nomi-sec/PoC-in-GitHub
1
0 Fork 0
mirror of https://github.com/nomi-sec/PoC-in-GitHub.git synced 2026-11-07 08:30:25 -10:00
Code Issues Packages Projects Releases Wiki Activity
Files
e7741b0ca952b36769abaa50fccaba10091feb21
PoC-in-GitHub/2026/CVE-2026-110264.json
T

460 lines
17 KiB
JSON
Raw Blame History

[
{
"id": 1429978873,
"name": "gitlab-onigmo-check",
"full_name": "TahuCryptsi\/gitlab-onigmo-check",
"owner": {
"login": "TahuCryptsi",
"id": 344393313,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/344393313?v=4",
"html_url": "https:\/\/github.com\/TahuCryptsi",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/TahuCryptsi\/gitlab-onigmo-check",
"description": "Local detector for CVE-2026-110264 (GitLab Onigmo regex repeat-ID overflow, CVSS 10.0 unauth RCE). One-file Ruby check + real crash transcript.",
"fork": false,
"created_at": "2026-10-22T16:10:51Z",
"updated_at": "2026-10-22T16:11:00Z",
"pushed_at": "2026-10-22T16:10:56Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1430014774,
"name": "poc-gitlab-onigmo-cve-2026-110264",
"full_name": "TahuCryptsi\/poc-gitlab-onigmo-cve-2026-110264",
"owner": {
"login": "TahuCryptsi",
"id": 344393313,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/344393313?v=4",
"html_url": "https:\/\/github.com\/TahuCryptsi",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/TahuCryptsi\/poc-gitlab-onigmo-cve-2026-110264",
"description": "CVE-2026-110264 — GitLab Unauthenticated RCE (Onigmo regex repeat-ID overflow, CVSS 10.0). Docker-verified crash PoC on ruby 3.4.11 + measured heap analysis. Crash-level, non-weaponized.",
"fork": false,
"created_at": "2026-10-22T16:43:42Z",
"updated_at": "2026-10-22T16:58:12Z",
"pushed_at": "2026-10-22T16:58:08Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 1,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [
"cve",
"gitlab",
"memory-corruption",
"onigmo",
"poc",
"rce",
"ruby",
"security"
],
"visibility": "public",
"forks": 1,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1430120131,
"name": "CVE-2026-110264",
"full_name": "al4n4n\/CVE-2026-110264",
"owner": {
"login": "al4n4n",
"id": 29759390,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/29759390?v=4",
"html_url": "https:\/\/github.com\/al4n4n",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/al4n4n\/CVE-2026-110264",
"description": "CVE-2026-110264: GitLab pre-auth RCE via Onigmo integer overflow in org-ruby. Docker-based validation, admin check script, attack surface analysis.",
"fork": false,
"created_at": "2026-10-22T18:22:11Z",
"updated_at": "2026-10-30T02:50:56Z",
"pushed_at": "2026-10-27T20:07:05Z",
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [
"cve",
"cve-2026-110264",
"docker",
"gitlab",
"integer-overflow",
"onigmo",
"org-ruby",
"ruby",
"security-research",
"vulnerability"
],
"visibility": "public",
"forks": 0,
"watchers": 2,
"score": 0,
"subscribers_count": 0
},
{
"id": 1430364193,
"name": "go-gitlab-cve-2026-110264-scanner",
"full_name": "xaviware\/go-gitlab-cve-2026-110264-scanner",
"owner": {
"login": "xaviware",
"id": 19178202,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/19178202?v=4",
"html_url": "https:\/\/github.com\/xaviware",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/xaviware\/go-gitlab-cve-2026-110264-scanner",
"description": "Fast, concurrent and non-intrusive exposure auditor in Go for GitLab CE\/EE unauthenticated RCE (CVE-2026-110264 - CVSS 10.0)",
"fork": false,
"created_at": "2026-10-22T23:11:41Z",
"updated_at": "2026-10-22T23:11:50Z",
"pushed_at": "2026-10-22T23:11:46Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1430559566,
"name": "gitlab-firing-range",
"full_name": "bastet-ai\/gitlab-firing-range",
"owner": {
"login": "bastet-ai",
"id": 229820030,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/229820030?v=4",
"html_url": "https:\/\/github.com\/bastet-ai",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/bastet-ai\/gitlab-firing-range",
"description": "Authorized loopback-only Docker firing range for CVE-2026-110264 (Onigmo regex integer-overflow, unauth RCE) research + detection engineering",
"fork": false,
"created_at": "2026-10-23T04:07:47Z",
"updated_at": "2026-10-23T21:06:12Z",
"pushed_at": "2026-10-23T21:06:08Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1430633457,
"name": "gitlab-patch-check",
"full_name": "TheGlitchFixer\/gitlab-patch-check",
"owner": {
"login": "TheGlitchFixer",
"id": 342489859,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/342489859?v=4",
"html_url": "https:\/\/github.com\/TheGlitchFixer",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/TheGlitchFixer\/gitlab-patch-check",
"description": "Check whether your self-hosted GitLab version is patched against CVE-2026-110264 (CVSS 10.0 RCE) — companion script for The Homelab Fixer guide.",
"fork": false,
"created_at": "2026-10-23T05:51:29Z",
"updated_at": "2026-10-23T05:52:17Z",
"pushed_at": "2026-10-23T05:52:13Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1430993966,
"name": "GitLab2Safe-Defensive-Checker",
"full_name": "farimazhar\/GitLab2Safe-Defensive-Checker",
"owner": {
"login": "farimazhar",
"id": 266004518,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/266004518?v=4",
"html_url": "https:\/\/github.com\/farimazhar",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/farimazhar\/GitLab2Safe-Defensive-Checker",
"description": "100% Defensive Scanner for CVE-2026-110264 GitLab Arbitrary File Write (PHP2Shell) - No exploit code, only version & patch detection for security teams and learners.",
"fork": false,
"created_at": "2026-10-23T12:04:25Z",
"updated_at": "2026-10-23T13:30:06Z",
"pushed_at": "2026-10-23T12:11:11Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [
"bug-bounty",
"cve-",
"cve-2026-110264",
"cybersecurity",
"defensive-security",
"detector",
"gitlab",
"infosec",
"python-securoty",
"vulnerability-scanner"
],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1431283308,
"name": "regex2shell",
"full_name": "FranklinF25\/regex2shell",
"owner": {
"login": "FranklinF25",
"id": 96183613,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/96183613?v=4",
"html_url": "https:\/\/github.com\/FranklinF25",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/FranklinF25\/regex2shell",
"description": "regex2shell (CVE-2026-110264 + family) — GitLab\/Onigmo unauth regex RCE research: safe differential detector, deterministic interpreter kill, match-time write primitive",
"fork": false,
"created_at": "2026-10-23T16:24:57Z",
"updated_at": "2026-10-25T02:50:47Z",
"pushed_at": "2026-10-25T02:50:43Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1431361174,
"name": "onigmo-cve-2026-110264",
"full_name": "lesterlam\/onigmo-cve-2026-110264",
"owner": {
"login": "lesterlam",
"id": 8011680,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/8011680?v=4",
"html_url": "https:\/\/github.com\/lesterlam",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/lesterlam\/onigmo-cve-2026-110264",
"description": "Reproduction lab for CVE-2026-110264 - the 16-bit ID overflow in Onigmo, the regexp engine Ruby bundles (GitLab CE\/EE, CVSS 10.0). Standalone engine build + A\/B against the vendor fix. Trigger condition only; no weaponised exploit.",
"fork": false,
"created_at": "2026-10-23T17:39:22Z",
"updated_at": "2026-10-24T00:41:13Z",
"pushed_at": "2026-10-24T00:41:09Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [
"cve-2026-110264",
"gitlab",
"memory-corruption",
"onigmo",
"regexp",
"security-lab"
],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1431917849,
"name": "CVE-2026-110264",
"full_name": "googlesky\/CVE-2026-110264",
"owner": {
"login": "googlesky",
"id": 4094347,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/4094347?v=4",
"html_url": "https:\/\/github.com\/googlesky",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/googlesky\/CVE-2026-110264",
"description": "PoC, reproducible labs, live evidence, Nuclei fingerprint, and technical report for CVE-2026-110264 — GitLab Org-mode\/Onigmo unauthenticated RCE (CVSS 10.0); render oracle validated on GitLab CE 19.3.1.",
"fork": false,
"created_at": "2026-10-24T07:11:16Z",
"updated_at": "2026-10-24T07:11:31Z",
"pushed_at": "2026-10-24T07:12:02Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [
"cve-2026-110264",
"gitlab",
"nuclei",
"onigmo",
"org-mode",
"poc",
"proof-of-concept",
"rce",
"remote-code-execution",
"ruby",
"security-research",
"vulnerability-research"
],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1432260995,
"name": "Exploit-CVE-2026-110264-GitLab-CE-EE-RCE",
"full_name": "Masriyan\/Exploit-CVE-2026-110264-GitLab-CE-EE-RCE",
"owner": {
"login": "Masriyan",
"id": 15161949,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/15161949?v=4",
"html_url": "https:\/\/github.com\/Masriyan",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/Masriyan\/Exploit-CVE-2026-110264-GitLab-CE-EE-RCE",
"description": null,
"fork": false,
"created_at": "2026-10-24T14:23:32Z",
"updated_at": "2026-10-24T14:40:50Z",
"pushed_at": "2026-10-24T14:40:47Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 1,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 1,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1432507495,
"name": "CVE-2026-110264",
"full_name": "mehmet-emir-eroglu\/CVE-2026-110264",
"owner": {
"login": "mehmet-emir-eroglu",
"id": 206140722,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/206140722?v=4",
"html_url": "https:\/\/github.com\/mehmet-emir-eroglu",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/mehmet-emir-eroglu\/CVE-2026-110264",
"description": "Non-invasive Python detector for CVE-2026-110264 in GitLab, featuring version checks, offline log analysis, and JSON reporting.",
"fork": false,
"created_at": "2026-10-24T19:06:47Z",
"updated_at": "2026-10-28T19:23:13Z",
"pushed_at": "2026-10-24T19:09:31Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [
"cve",
"cybersecurity",
"gitlab",
"info-sec",
"log-analysis",
"open-source",
"python",
"security-tools",
"threat-detection",
"vulnerability-detection"
],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
Reference in new issue View Git Blame Copy Permalink