Tag: repository exploitation
2 articles
GitLab Discloses Path Traversal Flaw Exploited in Wild
GitLab has revealed a critical path traversal flaw, CVE-2026-85706, that allows unauthenticated users to access sensitive files on its servers, and security researchers have already spotted attackers probing for vulnerabilities in the wild. This maximum-severity bug, scoring a CVSS 10.0, enables hackers to read arbitrary files, including log files and configuration files.
Cursor Flaw Enables Malicious Repositories to Execute Windows Code
A newly discovered flaw in Cursor allows malicious repositories to run Windows code simply by opening a project, exploiting a vulnerability that lets it execute any git.exe file found in the repository root without warning. This alarming exploit requires no prior access to the victim's machine, making it a serious security risk.