CVE-2025-8110

Эксплойт Gogs RCE CVE-2025-8110 Доказательство концепции PoC для CVE-2025-8110 , критической уязвимости в Gogs, которая позволяет выполнять удалённый код RCE через манипуляции с .git/config с помощью обхода символических ссылок и инъекции sshCommand. 📖 Обзор Этот эксплойт нацелен на недостаток Pa...

CVE-2025-8110

Gogs RCE 漏洞利用 CVE-2025-8110 针对 CVE-2025-8110 的概念验证 — 通过符号链接绕过和 sshCommand 注入实现 Gogs 远程代码执行。 描述 该漏洞利用 Gogs API 中的符号链接绕过，覆盖 .git/config 并注入恶意 sshCommand，从而执行反弹 Shell。 需求 Python 3.12+ 已安装 Git 有效的 Gogs 凭据 Gogs API 令牌 安装 root@kitploit: git clone https://github.com/X4BROZER/CVE-2025-8110.git cd...

CVE-2025-8110-Silentium-HTB

CVE-2025-8110 — Gogs RCE PoC（Silentium / HackTheBox） 免责声明： 此工具仅供教育用途及授权渗透测试使用。仅限用于您已获得明确许可的系统。 这是 zAbuQasem/gogs-CVE-2025-8110 的修改版本，已适配针对 HackTheBox 平台上的 Silentium 机器。原始 PoC 需要调整以处理 Silentium 特定的 Gogs 配置和认证流程。 漏洞描述 CVE-2025-8110 是自托管 Git 服务 Gogs 中的一个远程代码执行漏洞。 Gogs 的文件更新 API 端点（PUT...

Malicious .git Configs Can Make Claude, Codex, Cursor, and Other AI Agents Run Attacker Code

Manifold Security has disclosed eight security flaws across seven command-line AI coding agents in which a repository's own Git configuration names a command that the agent runs on the developer's machine, four of them still unpatched at publication. The command executes as the user, outside the...

CVE-2025-65964

n8n Git Hooks CTF 演示 ⚠️ 本仓库仅供教育和CTF演示目的 使用。 场景 自动化平台（例如 n8n）将Git操作作为工作流的一部分。 该工作流允许通过 git config 进行任意Git配置。 攻击者控制的工作流设置： root@kitploit: core.hooksPath=hooks/ 随后，Git将从仓库目录执行钩子。 目标 演示以下内容： Git钩子在本地执行 钩子可以存在于克隆的仓库内部 滥用 core.hooksPath 可能导致命令执行 不包含任何有害命令。...

CVE-2026-19593

OpenAI Codex Desktop for Windows and macOS automatically inspected Git metadata and working-tree status when a user opened a workspace. If the workspace contains a repository with preserved attacker-controlled .git/config, the attr.tree setting and a configured clean or process filter can cause G...

CVE-2026-19593

OpenAI Codex Desktop for Windows and macOS automatically inspected Git metadata and working-tree status when a user opened a workspace. If the workspace contains a repository with preserved attacker-controlled .git/config, the attr.tree setting and a configured clean or process filter can cause G...

CVE-2026-19593

OpenAI Codex Desktop for Windows and macOS automatically inspects Git metadata when a workspace is opened. If the repository contains an attacker-controlled .git/config with the attr.tree setting and a configured clean or process filter, Git executes an attacker-controlled program outside Codex's...

EUVD-2026-69395

OpenAI Codex Desktop for Windows and macOS automatically inspected Git metadata and working-tree status when a user opened a workspace. If the workspace contains a repository with preserved attacker-controlled .git/config, the attr.tree setting and a configured clean or process filter can cause G...

CVE-2025-8110

CVE-2025-8110 — Gogs RCE PoC Silentium / HackTheBox Disclaimer: This tool is intended strictly for educational purposes and authorized penetration testing. Only use it against systems you have explicit permission to test. This is a modified version of zAbuQasem/gogs-CVE-2025-8110, adapted to work...

CVE-2025-8110-Gogs-RCE-Exploit

Exploit RCE de CVE-2025-8110 en Gogs Un exploit automatizado en Python para CVE-2025-8110 en Gogs. Esta vulnerabilidad permite la Ejecución Remota de Código RCE abusando de la API PutContents, que no valida si una ruta de archivo es un enlace simbólico. Sobrescribiendo el archivo interno...

CVE-2022-23642

PoC per Sourcegraph Gitserver 3.37.0 RCE CVE-2022-23642 Sourcegraph precedente alla 3.37.0 presenta una vulnerabilità di esecuzione di codice remota sul suo servizio gitserver. Ciò è dovuto alla mancanza di restrizioni sull'esecuzione della configurazione git, quindi "core.sshCommand" può essere...

CVE-2026-77084

n8n before 1.123.69 (and 2.x before 2.33.4 / 2.34.1 ) is affected by a code execution vulnerability in the Git node . The node executed certain repository-local git configuration values without neutralizing them, allowing arbitrary command execution as the n8n process user when a subsequent Git n...

PT-2026-78939

Name of the Vulnerable Software and Affected Versions n8n versions prior to 1.123.69 n8n versions 2.x prior to 2.33.4 n8n versions 2.x prior to 2.34.1 Description A code execution issue exists in the Git node. The node executes specific repository-local git configuration values without proper...

Linux Distros Unpatched Vulnerability : CVE-2026-76221

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GitPython before 3.1.58 contains a config-name injection vulnerability in the option-name validator that allows attackers to forge arbitrary git-config directiv...

EUVD-2026-62462

GitPython before 3.1.58 contains a config-name injection vulnerability in the option-name validator that allows attackers to forge arbitrary git-config directives by injecting equals signs, hash symbols, and whitespace into option names. Attackers can inject malicious option names like 'sshComman...

CVE-2026-76221 GitPython before 3.1.58 Config Injection via option-name

GitPython before 3.1.58 contains a config-name injection vulnerability in the option-name validator that allows attackers to forge arbitrary git-config directives by injecting equals signs, hash symbols, and whitespace into option names. Attackers can inject malicious option names like 'sshComman...

UBUNTU-CVE-2026-73622

GitPython before 3.1.55 fails to disable environment variable expansion in Remote.create and Submodule.add URL handling, allowing attackers to exfiltrate secrets by supplying URLs containing variable references. Attackers can craft URLs with environment variable tokens that are expanded into...

EUVD-2026-57826

GitPython before 3.1.55 fails to disable environment variable expansion in Remote.create and Submodule.add URL handling, allowing attackers to exfiltrate secrets by supplying URLs containing variable references. Attackers can craft URLs with environment variable tokens that are expanded into...

CVE-2026-73622 GitPython before 3.1.55 Environment Variable Exfiltration via Remote.add()

GitPython before 3.1.55 fails to disable environment variable expansion in Remote.create and Submodule.add URL handling, allowing attackers to exfiltrate secrets by supplying URLs containing variable references. Attackers can craft URLs with environment variable tokens that are expanded into...