Vulnerabilities
GitLab CVSS 10 Regex RCE on CISA KEV After Alpine Attack
CISA's KEV now lists a CVSS 10 GitLab RCE hiding in Ruby's regex engine — and Alpine's near-miss shows why upgrading GitLab alone may not fix it.
CyberROI coverage tagged “integer overflow”.
CISA's KEV now lists a CVSS 10 GitLab RCE hiding in Ruby's regex engine — and Alpine's near-miss shows why upgrading GitLab alone may not fix it.
Calif chained a 37-year-old SysV integer overflow with an OOB write to get root on OpenBSD 7.9 past KARL, SMAP and SMEP — and the PoC is already public.