Загрузка видео...

Не удалось загрузить видео

На главную

GitLab Authentication Bypass (CVE-2024-45409) : credits Harsh Jaiswal Rahul Maini

binitamshah's profile picture

Binni Shah

140,215 subscribers

119,316 просмотров • 2 лет назад •via X (Twitter)

Новости и политикаНаука и технологии
LIVE

Anya Rossi• Live Now

Private livecam show

Комментарии: 6

Фото профиля Adya
Adya2 лет назад

@rootxharsh @iamnoooob oh wow

Фото профиля ابو حنانه
ابو حنانه2 лет назад

@rootxharsh @iamnoooob You are very good

Фото профиля Jorge
Jorge2 лет назад

@rootxharsh @iamnoooob well well well…

Фото профиля zz ttstorm
zz ttstorm2 лет назад

@rootxharsh @iamnoooob wow

Фото профиля patrowl_io
patrowl_io2 лет назад

@rootxharsh @iamnoooob Thanks you @binitamshah ! We automate CVE management and we made continuous penetration testing 🚀

Фото профиля AlexzandeR
AlexzandeR2 лет назад

@rootxharsh @iamnoooob query for shodan or fofa ?

Похожие видео

🚨CVE-2025-31161: Authentication Bypass Vulnerability in CrushFTP Credit: Exploit:
8:14

🚨CVE-2025-31161: Authentication Bypass Vulnerability in CrushFTP Credit: Exploit:

Dark Web Informer

36,563 просмотров • 1 год назад

This video shows my PoC for libssh CVE-2023-2283 (authentication bypass vuln). The attacker logs in with ED25519 authentication, despite not knowing the private key.
1:19

This video shows my PoC for libssh CVE-2023-2283 (authentication bypass vuln). The attacker logs in with ED25519 authentication, despite not knowing the private key.

Kev

173,816 просмотров • 3 лет назад

🔥 We have reproduced the fresh CVE-2023-42793 in JetBrains TeamCity. Authentication bypass allows an external attacker to gain administrative access to the server and execute any commands on it. Update your software ASAP!
0:25

🔥 We have reproduced the fresh CVE-2023-42793 in JetBrains TeamCity. Authentication bypass allows an external attacker to gain administrative access to the server and execute any commands on it. Update your software ASAP!

PT SWARM

80,696 просмотров • 3 лет назад

🚨CVE-2025-29927: Next.js Middleware Bypass Vulnerability PoC: Credit:
2:53

🚨CVE-2025-29927: Next.js Middleware Bypass Vulnerability PoC: Credit:

Dark Web Informer

21,021 просмотров • 1 год назад

Proxmox VE 7.x authentication bypass (pre-auth RCE)
0:27

Proxmox VE 7.x authentication bypass (pre-auth RCE)

NebuSec

225,170 просмотров • 1 месяц назад

The biometric authentication of the #EU #AgeVerification app can be easily bypass too...
0:49

The biometric authentication of the #EU #AgeVerification app can be easily bypass too...

Baptiste Robert

31,554 просмотров • 5 месяцев назад

CVE-2024-29269: Remote Code Execution PoC Credit:
3:00

CVE-2024-29269: Remote Code Execution PoC Credit:

Dark Web Informer

72,035 просмотров • 1 год назад

CVE-2024-34470: Path Traversal vulnerability in HSC Mailinspector Credit:
0:59

CVE-2024-34470: Path Traversal vulnerability in HSC Mailinspector Credit:

Dark Web Informer

20,656 просмотров • 1 год назад

POC for CVE-2024-38063 (RCE in Windows TCP/IP) :
0:26

POC for CVE-2024-38063 (RCE in Windows TCP/IP) :

Binni Shah

41,277 просмотров • 2 лет назад

KL Rahul hugs Rahul Dravid and says 'Get well soon'. ❤️ - KL also met Yashasvi Jaiswal. 🫂
0:30

KL Rahul hugs Rahul Dravid and says 'Get well soon'. ❤️ - KL also met Yashasvi Jaiswal. 🫂

Mufaddal Vohra

362,382 просмотров • 1 год назад

MALWARE DEVELOPMENT WE DEVELOPED AND INFO STEALER BYPASS WINDOW DEFENDER Screen capture File system Access Keystrokes logging Camera access Cookies and authentication collector
2:01

MALWARE DEVELOPMENT WE DEVELOPED AND INFO STEALER BYPASS WINDOW DEFENDER Screen capture File system Access Keystrokes logging Camera access Cookies and authentication collector

H4RUK1 KIRA🇯🇵

30,475 просмотров • 11 месяцев назад

🚨PoC for SysAid PreAuth RCE Chain (CVE-2025-2775, CVE-2025-2776, CVE-2025-2777, CVE-2025-2778) GitHub: Write-up:
0:25

🚨PoC for SysAid PreAuth RCE Chain (CVE-2025-2775, CVE-2025-2776, CVE-2025-2777, CVE-2025-2778) GitHub: Write-up:

Dark Web Informer

18,120 просмотров • 11 месяцев назад

GitLab is now available in Stripe Projects. Developers and AI coding agents can add GitLab to a new project in seconds, with credentials and environment variables handled automatically. Run "stripe projects add gitlab/project" to get started. Learn more:
2:06

GitLab is now available in Stripe Projects. Developers and AI coding agents can add GitLab to a new project in seconds, with credentials and environment variables handled automatically. Run "stripe projects add gitlab/project" to get started. Learn more:

🦊 GitLab

14,217 просмотров • 5 месяцев назад

🚨CVE-2024-21413 - Microsoft Outlook Remote Code Execution Vulnerability PoC (no audio) Credit:
2:37

🚨CVE-2024-21413 - Microsoft Outlook Remote Code Execution Vulnerability PoC (no audio) Credit:

Dark Web Informer

69,372 просмотров • 1 год назад

Sourav Ganguly Sachin Tendulkar K L Rahul Yashasvi Jaiswal Shubman Gill Rishabh Pant Ganguly at Leeds, 2002
2:20

Sourav Ganguly Sachin Tendulkar K L Rahul Yashasvi Jaiswal Shubman Gill Rishabh Pant Ganguly at Leeds, 2002

Cricketopia

91,497 просмотров • 1 год назад

Citrix admins, your weekend plans just changed. CVE-2026-8452 was disclosed as a NetScaler memory overflow / DoS. Now watchTowr has dropped a Pre-Auth RCE PoC. Internet-facing edge appliances. No authentication. RCE. #ReverseEngineering #VulnerabilityResearch #Infosec
0:31

Citrix admins, your weekend plans just changed. CVE-2026-8452 was disclosed as a NetScaler memory overflow / DoS. Now watchTowr has dropped a Pre-Auth RCE PoC. Internet-facing edge appliances. No authentication. RCE. #ReverseEngineering #VulnerabilityResearch #Infosec

cr3ghost

17,416 просмотров • 1 месяц назад

CVE-2026-34348 exploitation demo from my #BHUSA "Pass-the-Passkey Family of Attacks" talk: WebAuthn assertion from recent YubiKey authentication is extracted from Windows Event Log and replayed against Microsoft Entra ID using Passkey Injector. Whitepaper:
0:29

CVE-2026-34348 exploitation demo from my #BHUSA "Pass-the-Passkey Family of Attacks" talk: WebAuthn assertion from recent YubiKey authentication is extracted from Windows Event Log and replayed against Microsoft Entra ID using Passkey Injector. Whitepaper:

📔 Michael Grafnetter

123,564 просмотров • 1 месяц назад

🚨CVE-2024-40725: Apache 2.4.0/2.4.61 HTTP Request Smuggling... Using Custom Nuclei Template CVSS: 5.3 PoC: Via:
2:03

🚨CVE-2024-40725: Apache 2.4.0/2.4.61 HTTP Request Smuggling... Using Custom Nuclei Template CVSS: 5.3 PoC: Via:

Dark Web Informer

21,030 просмотров • 1 год назад