#letting


Researcher Publishes GitLab RCE PoC Letting Authenticated Users Run Commands as Git

Jul 25, 2026 // 12:10

Security researcher Yuhang Wu at depthfirst has published a working proof-of-concept (PoC) exploit that executes commands as git on an unpatched self-managed GitLab 18.11.3 server. […]

Apple Patches Beats Studio Buds Flaw Letting Nearby Attackers Spy via Microphone

Jun 19, 2026 // 11:38

Apple has updated its Beats Studio Buds wireless earbuds to patch a high-severity vulnerability that could be exploited by nearby hackers to eavesdrop on users. […]