CVE-2020-10977

GitLab v12.4.0-12.8.1 RCE 完全基于 https://github.com/dotPY-hax/gitlabRCE，但该工具对我来说无法正常工作，且其 HTML 解析部分显得繁琐，因此我用 JS 重写了它。 使用方法 按常规方式启动一个反向 Shell 监听器，然后运行此脚本： root@kitploit: TARGETURI="https://target" TARGETEMAILDOMAIN="laboratory.htb" \ TARGETUSER="test" TARGETPASSWORD="Test pass 123" ...

cve-2020-10977

CVE-2020-10977 GitLab 12.9.0 Lectura Arbitraria de Archivos Objetivo : 12.9.0 e inferiores Probado : GitLab 12.8.1 En una reciente evaluación encontré una instancia de GitLab en el objetivo, encontré un PoC en Exploit-DB pero usa LDAP para autenticación y en este caso estaba deshabilitado, así qu...

CVE-2020-10977

GitLab EE/CE 8.5 to 12.9 is vulnerable to a an path traversal when moving an issue between projects...

Path traversal

GitLab EE/CE 8.5 to 12.9 is vulnerable to a an path traversal when moving an issue between projects...

Design/Logic Flaw

An issue was discovered in GitLab Community and Enterprise Edition 11.3 through 12.4 when moving an issue to a public project from a private one. It has Insecure Permissions...