Vulnerabilities
GitLab Patches Critical Remote Code Execution in Self-Managed Instances
Unauthenticated attackers can execute code on servers running versions since 2014. Fixes were released on 21 October.
critical vulnerability
Everything Packet Tribune has reported about critical vulnerability: 2 stories, newest first. Part of our Vulnerabilities coverage.
Vulnerabilities
Databasus API Flaw Allows Unrestricted Brute-Force of Password Reset Codes
A critical flaw in Databasus versions up to 3.61.0 allows attackers to guess six-digit reset codes without rate limits, risking full account takeover.