Loading video...

Video Failed to Load

There was a problem loading this video. This could be due to a temporary network issue or the video might be unavailable.

Go Home

GitLab Authentication Bypass (CVE-2024-45409) : credits Harsh Jaiswal Rahul Maini

Name: GitLab Authentication Bypass (CVE-2024-45409) : credits Harsh Jaiswal Rahul Maini
Uploaded: 2024-10-07T10:13:39.000Z
Duration: PT32.750S
Channel: Binni Shah
Description: Binni Shah video about GitLab Authentication Bypass (CVE-2024-45409) : credits Harsh Jaiswal Rahul Maini

Binni Shah

140,215 subscribers

119,316 views • 2 years ago •via X (Twitter)

News & Politics Science & Technology

LIVE

Anya Rossi• Live Now

Private livecam show

1.2k

Streaming

6 Comments

Adya2 years ago

@rootxharsh @iamnoooob oh wow

ابو حنانه2 years ago

@rootxharsh @iamnoooob You are very good

Jorge2 years ago

@rootxharsh @iamnoooob well well well…

zz ttstorm2 years ago

@rootxharsh @iamnoooob wow

patrowl_io2 years ago

@rootxharsh @iamnoooob Thanks you @binitamshah ! We automate CVE management and we made continuous penetration testing 🚀

AlexzandeR2 years ago

@rootxharsh @iamnoooob query for shodan or fofa ?

Live Cam

Video Failed to Load

GitLab Authentication Bypass (CVE-2024-45409) : credits Harsh Jaiswal Rahul Maini

Binni Shah

Anya Rossi• Live Now

6 Comments

Related Videos

🚨CVE-2025-31161: Authentication Bypass Vulnerability in CrushFTP Credit: Exploit:

This video shows my PoC for libssh CVE-2023-2283 (authentication bypass vuln). The attacker logs in with ED25519 authentication, despite not knowing the private key.

🔥 We have reproduced the fresh CVE-2023-42793 in JetBrains TeamCity. Authentication bypass allows an external attacker to gain administrative access to the server and execute any commands on it. Update your software ASAP!

🚨CVE-2025-29927: Next.js Middleware Bypass Vulnerability PoC: Credit:

Proxmox VE 7.x authentication bypass (pre-auth RCE)

The biometric authentication of the #EU #AgeVerification app can be easily bypass too...

CVE-2024-29269: Remote Code Execution PoC Credit:

CVE-2024-34470: Path Traversal vulnerability in HSC Mailinspector Credit:

POC for CVE-2024-38063 (RCE in Windows TCP/IP) :

KL Rahul hugs Rahul Dravid and says 'Get well soon'. ❤️ - KL also met Yashasvi Jaiswal. 🫂

MALWARE DEVELOPMENT WE DEVELOPED AND INFO STEALER BYPASS WINDOW DEFENDER Screen capture File system Access Keystrokes logging Camera access Cookies and authentication collector

🚨PoC for SysAid PreAuth RCE Chain (CVE-2025-2775, CVE-2025-2776, CVE-2025-2777, CVE-2025-2778) GitHub: Write-up:

GitLab is now available in Stripe Projects. Developers and AI coding agents can add GitLab to a new project in seconds, with credentials and environment variables handled automatically. Run "stripe projects add gitlab/project" to get started. Learn more:

🚨CVE-2024-21413 - Microsoft Outlook Remote Code Execution Vulnerability PoC (no audio) Credit:

Sourav Ganguly Sachin Tendulkar K L Rahul Yashasvi Jaiswal Shubman Gill Rishabh Pant Ganguly at Leeds, 2002

Citrix admins, your weekend plans just changed. CVE-2026-8452 was disclosed as a NetScaler memory overflow / DoS. Now watchTowr has dropped a Pre-Auth RCE PoC. Internet-facing edge appliances. No authentication. RCE. #ReverseEngineering #VulnerabilityResearch #Infosec

CVE-2026-34348 exploitation demo from my #BHUSA "Pass-the-Passkey Family of Attacks" talk: WebAuthn assertion from recent YubiKey authentication is extracted from Windows Event Log and replayed against Microsoft Entra ID using Passkey Injector. Whitepaper:

🚨CVE-2024-40725: Apache 2.4.0/2.4.61 HTTP Request Smuggling... Using Custom Nuclei Template CVSS: 5.3 PoC: Via: