CVE-2021-22214

CVE-2021-22214 Description - POC for CVE-2021-22214: Gitlab CI Lint API未授权 SSRF漏洞 - create by antx at 2021-11-01. Detail - When requests to the internal network for webhooks are enabled, a server-side request forgery vulnerability in GitLab CE/EE affecting all versions starting from 10.5 was...

CVE-2021-22214

CVE-2021-22214 GitLab CI Lint API Unauthorized SSRF Vulnerability CVE-2021-22214 This article and the tool are for technical sharing only. Strictly prohibited for illegal use, otherwise all consequences shall be borne by the user. Usage help $ python3 gitlabssrf.py...

GitLab-SSRF-CVE-2021-22214

CVE-2021-22214 POC for CVE-2021-22214: Gitlab SSRF Description The remote GitLab install contains a Server-side request forgery SSRF vulnerability as a result of the internal network for webhooks being enabled. A remote, unauthenticated attacker can exploit a registration-limited GitLab instance...

nray

nray Overview Nray is a free, platform and architecture independent port and application layer scanner. nray runs in a distributed manner to speed up scans and to perform scans from different vantage points. Event-based results allow to further process information during the scan, e.g. using tool...

sshconfig-lint

sshconfig-lint One engine for every place your SSH config changes. sshconfig-lint finds semantic mistakes in OpenSSH client configs: duplicate hosts, broken identity paths, unsafe options, weak algorithms, wildcard ordering, and tangled Include chains. Use the same rule codes locally, in Git hook...

CVE-2026-59172

The Joker Clojure interpreter, linter, and formatter (versions prior to 1.8.2 ) contains a vulnerability where executing joker --lint can lead to arbitrary code execution . The tool walks upward from the linted file to find a .jokerd/ directory and executes matching linter.* files. Since these f...

Exploit for Integer Overflow or Wraparound in Gitlab

CVE-2026-97229 CVE-2026-97229 an external exploit for GitLab C...

Deserialization of Untrusted Data

Overview pylint is a Python static code analysis tool which looks for programming errors, helps enforcing a coding standard, sniffs for code smells and offers simple refactoring suggestions. Affected versions of this package are vulnerable to Deserialization of Untrusted Data via loadresults in...

Exploit for Integer Overflow or Wraparound in Gitlab

CVE-2026-97229: Unauthenticated remote code execution via Gi...

Linux Distros Unpatched Vulnerability : CVE-2026-109449

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Symfony Expression Language versions prior to 5.4.54, 6.4.48, 7.4.21, and 8.1.9, the parser of the ExpressionLanguage component built its node tree with no...

DEBIAN-CVE-2026-109449

In Symfony Expression Language versions prior to 5.4.54, 6.4.48, 7.4.21, and 8.1.9, the parser of the ExpressionLanguage component built its node tree with no bound on its depth. An expression made of tens of thousands of nested unary operators, array literals, binary operators or property access...

CVE-2026-109449

In Symfony Expression Language versions prior to 5.4.54, 6.4.48, 7.4.21, and 8.1.9, the parser of the ExpressionLanguage component built its node tree with no bound on its depth. An expression made of tens of thousands of nested unary operators, array literals, binary operators or property access...

Astra Linux – Vulnerability in Ruby-Rack

A sequence injection vulnerability exists in Rack versions 2.0.9.1, 2.1.4.1, and 2.2.3.1. This vulnerability could allow for shell escapes in the Lint and CommonLogger components of Rack...

EUVD-2026-102134

In Symfony Expression Language versions prior to 5.4.54, 6.4.48, 7.4.21, and 8.1.9, the parser of the ExpressionLanguage component built its node tree with no bound on its depth. An expression made of tens of thousands of nested unary operators, array literals, binary operators or property access...

CVE-2026-109449

In Symfony Expression Language versions prior to 5.4.54, 6.4.48, 7.4.21, and 8.1.9, the parser of the ExpressionLanguage component built its node tree with no bound on its depth. An expression made of tens of thousands of nested unary operators, array literals, binary operators or property access...

GitLab 19.4.1 CI Lint Remote Code Execution

GitLab version 19.4.1 and other affected versions contain an integer overflow in the CI/CD regular expression compiler that can allow remote code execution. This proof of concept deploys a crafted CI configuration and repository path, then triggers CI lint processing...

Exploit for CVE-2026-97229

CVE-2026-97229: GitLab RCE via CI lint poc.py exploits CVE-...

Malicious Package

Overview insomnia-plugin-api-lint-helper is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and th...

Malicious code in insomnia-plugin-api-lint-helper (npm)

Source: amazon-inspector f3572e41f2e2e83a3156c1b24bf8684c0149a508e45626e80c592657cfb475ba index.js, the package's main entry, runs at require time with no user interaction. On load it spawns OS-native calculator processes via childprocess.exec 'calc.exe' on Windows, 'open -a Calculator' on macOS,...

Malicious code in insomnia-plugin-api-lint-helper (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3572e41f2e2e83a3156c1b24bf8684c0149a508e45626e80c592657cfb475ba index.js, the package's main entry, runs at require time with no user interaction. On load it spawns OS-native calculator processes via...