And we are now mirrored to https:// GitLab.com too https:// gitlab.com/JojoYou_PriEco/prie co # opensource # git # gitlab # mirror # eco # private # search # opensource # git # gitlab # mirror # eco #
mastodon:fosstodon 41d ago
net.
Posts covering unrelated security vulnerabilities in Redis and GitLab mixed with announcement of Openworker, a genAI collaboration platform. No single news story connecting these disparate technical topics.
4): unauthenticated attackers can modify or delete projects via GraphQL injection.
Hackaday articles cover industrial GPU adaptation, Pico voice controls, and 3D printed stencils. Separate posts report Dolphin X malware stealing from 300+ apps, TriBack espionage malware, and an HTTP/2 vulnerability enabling denial-of-service attacks.
Between 2026-09-22 and 2026-09-24, multiple remote code execution vulnerabilities were disclosed in Android Telecom (CVE-2026-49881), Check Point Management (CVE-2026-93616), Check Point VPN (CVE-2026-85102), ManageEngine OpManager (CVE-2026-19599), GitLab (CVE-2026-89078), and Luxion KeyShot (CVE-2026-92202). Several are actively exploited in the wild.
js patched 11 vulnerabilities in its July 2026 release. The high-severity bugs include a HTTP/2 use-after-free (CVE-2026-56848).
Critical and High-Severity GraphQL CVEs in GitLab: Code Injection and CSRF via One Directive # GitLab # CVE_2026_19478 # CVE_2026_19650 https://www.
0 vulnerability under active exploitation. Censys sees 86K+ GitLab hosts on the Internet.
🟠 HOCH · Red Hat OpenShift (oauth-proxy): Umgehen von Sicherheitsvorkehrungen möglich CERT-Bund (BSI) https://www.
German cybersecurity authority CERT-Bund published advisories on 2026-09-11 for critical vulnerabilities across six major software products: Linux Kernel, Joplin, Palo Alto Networks Cortex XDR, Langflow, Angular, and MongoDB, all rated high-severity with network-accessible attack vectors.
GitLab released emergency patches for two high-severity vulnerabilities, including a critical flaw that allows unauthenticated attackers to read files on self-managed servers. Security researchers are already observing internet-wide probes targeting these exploits, prompting urgent calls for organizations to upgrade their installations immediately.
Cluster aggregates six separate cybersecurity incidents: Check Point SmartConsole vulnerability, Google record fine, Windows NT kernel PoC, Iranian attacks on Rockwell PLCs, South Korean diplomatic academy breach, and AWS vulnerability. Events share only time period and source feed, not a narrative.
Following GitLab's September 11 disclosure of CVE-2026-85706 (path traversal, CVSS 10.0), by September 12, 2026, active exploitation probes were already being observed in the wild. CISA added it to the Known Exploited Vulnerabilities catalog with a three-day deadline for agencies to patch self-managed GitLab servers.
MSNightmare lanza BigDiskBuster, vulnerabilidad DoS en Windows Defender https:// blog.elhacker.net/2026/09/msni ghtmare-lanza-bigdiskbuster.html
GitLab released urgent patches on September 11, 2026 to address CVE-2026-85706 (CVSS 10.0), a maximum-severity path traversal flaw in the repository commits API affecting self-managed installations. The vulnerability allows unauthenticated attackers to read arbitrary files; CISA added it to the exploited vulnerabilities catalog with active in-the-wild probes within days.
🔴 KRITISCH · IBM Langflow OSS: eine Schwachstelle Zugang nötig: keine NVD (NIST) https://www.
How AI Agents Can Trigger Runaway Costs for Enterprises https://www.
Researchers at depthfirst published working proof-of-concept exploit code on July 24 for a GitLab vulnerability affecting self-managed instances (patched June 10). Authenticated users can execute commands as git via malicious Jupyter notebook commits.
Researchers Find OAuth Token Exposure in Twitch Extension Used by 30K https://www.
Between 2026-08-20 and 2026-08-24, five critical vulnerabilities were disclosed across Splunk, EverShop, and GitLab, with CVSS scores of 9.1 to 9.4. A broader CVE report for 2026-08-17 listed 515 critical vulnerabilities published that week.
Fallo en Red Hat OpenShift permite saltar chequeos PGP y publicar versiones maliciosas https:// blog.elhacker.net/2026/09/fall o-en-red-hat-openshift-permite.html
Private GitLab email addresses that allow developers to push issues or tasks to a project are being deliberately exposed in READMEs, contributing guides, and support pages used to collect bug reports.
CVE-2026-85706: Critical GitLab Path Traversal Exploited in the Wild # CVE_2026_85706 https://www.
Intermediate Backend Engineer, AMER - GitLab - Remote GitLab is the intelligent orchestration platform for DevSecOps. GitLab enables organizations to increase developer productivity, improve operational efficiency, reduce security and compliance risk, and accelerate digital transformation.
Between September 12 and 16, 2026, the U.S. Cybersecurity and Infrastructure Security Agency warned that attackers are actively exploiting critical vulnerabilities in Citrix NetScaler (authentication bypass), GitLab (maximum severity), and VMware vCenter (remote code execution patched in July). Ransomware gangs have joined attacks on unpatched VMware instances.
California Is Chasing Wealth That Has Feet L: https:// blog.landeconomics.org/p/calif ornia-is-chasing-wealth-that C: https:// news.ycombinator.com/item?id=4 9836419 posted on 2026.09.24 at 16:34:32 (c=1, p=3)