[GitLab] CVE-2023-7028 + POC
by who - Friday January 12, 2024 at 09:12 PM
#1
GitLab CE/EE Account Takeover via Password Reset without user interactions

[Image: photo-2024-01-12-15-52-50.jpg]

POC:

Hidden Content
You must register or login to view this content.
⭐ ⭐ ⭐ ⭐ ⭐ ⭐ ⭐ ⭐ ⭐ ⭐ ⭐ ⭐ ⭐ ⭐ ⭐ ⭐
⭐ ⭐ ⭐ ⭐ ⭐Sharing is Caring⭐ ⭐ ⭐ ⭐ ⭐
⭐ ⭐ ⭐ ⭐ ⭐ ⭐ ⭐ ⭐ ⭐ ⭐ ⭐ ⭐ ⭐ ⭐ ⭐ ⭐
Reply
#2
So much choice!!
https://github.com/Vozec/CVE-2023-7028
https://github.com/V1lu0/CVE-2023-7028
https://github.com/securepo/gitlab-CVE-2023-7028
https://github.com/duy-31/CVE-2023-7028
Reply
#3
what this website ?
Reply
#4
Awesome share mate! many thanks!
Reply
#5
Up to try it out!
Reply
#6
cool. thanks for sharing.
Ban reason: Leeching | http://raiddfzn73ir6iyxlf7nwytnujiflddog...an-Appeals if you feel this is incorrect. (Permanent)
Reply


Possibly Related Threads…
Thread Author Replies Views Last Post
  CVE-2024-5630 WordPress RCE via zip bypass upload HA_twck 59 6,158 Yesterday, 01:10 PM
Last Post: Shreker
  !Next.js Middleware Bypass (CVE-2025-29927) Rat1337 22 1,420 09-17-2026, 03:49 AM
Last Post: kilkiller
  new wordpress website takeover vuln (video + poc ) zinzeur 314 27,616 09-07-2026, 03:09 AM
Last Post: zai2307
  [POC] Google OAuth "MultiLogin" endpoint 0-day Farfallaiero 106 13,331 02-10-2026, 03:34 PM
Last Post: birhikayemvar
  Cool Remote Patching ETW/Amsi PoC pepeloco 6 2,135 02-08-2026, 07:58 AM
Last Post: zeroday99



 Users browsing this thread: 1 Guest(s)