Skip to content
Threat Feed
Subscribe

Vendor

Bytebase

2 briefs RSS
critical advisory

Bytebase: Authentication bypass via GitLab provider configuration (CVE-2022-51026)

Bytebase versions prior to 1.0.1 are vulnerable to an authentication bypass in the GitLab login flow, allowing unauthenticated attackers to impersonate any user, including administrative accounts.

Bytebase
1r 2t 1c
high threat

DNS Rebinding Vulnerability in DBHub HTTP Transport

DBHub 0.21.2 fails to securely validate hostnames in its HTTP transport mode, allowing attackers to use DNS rebinding to execute arbitrary SQL queries via a victim's browser.

exploited DBHub +1 web-vulnerability dns-rebinding database-security vulnerability rce
4t