Video wird geladen...

Video konnte nicht geladen werden

Zur Startseite

We successfully achieved an RCE on GitLab in its default configuration. Historically, most GitLab RCEs have lived in the web or application-logic layers. This time, guided by the depthfirst spirit, we went deeper: into the low-level gem dependency chain beneath GitLab. The result? By sending crafted JSON data, we...

wupco1996's profile picture

Yuhang Wu

1,489 subscribers

102,590 Aufrufe • vor 2 Monaten •via X (Twitter)

Wissenschaft & Technologie
LIVE

Anya Rossi• Live Now

Private livecam show

17 Kommentare

Profilbild von Yuhang Wu
Yuhang Wuvor 2 Monaten

GitLab OJ Spill overview: Technical details: Demo and PoC:

Profilbild von depthfirst
depthfirstvor 2 Monaten

Incredible work @wupco1996 and team

Profilbild von Francesco Piccoli
Francesco Piccolivor 2 Monaten

@depthfirstlabs This is huge

Profilbild von QM
QMvor 2 Monaten

@depthfirstlabs It's impressive that the @depthfirstlabs platform did exactly what it was designed to do. From finding a critical vulnerability in Oj to finding that it's exploitable in gitlab, which is used by many of the largest organizations on the planet.

Profilbild von Federico
Federicovor 2 Monaten

@depthfirstlabs insane I can't wait to see what you publish next :)

Profilbild von Yueqi Chen
Yueqi Chenvor 2 Monaten

@depthfirstlabs unstoppable

Profilbild von STJ
STJvor 2 Monaten

@depthfirstlabs absolutely insane work by the team

Profilbild von Adam
Adamvor 2 Monaten

@depthfirstlabs wow!

Profilbild von Quang Vo
Quang Vovor 2 Monaten

@depthfirstlabs Did you guys defeat ASLR ?

Profilbild von Amitai Cohen
Amitai Cohenvor 2 Monaten

@depthfirstlabs Nice! What's the CVE ID? GitLab's patch notes don't mention anything matching the description in your writeup (as far as I can tell), they simply link to the commit bumping oj's version.

Profilbild von Yuhang Wu
Yuhang Wuvor 2 Monaten

@depthfirstlabs We did not request CVE identifiers. We reported the GitLab vulnerability to GitLab through its HackerOne vulnerability disclosure program. No separate CVE identifier was assigned to us for the GitLab-level exploit chain during that process.😂

Profilbild von Amitai Cohen
Amitai Cohenvor 2 Monaten

@depthfirstlabs Thanks - do any of the oj CVEs you mentioned correspond to the exploit chain in GitLab? They shouldn't assign a separate CVE if the vulnerability stems from a dependency.

Profilbild von steve
stevevor 2 Monaten

@depthfirstlabs Really impressive work 👏

Profilbild von Tanmay Gupta
Tanmay Guptavor 2 Monaten

@depthfirstlabs this is amazing!!

Profilbild von Zeddy
Zeddyvor 2 Monaten

@depthfirstlabs Could u teach me plz, Master. Wu?

Profilbild von sanzhang
sanzhangvor 2 Monaten

@chybeta @depthfirstlabs good job

Profilbild von Staatse
Staatsevor 2 Monaten

@depthfirstlabs Wow 🙌

Ähnliche Videos

"You could have a situation where the model understands what chain of thought is and that people are observing it. This is all in the pre-training data." “One of the major takeaways from the incident is that people underestimated the AI. And we never want to be in a situation again where we underestimate the AI.” "Things like chain of thought monitoring buy us time, and they can tell us if we're on the right path. But at the end of the day, we really do need to solve the alignment problem." Noam Brown
3:17

"You could have a situation where the model understands what chain of thought is and that people are observing it. This is all in the pre-training data." “One of the major takeaways from the incident is that people underestimated the AI. And we never want to be in a situation again where we underestimate the AI.” "Things like chain of thought monitoring buy us time, and they can tell us if we're on the right path. But at the end of the day, we really do need to solve the alignment problem." Noam Brown

Dwarkesh Patel

135,228 Aufrufe • vor 1 Monat

I have spent the last 11 years building in this industry but 2025 was by far the most exciting. My last video of the year with some reflections on everything we accomplished together with the ZIG Chain community, and whats ahead in 2026 👇
2:37

I have spent the last 11 years building in this industry but 2025 was by far the most exciting. My last video of the year with some reflections on everything we accomplished together with the ZIG Chain community, and whats ahead in 2026 👇

Abdul Rafay Gadit

110,968 Aufrufe • vor 9 Monaten

Almost 1 year with an impenetrable vision, we want to show you in this video a small summary of what we have lived inside the server with more members. #WEAREELITE and if you would like to join us and meet us, you can find the application link here
0:48

Almost 1 year with an impenetrable vision, we want to show you in this video a small summary of what we have lived inside the server with more members. #WEAREELITE and if you would like to join us and meet us, you can find the application link here

Élite

21,754 Aufrufe • vor 3 Jahren

Andy Burnham: Brexit hasn’t given us control. We’ve lost some of the control we had over our economy, as a decade of low growth has put us in a weaker position. And we’ve lost some of our control over immigration. At its most fundamental level, this is a debate about fairness, so I understand the anger about what’s happening in the Channel.
0:43

Andy Burnham: Brexit hasn’t given us control. We’ve lost some of the control we had over our economy, as a decade of low growth has put us in a weaker position. And we’ve lost some of our control over immigration. At its most fundamental level, this is a debate about fairness, so I understand the anger about what’s happening in the Channel.

Clash Report

13,426 Aufrufe • vor 20 Tagen

The house of the Lord is where we can be transformed in higher and holier ways. So when we walk out of the temple, transformed by our hope in the promises of the covenants, armed with power from on high, we take the temple with us into our homes and lives. I assure you that having the Spirit of the Lord’s house in us changes us completely. #GeneralConference
0:23

The house of the Lord is where we can be transformed in higher and holier ways. So when we walk out of the temple, transformed by our hope in the promises of the covenants, armed with power from on high, we take the temple with us into our homes and lives. I assure you that having the Spirit of the Lord’s house in us changes us completely. #GeneralConference

Ulisses Soares

27,125 Aufrufe • vor 2 Jahren

Web3 belongs in the mainstream. Bill Laboon | Web3 Foundation joined Good Morning Britain Good Morning Britain yesterday to discuss our latest research on privacy, data, and the everyday internet. This is the work we love! We take the ideas behind Web3 beyond our industry and into the conversations shaping how people think about the future of the web.
1:24

Web3 belongs in the mainstream. Bill Laboon | Web3 Foundation joined Good Morning Britain Good Morning Britain yesterday to discuss our latest research on privacy, data, and the everyday internet. This is the work we love! We take the ideas behind Web3 beyond our industry and into the conversations shaping how people think about the future of the web.

Web3 Foundation

47,809 Aufrufe • vor 20 Tagen

My father, #MartinLutherKingJr., said, “There is some good in the worst of us and some evil in the best of us.” This reminds us that no one is perfect—we all have strengths and flaws. Instead of judging others by appearances, let’s take time to see their hearts and lead with love. When we focus on the good in others, we create space for growth, understanding, and transformation. #BeLovedCommunity #MissionPossibleMLK
1:03

My father, #MartinLutherKingJr., said, “There is some good in the worst of us and some evil in the best of us.” This reminds us that no one is perfect—we all have strengths and flaws. Instead of judging others by appearances, let’s take time to see their hearts and lead with love. When we focus on the good in others, we create space for growth, understanding, and transformation. #BeLovedCommunity #MissionPossibleMLK

Be A King

19,783 Aufrufe • vor 1 Jahr

#WATCH | On India's position in the West Asia conflict, former R&AW Chief Vikram Sood, in an interview with ANI, says, "Israel is our friend. We have close ties; we are dependent on them for a lot of things which relate to our security... But this attack on Iran and the assassination or murder of the prior leader tantamounts to murder and a state taking the law into its own hands. This is followed up by Americans joining in the same thing in an undeclared war against a country... We won't say that Israel is not our friend, but we will say that this killing was unfortunate and could have been avoided. There is no other position we can take. We are dependent on the Strait (of Hormuz), not on Iran... We didn't bring it upon ourselves, nor did Iran bring it upon us. It was brought upon us because of the attacks by the Israelis and the Americans." Watch full interview here:
3:32

#WATCH | On India's position in the West Asia conflict, former R&AW Chief Vikram Sood, in an interview with ANI, says, "Israel is our friend. We have close ties; we are dependent on them for a lot of things which relate to our security... But this attack on Iran and the assassination or murder of the prior leader tantamounts to murder and a state taking the law into its own hands. This is followed up by Americans joining in the same thing in an undeclared war against a country... We won't say that Israel is not our friend, but we will say that this killing was unfortunate and could have been avoided. There is no other position we can take. We are dependent on the Strait (of Hormuz), not on Iran... We didn't bring it upon ourselves, nor did Iran bring it upon us. It was brought upon us because of the attacks by the Israelis and the Americans." Watch full interview here:

ANI

85,019 Aufrufe • vor 6 Monaten

Robinhood Head of Crypto explains why they’re building an L2 on Ethereum “We wanted the decentralization and security of Ethereum. We also wanted the liquidity available in the EVM space. So that’s why we decided to do an L2 — that way we can customize everything we want to do to really make The Robinhood Chain the best real world asset chain, and at the same time, have all the benefits of Ethereum.” Source: Anthony Pompliano 🌪
1:19

Robinhood Head of Crypto explains why they’re building an L2 on Ethereum “We wanted the decentralization and security of Ethereum. We also wanted the liquidity available in the EVM space. So that’s why we decided to do an L2 — that way we can customize everything we want to do to really make The Robinhood Chain the best real world asset chain, and at the same time, have all the benefits of Ethereum.” Source: Anthony Pompliano 🌪

Etherealize

18,849 Aufrufe • vor 6 Monaten

High-level forces need a high-level communications system to execute on marketing and coordinate objectives. Creating jobs for other human beings is amongst the best things you can do as a person on this planet. Now we have an interface to power this process for our community, powered by Robinhood Chain and payable in Stock Tokens. Naturally, L.A.U.R.A has entered as the moderator of Pager. Long term, I believe with the proper execution we can turn 'Pager' into a crypto-powered encrypted messaging IOS and Android communication application and jobs platform powered by Robinhood Chain. check out the video below.
2:28

High-level forces need a high-level communications system to execute on marketing and coordinate objectives. Creating jobs for other human beings is amongst the best things you can do as a person on this planet. Now we have an interface to power this process for our community, powered by Robinhood Chain and payable in Stock Tokens. Naturally, L.A.U.R.A has entered as the moderator of Pager. Long term, I believe with the proper execution we can turn 'Pager' into a crypto-powered encrypted messaging IOS and Android communication application and jobs platform powered by Robinhood Chain. check out the video below.

SimpleFarmer

19,992 Aufrufe • vor 29 Tagen

Peskov: It is practically impossible to discuss the security system in Europe - and speaking about security guarantees and the security system is probably difficult in general - without the participation of Europeans. At some stage, of course, this will be necessary. But right now, the only substantive thing is the American project, Trump's project. We believe that this could be a very good basis for negotiations, and our president has also spoken about this. We still hold this view. The time will come, and we will look into this matter in detail.
1:23

Peskov: It is practically impossible to discuss the security system in Europe - and speaking about security guarantees and the security system is probably difficult in general - without the participation of Europeans. At some stage, of course, this will be necessary. But right now, the only substantive thing is the American project, Trump's project. We believe that this could be a very good basis for negotiations, and our president has also spoken about this. We still hold this view. The time will come, and we will look into this matter in detail.

Anton Gerashchenko

176,433 Aufrufe • vor 10 Monaten

#WATCH | Shimla, Himachal Pradesh | SP Sanjeev Kumar says, "... We have busted an interstate gang involved in drug supply operations in our districts under the mission Mission Clean. We have made 17 arrests and 9 arrests have been made in the last 24 hours... This is a huge supply chain where the criminals follow an online business model... One of the key figures, Sandeep Shah was operating this chain... At the local level, they employed 'super spreaders', or retailers... We found that over 200 people are involved in this... We got good catches in January and arrested over 50 people and registered 21 cases..."
4:24

#WATCH | Shimla, Himachal Pradesh | SP Sanjeev Kumar says, "... We have busted an interstate gang involved in drug supply operations in our districts under the mission Mission Clean. We have made 17 arrests and 9 arrests have been made in the last 24 hours... This is a huge supply chain where the criminals follow an online business model... One of the key figures, Sandeep Shah was operating this chain... At the local level, they employed 'super spreaders', or retailers... We found that over 200 people are involved in this... We got good catches in January and arrested over 50 people and registered 21 cases..."

ANI

10,615 Aufrufe • vor 1 Jahr

An AI agent broke out of its sandboxes. The vulnerabilities it used were already public. "Our recommendation to providers in the ClusterMAX rankings is literally just keep your stuff up to date. If there are existing vulnerabilities that have been described publicly in popular software, this could be anything from Docker to the NVIDIA driver to Kubernetes or the Linux kernel. Clearly people, and in this case agents, can just read that description and then build an exploit from it."
1:58

An AI agent broke out of its sandboxes. The vulnerabilities it used were already public. "Our recommendation to providers in the ClusterMAX rankings is literally just keep your stuff up to date. If there are existing vulnerabilities that have been described publicly in popular software, this could be anything from Docker to the NVIDIA driver to Kubernetes or the Linux kernel. Clearly people, and in this case agents, can just read that description and then build an exploit from it."

SemiAnalysis

25,529 Aufrufe • vor 1 Monat

Ukraine greatly values its relations with Türkiye, the mutual understanding we share, and the support we receive in this extraordinary time of war. We are grateful for the warm welcome, hospitality and absolutely constructive approach in our negotiations. Today, together with President of Türkiye Recep Tayyip Erdoğan, we discussed in detail the global processes that could contribute to ending Russia's war against Ukraine, including the importance of joint efforts to ensure security guarantees for Ukraine. We also talked about our bilateral relations, economic issues, cooperation between our societies in education, various projects, food security, and work on the return of our prisoners held by Russia. We are grateful to Türkiye for all the support to our country and people, for its principled stance on the sovereignty and territorial integrity of our state. 🇺🇦🇹🇷
0:22

Ukraine greatly values its relations with Türkiye, the mutual understanding we share, and the support we receive in this extraordinary time of war. We are grateful for the warm welcome, hospitality and absolutely constructive approach in our negotiations. Today, together with President of Türkiye Recep Tayyip Erdoğan, we discussed in detail the global processes that could contribute to ending Russia's war against Ukraine, including the importance of joint efforts to ensure security guarantees for Ukraine. We also talked about our bilateral relations, economic issues, cooperation between our societies in education, various projects, food security, and work on the return of our prisoners held by Russia. We are grateful to Türkiye for all the support to our country and people, for its principled stance on the sovereignty and territorial integrity of our state. 🇺🇦🇹🇷

Volodymyr Zelenskyy / Володимир Зеленський

936,638 Aufrufe • vor 1 Jahr

The world we live in is run on BLACKMAIL, LIES, and CORRUPTION. A wealthy elite group of families from a specific group of bloodlines sit at the top of this global power structure. They use children as blackmail tools for their operations and occult belief systems to control governments and people in high places all around the world. It's time we come together, set aside our differences and put our time and energy into defeating the real enemy of We, The People.
32:57

The world we live in is run on BLACKMAIL, LIES, and CORRUPTION. A wealthy elite group of families from a specific group of bloodlines sit at the top of this global power structure. They use children as blackmail tools for their operations and occult belief systems to control governments and people in high places all around the world. It's time we come together, set aside our differences and put our time and energy into defeating the real enemy of We, The People.

The SCIF

225,943 Aufrufe • vor 11 Monaten

The most important question about AI is not what machines can do, but what they can awaken in us. This can be AI’s greatest gift: forcing us to rediscover the mysteries that lie outside its reach of reason. If we make the most of this moment, if we pour as much attention and resources into building our humanity as we are into building AI, we can use it to reclaim the wisdom, the wonder and the transcendent at the center of our being — the last infinite frontier.
0:35

The most important question about AI is not what machines can do, but what they can awaken in us. This can be AI’s greatest gift: forcing us to rediscover the mysteries that lie outside its reach of reason. If we make the most of this moment, if we pour as much attention and resources into building our humanity as we are into building AI, we can use it to reclaim the wisdom, the wonder and the transcendent at the center of our being — the last infinite frontier.

Arianna Huffington

12,989 Aufrufe • vor 1 Monat