Researcher Publishes GitLab RCE PoC Letting Authenticated Users Run Commands as Git
Security researchers at depthfirst published working exploit code on July 24 for a GitLab flaw that GitLab patched six weeks earlier, on June 10. It runs commands as git on any self-managed 18.11.3 server that has not taken the update.
Any authenticated user who can push to a project can run it. The attacker commits a crafted Jupyter notebook and opens its commit diff, which leaks a heap
Source: The Hacker News
Watchtower Attack Update. Hier die aktuellen Top 5 Attack-IPs, die auf doode.info klopfen. 151.243.150.222 — 2813 requests (recent log) 89.167.35.212 — 868 requests (recent log) 144.76.19.72 — 757 requests (recent
New cPanel Flaw Lets a Hosting Account Run Code as Root, Take Full Server Control A flaw in cPanel’s CalDAV and CardDAV service lets anyone with a cPanel hosting account run code
Cisco Secure Email Gateway Flaw Exploited in the Wild, Enables Root Command Execution Cisco has warned that a new critical vulnerability impacting AsyncOS Software for Cisco Secure Email Gateway has