Tuesday 28 July 2026 18:38:37 GMT+02:00

Netcrook

HomeManifesto
News
Corporate Security IncidentsCloud, SaaS & Identity SecurityIndustrial Cybersecurity & Critical InfrastructureCyber Intelligence, TrendsAI Security & Agentic SystemsCyber Intelligence & Threat TrendsCyber WarfareCyber Warfare & Nation-State OperationsCyber CriminalityBreaches & Data LeaksCybercrimeMalware & BotnetsRansomware & ExtortionSecurity Awareness & Social EngineeringLegal PolicyLegal, Policy & Government CybersecurityPrivacy, Regulation & ComplianceTechnology, InnovationTechnology, Innovation & Digital InfrastructureVulnerabilities Patch ManagementResearch, Exploits & Offensive SecurityVulnerabilities & Patch Management
Techcrook
Tutte le tecnologieIdentita e accessoFirewall e reteBackup e archiviazioneEnergia e continuitaPrivacy e sicurezza fisicaLaboratorio e prototipazioneStampa e tracciabilitaTecnologia quotidiana
Geocrook
AfricaAsiaEuropeMiddle EastNorth AmericaOceaniaSouth America
WikicrookTeamAppContactLogin
EnglishItaliano

#Jupyter Notebook

GitLab’s Notebook Feature Exposed a Hidden Parser Trap

27 July 2026 08:31Vulnerabilities & Patch ManagementNorth America / USASECURESPECTER

A review workflow for Jupyter notebooks became a potential server-side execution path, showing how one untrusted file format can become dangerous when a native parser sits in the middle.

#GitLab RCE | #Jupyter Notebook | #Oj parser

GitLab Notebook Diffs Become an RCE Trigger in a New Authenticated-User PoC

25 July 2026 12:06Research, Exploits & Offensive SecurityNorth America / USADEBUGSAGE

A published proof-of-concept shows how a normal project account, two crafted Jupyter notebooks, and a diff request can turn a review feature into command execution as the Git service user.

#GitLab 18.11.3 | #RCE PoC | #Jupyter notebooks