CVE-2026-85706
eqstlab/cve-2026-85706PoC and Docker lab for CVE-2026-85706, an unauthenticated arbitrary file read in GitLab CE/EE via the commits API route bypass and urlencoded error…
data-exfiltrationexploitationinformation-gathering+5
23
eqstlab/cve-2026-85706PoC and Docker lab for CVE-2026-85706, an unauthenticated arbitrary file read in GitLab CE/EE via the commits API route bypass and urlencoded error…
unh00k3d/cve-2026-85706Root-cause analysis, vulnerable Docker lab, and PoC scripts for CVE-2026-85706, an unauthenticated arbitrary file read in GitLab via a Workhorse/Puma…
tc4dy/cve-2026-85706-poc-toolkitPython toolkit for CVE-2026-85706 GitLab unauth file read: weaponized exploit with loot, shell, mass scan, plus non-intrusive SafeChecker audit and…
plur1bu5/gitreadCVE-2026-85706 · GitLab CE/EE unauthenticated file read · research PoC with oracle mode, fd enumeration, and tiered loot targeting
gabrielunknown/cve-2026-85706Perl PoC exploiting CVE-2026-85706, an unauthenticated GitLab path traversal enabling arbitrary file read, with bulk scanning and credential…
gagaltotal/cve-2026-85706-gitlab-pocGo exploit for CVE-2026-85706, an unauthenticated arbitrary file read in GitLab CE/EE Workhorse via URL-encoding bypass, with concurrent requests and…
0xlyvio/cve-2026-85706-poc-exploit-gitlabPoC exploit and writeup for CVE-2026-85706, an unauthenticated arbitrary local file read in GitLab CE/EE via Workhorse path-encoding bypass.
solivaquaant/cve-2026-85706Proof-of-concept and reproduction lab for CVE-2026-85706, an unauthenticated path-traversal file read in GitLab CE/EE repository commits and files…
ynsmroztas/gitlabsniperSingle-file Python scanner and exploit for CVE-2026-85706, an unauthenticated arbitrary file read in self-managed GitLab CE/EE, with project…
guneykabel/cve-2026-85706Python PoC exploit for CVE-2026-85706, an unauthenticated arbitrary file read in GitLab CE/EE via Workhorse path-encoding bypass, with writeup and…
mhtsec/cve-2026-85706Python PoC for CVE-2026-85706, an unauthenticated path traversal in GitLab CE/EE Repository Commits API that leaks arbitrary local files via a…
solivaquaant/cve-2026-85706-pocPoC for CVE-2026-85706: GitLab CE/EE unauthenticated arbitrary local file read
flowerwitch/cve-2026-85706_docker_expDocker-based reproduction environment and PoC for CVE-2026-85706, demonstrating GitLab LFI bypass via .json suffix and trailing slash path tricks.
feartheploto/gitlab-cve-2023-7028Mock vulnerable GitLab instance reproducing CVE-2023-7028 password reset hijack. Demonstrates array-based email parameter exploitation and account…
eqstlab/cve-2026-19478Proof-of-concept exploit for CVE-2026-19478, an unauthenticated GraphQL injection in GitLab CE/EE allowing arbitrary method invocation and project…
osungjinwoo/cve-2021-22205-gitlabPython exploit for GitLab CVE-2021-22205, enabling remote command execution and reverse shells on vulnerable GitLab CE/EE versions. Includes batch…
kh4sh3i/gitlab-ssrf-cve-2021-22214Proof-of-concept exploit for CVE-2021-22214, a server-side request forgery in GitLab webhooks, allowing unauthenticated attackers to make internal…
googlei1996/cve-2023-7028Proof-of-concept exploit for CVE-2023-7028, a GitLab account takeover vulnerability via email confirmation bypass, demonstrating the attack with…