Skip to content
The Nexus
DossierENTITY

Yuhang Wu

Coverage of Yuhang Wu in the Nexus archive.

Earliest in view: Jul 25 · 08:34 UTCMost recent: Jul 25 · 08:34 UTC
Co-mentioned in this coverage
depthfirstorganization1GitLaborganization1Jupyter notebookstopic1proof-of-concepttopic1Remote Code Execution (RCE)topic1
Recent coverage
  • SECURITYJul 25 · 08:34 UTCTHE HACKER NEWS
    Researcher Publishes GitLab RCE PoC Letting Authenticated Users Run Commands as Git

    Security researcher Yuhang Wu at depthfirst published a proof-of-concept exploit for a GitLab vulnerability that allows authenticated users to execute commands as 'git' on unpatched self-managed GitLab 18.11.3 servers. The exploit involves committing two crafted Jupyter notebooks and requesting their diff, requiring no administrator rights or victim interaction.

Yuhang Wu · Dossier · The Nexus