277 vulnerabilities
Vulnerabilities for packages: rclone, aactl, flux-source-controller, argo-workflows, atlantis, cert-manager, temporal-ui-server, argo-cd, gitlab-pages, hubble-ui, spire-server, zarf, grafana, kyverno-policy-reporter, cloudprober, step, openbao, prometheus-adapter, cert-manager-webhook-pdns,...
gitlab-rce-demo
GitLab Oj RCE Demo Questo repository contiene una demo autonoma per la catena di RCE notebook-diff di GitLab descritta nella nostra ricerca. Avvia un container GitLab 18.11.3 pulito, crea un utente normale tramite l'interfaccia HTTP pubblica ed esegue il PoC contro tale istanza. Dettagli tecnici:...
cve-2020-10977
CVE-2020-10977 GitLab 12.9.0 Lectura Arbitraria de Archivos Objetivo : 12.9.0 e inferiores Probado : GitLab 12.8.1 En una reciente evaluación encontré una instancia de GitLab en el objetivo, encontré un PoC en Exploit-DB pero usa LDAP para autenticación y en este caso estaba deshabilitado, así qu...
CVE-2026-83605 vulnerabilities
Vulnerabilities for packages: gitlab-rails-ce, gitlab-rails-ce-fips...
GHSA-P3F5-W63M-MXPH vulnerabilities
Vulnerabilities for packages: gitlab-rails-ce, gitlab-rails-ce-fips...
GHSA-W2RR-34G9-RVRJ vulnerabilities
Vulnerabilities for packages: gitlab-rails-ce, gitlab-rails-ce-fips...
CVE-2026-76844 vulnerabilities
Vulnerabilities for packages: gitlab-rails-ce, gitlab-rails-ce-fips...
GHSA-4W3W-2RP5-G8JM vulnerabilities
Vulnerabilities for packages: gitlab-rails-ce, gitlab-rails-ce-fips...