Skip to content
The Nexus
DossierENTITY

proof-of-concept

Coverage of proof-of-concept in the Nexus archive.

Earliest in view: Jun 4 · 16:55 UTCMost recent: Jul 25 · 08:34 UTC
Co-mentioned in this coverage
Yuhang Wuperson1depthfirstorganization1GitLaborganization1Jupyter notebookstopic1Remote Code Execution (RCE)topic1Ciscoorganization1CVE-2026-20230topic1Unified Communications Managertopic1server-side request forgerytopic1PSIRTorganization1
Recent coverage
  • SECURITYJul 25 · 08:34 UTCTHE HACKER NEWS
    Researcher Publishes GitLab RCE PoC Letting Authenticated Users Run Commands as Git

    Security researcher Yuhang Wu at depthfirst published a proof-of-concept exploit for a GitLab vulnerability that allows authenticated users to execute commands as 'git' on unpatched self-managed GitLab 18.11.3 servers. The exploit involves committing two crafted Jupyter notebooks and requesting their diff, requiring no administrator rights or victim interaction.

  • SECURITYJun 4 · 16:55 UTCTHE HACKER NEWS
    Cisco Patches CVE-2026-20230 in Unified CM as Exploit Code Goes Public

    Cisco has patched a server-side request forgery vulnerability (CVE-2026-20230) in Unified Communications Manager, allowing unauthenticated attackers to write files and escalate to root. Proof-of-concept exploit code is now public, though Cisco's PSIRT reports no observed attacks yet.