Video yükleniyor...

Video Yüklenemedi

Ana Sayfaya Dön

GitLab Authentication Bypass (CVE-2024-45409) : credits Harsh Jaiswal Rahul Maini

binitamshah's profile picture

Binni Shah

140,215 subscribers

119,316 görüntüleme • 2 yıl önce •via X (Twitter)

Haberler & PolitikaBilim & Teknoloji
LIVE

Anya Rossi• Live Now

Private livecam show

6 Yorum

Adya profil fotoğrafı
Adya2 yıl önce

@rootxharsh @iamnoooob oh wow

ابو حنانه profil fotoğrafı
ابو حنانه2 yıl önce

@rootxharsh @iamnoooob You are very good

Jorge profil fotoğrafı
Jorge2 yıl önce

@rootxharsh @iamnoooob well well well…

zz ttstorm profil fotoğrafı
zz ttstorm2 yıl önce

@rootxharsh @iamnoooob wow

patrowl_io profil fotoğrafı
patrowl_io2 yıl önce

@rootxharsh @iamnoooob Thanks you @binitamshah ! We automate CVE management and we made continuous penetration testing 🚀

AlexzandeR profil fotoğrafı
AlexzandeR2 yıl önce

@rootxharsh @iamnoooob query for shodan or fofa ?

Benzer Videolar

🚨CVE-2025-31161: Authentication Bypass Vulnerability in CrushFTP Credit: Exploit:
8:14

🚨CVE-2025-31161: Authentication Bypass Vulnerability in CrushFTP Credit: Exploit:

Dark Web Informer

36,563 görüntüleme • 1 yıl önce

This video shows my PoC for libssh CVE-2023-2283 (authentication bypass vuln). The attacker logs in with ED25519 authentication, despite not knowing the private key.
1:19

This video shows my PoC for libssh CVE-2023-2283 (authentication bypass vuln). The attacker logs in with ED25519 authentication, despite not knowing the private key.

Kev

173,816 görüntüleme • 3 yıl önce

🔥 We have reproduced the fresh CVE-2023-42793 in JetBrains TeamCity. Authentication bypass allows an external attacker to gain administrative access to the server and execute any commands on it. Update your software ASAP!
0:25

🔥 We have reproduced the fresh CVE-2023-42793 in JetBrains TeamCity. Authentication bypass allows an external attacker to gain administrative access to the server and execute any commands on it. Update your software ASAP!

PT SWARM

80,696 görüntüleme • 3 yıl önce

🚨CVE-2025-29927: Next.js Middleware Bypass Vulnerability PoC: Credit:
2:53

🚨CVE-2025-29927: Next.js Middleware Bypass Vulnerability PoC: Credit:

Dark Web Informer

21,021 görüntüleme • 1 yıl önce

Proxmox VE 7.x authentication bypass (pre-auth RCE)
0:27

Proxmox VE 7.x authentication bypass (pre-auth RCE)

NebuSec

225,170 görüntüleme • 1 ay önce

The biometric authentication of the #EU #AgeVerification app can be easily bypass too...
0:49

The biometric authentication of the #EU #AgeVerification app can be easily bypass too...

Baptiste Robert

31,554 görüntüleme • 5 ay önce

CVE-2024-29269: Remote Code Execution PoC Credit:
3:00

CVE-2024-29269: Remote Code Execution PoC Credit:

Dark Web Informer

72,035 görüntüleme • 1 yıl önce

CVE-2024-34470: Path Traversal vulnerability in HSC Mailinspector Credit:
0:59

CVE-2024-34470: Path Traversal vulnerability in HSC Mailinspector Credit:

Dark Web Informer

20,656 görüntüleme • 1 yıl önce

POC for CVE-2024-38063 (RCE in Windows TCP/IP) :
0:26

POC for CVE-2024-38063 (RCE in Windows TCP/IP) :

Binni Shah

41,277 görüntüleme • 2 yıl önce

KL Rahul hugs Rahul Dravid and says 'Get well soon'. ❤️ - KL also met Yashasvi Jaiswal. 🫂
0:30

KL Rahul hugs Rahul Dravid and says 'Get well soon'. ❤️ - KL also met Yashasvi Jaiswal. 🫂

Mufaddal Vohra

362,382 görüntüleme • 1 yıl önce

MALWARE DEVELOPMENT WE DEVELOPED AND INFO STEALER BYPASS WINDOW DEFENDER Screen capture File system Access Keystrokes logging Camera access Cookies and authentication collector
2:01

MALWARE DEVELOPMENT WE DEVELOPED AND INFO STEALER BYPASS WINDOW DEFENDER Screen capture File system Access Keystrokes logging Camera access Cookies and authentication collector

H4RUK1 KIRA🇯🇵

30,475 görüntüleme • 11 ay önce

🚨PoC for SysAid PreAuth RCE Chain (CVE-2025-2775, CVE-2025-2776, CVE-2025-2777, CVE-2025-2778) GitHub: Write-up:
0:25

🚨PoC for SysAid PreAuth RCE Chain (CVE-2025-2775, CVE-2025-2776, CVE-2025-2777, CVE-2025-2778) GitHub: Write-up:

Dark Web Informer

18,120 görüntüleme • 11 ay önce

GitLab is now available in Stripe Projects. Developers and AI coding agents can add GitLab to a new project in seconds, with credentials and environment variables handled automatically. Run "stripe projects add gitlab/project" to get started. Learn more:
2:06

GitLab is now available in Stripe Projects. Developers and AI coding agents can add GitLab to a new project in seconds, with credentials and environment variables handled automatically. Run "stripe projects add gitlab/project" to get started. Learn more:

🦊 GitLab

14,217 görüntüleme • 5 ay önce

🚨CVE-2024-21413 - Microsoft Outlook Remote Code Execution Vulnerability PoC (no audio) Credit:
2:37

🚨CVE-2024-21413 - Microsoft Outlook Remote Code Execution Vulnerability PoC (no audio) Credit:

Dark Web Informer

69,372 görüntüleme • 1 yıl önce

Sourav Ganguly Sachin Tendulkar K L Rahul Yashasvi Jaiswal Shubman Gill Rishabh Pant Ganguly at Leeds, 2002
2:20

Sourav Ganguly Sachin Tendulkar K L Rahul Yashasvi Jaiswal Shubman Gill Rishabh Pant Ganguly at Leeds, 2002

Cricketopia

91,497 görüntüleme • 1 yıl önce

Citrix admins, your weekend plans just changed. CVE-2026-8452 was disclosed as a NetScaler memory overflow / DoS. Now watchTowr has dropped a Pre-Auth RCE PoC. Internet-facing edge appliances. No authentication. RCE. #ReverseEngineering #VulnerabilityResearch #Infosec
0:31

Citrix admins, your weekend plans just changed. CVE-2026-8452 was disclosed as a NetScaler memory overflow / DoS. Now watchTowr has dropped a Pre-Auth RCE PoC. Internet-facing edge appliances. No authentication. RCE. #ReverseEngineering #VulnerabilityResearch #Infosec

cr3ghost

17,416 görüntüleme • 1 ay önce

CVE-2026-34348 exploitation demo from my #BHUSA "Pass-the-Passkey Family of Attacks" talk: WebAuthn assertion from recent YubiKey authentication is extracted from Windows Event Log and replayed against Microsoft Entra ID using Passkey Injector. Whitepaper:
0:29

CVE-2026-34348 exploitation demo from my #BHUSA "Pass-the-Passkey Family of Attacks" talk: WebAuthn assertion from recent YubiKey authentication is extracted from Windows Event Log and replayed against Microsoft Entra ID using Passkey Injector. Whitepaper:

📔 Michael Grafnetter

123,564 görüntüleme • 1 ay önce

🚨CVE-2024-40725: Apache 2.4.0/2.4.61 HTTP Request Smuggling... Using Custom Nuclei Template CVSS: 5.3 PoC: Via:
2:03

🚨CVE-2024-40725: Apache 2.4.0/2.4.61 HTTP Request Smuggling... Using Custom Nuclei Template CVSS: 5.3 PoC: Via:

Dark Web Informer

21,030 görüntüleme • 1 yıl önce