CVE-2025-4278, -5121, 2254 and other: Multiple vulnerabilities in GitLab, 3.7 - 8.7 rating❗️
In recent patch notes, GitLab reported ten vulnerabilities, including HTML injection, XSS, DoS, and more.
Search at Netlas.io:
👉 Link: https://nt.ls/dq6qU
👉 Dork: http.favicon.hash_sha256:72a2cad5025aa931d6ea56c3201d1f18e68a8cd39788c7c80d5b2b82aa5143ef OR http.headers.set_cookie:"gitlab" OR http.headers.location:"gitlab"
Vendor's advisory: https://about.gitlab.com/releases/2025/06/11/patch-release-gitlab-18-0-2-released/#cve-2025-5121---missing-authorization-issue-impacts-gitlab-ultimate-ee
In recent patch notes, GitLab reported ten vulnerabilities, including HTML injection, XSS, DoS, and more.
Search at Netlas.io:
👉 Link: https://nt.ls/dq6qU
👉 Dork: http.favicon.hash_sha256:72a2cad5025aa931d6ea56c3201d1f18e68a8cd39788c7c80d5b2b82aa5143ef OR http.headers.set_cookie:"gitlab" OR http.headers.location:"gitlab"
Vendor's advisory: https://about.gitlab.com/releases/2025/06/11/patch-release-gitlab-18-0-2-released/#cve-2025-5121---missing-authorization-issue-impacts-gitlab-ultimate-ee
❤9
Hey Hunter's,
DarkShadow is here back again!
OpenCode RCE POC (CVE-2026-22182)
in this CVE the interesting part is, you can execute arbitrary command on the Ai agent but not using any traditional prompting just pure command injection in json💀
So guy's if you really enjoy to read POCs then show your love in react ❤️
#bugbountytips #rce #cve
DarkShadow is here back again!
OpenCode RCE POC (CVE-2026-22182)
in this CVE the interesting part is, you can execute arbitrary command on the Ai agent but not using any traditional prompting just pure command injection in json💀
So guy's if you really enjoy to read POCs then show your love in react ❤️
#bugbountytips #rce #cve
❤12🔥8👍1
#AD
😄 Large quantity of premium domains available 😎
For customers seeking the best high-quality domains 😎
✅ High Traffic Domains
✅ High DA/PA Domains
✅ High DR Domains
✅ Established network-ready domains
✅ Domains for marketing campaigns
DM 👉 @Mm_fit
🦊Channel https://t.me/cve0day
#AD
😄 Large quantity of premium domains available 😎
For customers seeking the best high-quality domains 😎
✅ High Traffic Domains
✅ High DA/PA Domains
✅ High DR Domains
✅ Established network-ready domains
✅ Domains for marketing campaigns
DM 👉 @Mm_fit
🦊Channel https://t.me/cve0day
#AD
❤4🔥2
This media is not supported in your browser
VIEW IN TELEGRAM
🔥 Chrome RCE PoC: CVE-2026-6307
A working renderer RCE Proof of Concept for CVE-2026-6307 — a V8 type-confusion bug (JS-to-Wasm deoptimization) patched in Chrome 147.0.7727.101.
✅ Full primitives (addrof/fakeobj, out-of-cage, in-cage r/w)
✅ No-ASLR RCE that patches JIT code to pop xcalc
✅ Based on Nebula Security writeup
✅ Heavily improved with frontier LLMs + human direction (4-day experiment)
This is renderer-only and still far from fully weaponized, but great for learning and research.
📥 PoC + scripts:
https://github.com/0xsha/CVE-2026-6307
#Chrome #V8 #Exploit #CVE #SecurityResearch
A working renderer RCE Proof of Concept for CVE-2026-6307 — a V8 type-confusion bug (JS-to-Wasm deoptimization) patched in Chrome 147.0.7727.101.
✅ Full primitives (addrof/fakeobj, out-of-cage, in-cage r/w)
✅ No-ASLR RCE that patches JIT code to pop xcalc
✅ Based on Nebula Security writeup
✅ Heavily improved with frontier LLMs + human direction (4-day experiment)
This is renderer-only and still far from fully weaponized, but great for learning and research.
📥 PoC + scripts:
https://github.com/0xsha/CVE-2026-6307
#Chrome #V8 #Exploit #CVE #SecurityResearch
❤4🔥2
#AD
Available SHells — any number and any quantity , any amount you want, any domain,
and any country — everything is available.
DM=> @Mm_fit
Channel= https://t.me/cve0day
#AD
Available SHells — any number and any quantity , any amount you want, any domain,
and any country — everything is available.
DM=> @Mm_fit
Channel= https://t.me/cve0day
#AD
❤3
🚨 CVE-2026-76271: Regular Expression DoS in the Discover Splunk Observability Cloud App
Critical Vulnerability Alert!
Splunk Enterprise (Discover Splunk Observability Cloud app) is affected by CVE-2026-76271.
🔍 Identify Targets via ZoomEye:
Search Dork: app="Splunk Enterprise"
Exposure: 114.3k instances identified globally.
ZoomEye Search Link:
👉 https://www.zoomeye.ai/searchResult?q=YXBwPSJTcGx1bmsgRW50ZXJwcmlzZSI%3D
#Splunk #CVE #DoS #ZoomEye
Critical Vulnerability Alert!
Splunk Enterprise (Discover Splunk Observability Cloud app) is affected by CVE-2026-76271.
🔍 Identify Targets via ZoomEye:
Search Dork: app="Splunk Enterprise"
Exposure: 114.3k instances identified globally.
ZoomEye Search Link:
👉 https://www.zoomeye.ai/searchResult?q=YXBwPSJTcGx1bmsgRW50ZXJwcmlzZSI%3D
#Splunk #CVE #DoS #ZoomEye
❤3👍2