Researcher Publishes GitLab RCE PoC Letting Authenticated Users Run Commands as Git

Security researchers at depthfirst published working exploit code on July 24 for a GitLab flaw that GitLab patched six weeks earlier, on June 10. It runs commands as git on any self-managed 18.11.3 server that has not taken the update.

Any authenticated user who can push to a project can run it. The attacker commits a crafted Jupyter notebook and opens its commit diff, which leaks a heap

Source: The Hacker News

Leave a Reply

Your email address will not be published. Required fields are marked *

Explore More

INC Ransomware Emerges as Major RaaS Threat in 2026 with 830+ Victims Since 2023

INC Ransomware Emerges as Major RaaS Threat in 2026 with 830+ Victims Since 2023 Cybersecurity researchers have charted the evolution of INC from an nascent ransomware-as-a-service (RaaS) operation to one

Co-Opting Linux Processes for High-Performance Network Simulation (2022)

Co-Opting Linux Processes for High-Performance Network Simulation (2022) Source: Hacker News

Attack Update: Top 5 Attack-IPs auf doode.info – 27.06.2026

Watchtower Attack Update. Hier die aktuellen Top 5 Attack-IPs, die auf doode.info klopfen. 89.167.35.212 — 321 requests (recent log) 213.209.159.175 — 263 requests (recent log) 216.244.66.232 — 103 requests (recent