Video wird geladen...

Video konnte nicht geladen werden

Beim Laden dieses Videos ist ein Problem aufgetreten. Dies könnte an einem vorübergehenden Netzwerkproblem liegen oder das Video ist möglicherweise nicht verfügbar.

Zur Startseite

GitLab Authentication Bypass (CVE-2024-45409) : credits Harsh Jaiswal Rahul Maini

Name: GitLab Authentication Bypass (CVE-2024-45409) : credits Harsh Jaiswal Rahul Maini
Uploaded: 2024-10-07T10:13:39.000Z
Duration: PT32.750S
Channel: Binni Shah
Description: Binni Shah video about GitLab Authentication Bypass (CVE-2024-45409) : credits Harsh Jaiswal Rahul Maini

Binni Shah

140,215 subscribers

119,316 Aufrufe • vor 2 Jahren •via X (Twitter)

Nachrichten & Politik Wissenschaft & Technologie

LIVE

Anya Rossi• Live Now

Private livecam show

1.2k

Streaming

6 Kommentare

Adyavor 2 Jahren

@rootxharsh @iamnoooob oh wow

ابو حنانهvor 2 Jahren

@rootxharsh @iamnoooob You are very good

Jorgevor 2 Jahren

@rootxharsh @iamnoooob well well well…

zz ttstormvor 2 Jahren

@rootxharsh @iamnoooob wow

patrowl_iovor 2 Jahren

@rootxharsh @iamnoooob Thanks you @binitamshah ! We automate CVE management and we made continuous penetration testing 🚀

AlexzandeRvor 2 Jahren

@rootxharsh @iamnoooob query for shodan or fofa ?

Live Cam

Video konnte nicht geladen werden

GitLab Authentication Bypass (CVE-2024-45409) : credits Harsh Jaiswal Rahul Maini

Binni Shah

Anya Rossi• Live Now

6 Kommentare

Ähnliche Videos

🚨CVE-2025-31161: Authentication Bypass Vulnerability in CrushFTP Credit: Exploit:

This video shows my PoC for libssh CVE-2023-2283 (authentication bypass vuln). The attacker logs in with ED25519 authentication, despite not knowing the private key.

🔥 We have reproduced the fresh CVE-2023-42793 in JetBrains TeamCity. Authentication bypass allows an external attacker to gain administrative access to the server and execute any commands on it. Update your software ASAP!

🚨CVE-2025-29927: Next.js Middleware Bypass Vulnerability PoC: Credit:

Proxmox VE 7.x authentication bypass (pre-auth RCE)

The biometric authentication of the #EU #AgeVerification app can be easily bypass too...

CVE-2024-29269: Remote Code Execution PoC Credit:

CVE-2024-34470: Path Traversal vulnerability in HSC Mailinspector Credit:

POC for CVE-2024-38063 (RCE in Windows TCP/IP) :

KL Rahul hugs Rahul Dravid and says 'Get well soon'. ❤️ - KL also met Yashasvi Jaiswal. 🫂

MALWARE DEVELOPMENT WE DEVELOPED AND INFO STEALER BYPASS WINDOW DEFENDER Screen capture File system Access Keystrokes logging Camera access Cookies and authentication collector

🚨PoC for SysAid PreAuth RCE Chain (CVE-2025-2775, CVE-2025-2776, CVE-2025-2777, CVE-2025-2778) GitHub: Write-up:

GitLab is now available in Stripe Projects. Developers and AI coding agents can add GitLab to a new project in seconds, with credentials and environment variables handled automatically. Run "stripe projects add gitlab/project" to get started. Learn more:

🚨CVE-2024-21413 - Microsoft Outlook Remote Code Execution Vulnerability PoC (no audio) Credit:

Sourav Ganguly Sachin Tendulkar K L Rahul Yashasvi Jaiswal Shubman Gill Rishabh Pant Ganguly at Leeds, 2002

Citrix admins, your weekend plans just changed. CVE-2026-8452 was disclosed as a NetScaler memory overflow / DoS. Now watchTowr has dropped a Pre-Auth RCE PoC. Internet-facing edge appliances. No authentication. RCE. #ReverseEngineering #VulnerabilityResearch #Infosec

CVE-2026-34348 exploitation demo from my #BHUSA "Pass-the-Passkey Family of Attacks" talk: WebAuthn assertion from recent YubiKey authentication is extracted from Windows Event Log and replayed against Microsoft Entra ID using Passkey Injector. Whitepaper:

🚨CVE-2024-40725: Apache 2.4.0/2.4.61 HTTP Request Smuggling... Using Custom Nuclei Template CVSS: 5.3 PoC: Via: